No. Time Source Destination Protocol Length Info 1 0.000000000 123.235.96.128 [CENSORED] SSDP 284 HTTP/1.1 200 OK Frame 1: 284 bytes on wire (2272 bits), 284 bytes captured (2272 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.601100000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.601100000 seconds [Time delta from previous captured frame: 0.000000000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 0.000000000 seconds] Frame Number: 1 Frame Length: 284 bytes (2272 bits) Capture Length: 284 bytes (2272 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 123.235.96.128 (123.235.96.128), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 270 Identification: 0xafc5 (44997) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xbc17 [correct] [Good: True] [Bad: False] Source: 123.235.96.128 (123.235.96.128) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 250 Checksum: 0xa939 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: upnp:rootdevice\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 2 0.000018000 123.235.96.128 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 2: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.601118000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.601118000 seconds [Time delta from previous captured frame: 0.000018000 seconds] [Time delta from previous displayed frame: 0.000018000 seconds] [Time since reference or first frame: 0.000018000 seconds] Frame Number: 2 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 123.235.96.128 (123.235.96.128), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0xafc7 (44999) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xbc0b [correct] [Good: True] [Bad: False] Source: 123.235.96.128 (123.235.96.128) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0x1517 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 3 0.000053000 116.226.138.236 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 3: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.601153000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.601153000 seconds [Time delta from previous captured frame: 0.000035000 seconds] [Time delta from previous displayed frame: 0.000035000 seconds] [Time since reference or first frame: 0.000053000 seconds] Frame Number: 3 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 116.226.138.236 (116.226.138.236), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x0870 [correct] [Good: True] [Bad: False] Source: 116.226.138.236 (116.226.138.236) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0x7ea0 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Server: Custom/1.0 UPnP/1.0 Proc/Ver\r\n EXT:\r\n Location: http://192.168.1.1:5431/dyndev/uuid:c86c87a9-6148-4861-a987-6cc86ca94800\r\n Cache-Control:max-age=1800\r\n ST:uuid:c86c87a9-6148-4861-a987-6cc86ca94800\r\n USN:uuid:c86c87a9-6148-4861-a987-6cc86ca94800\r\n \r\n No. Time Source Destination Protocol Length Info 4 0.000095000 116.226.138.236 [CENSORED] SSDP 373 HTTP/1.1 200 OK Frame 4: 373 bytes on wire (2984 bits), 373 bytes captured (2984 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.601195000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.601195000 seconds [Time delta from previous captured frame: 0.000042000 seconds] [Time delta from previous displayed frame: 0.000042000 seconds] [Time since reference or first frame: 0.000095000 seconds] Frame Number: 4 Frame Length: 373 bytes (2984 bits) Capture Length: 373 bytes (2984 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 116.226.138.236 (116.226.138.236), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 359 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x0831 [correct] [Good: True] [Bad: False] Source: 116.226.138.236 (116.226.138.236) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 339 Checksum: 0x644b [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Server: Custom/1.0 UPnP/1.0 Proc/Ver\r\n EXT:\r\n Location: http://192.168.1.1:5431/dyndev/uuid:c86c87a9-6148-4861-a987-6cc86ca94800\r\n Cache-Control:max-age=1800\r\n ST:urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n USN:uuid:c86c87a9-6148-4861-a987-6cc86ca94800::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 5 0.000120000 186.69.134.118 [CENSORED] SSDP 287 HTTP/1.1 200 OK Frame 5: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.601220000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.601220000 seconds [Time delta from previous captured frame: 0.000025000 seconds] [Time delta from previous displayed frame: 0.000025000 seconds] [Time since reference or first frame: 0.000120000 seconds] Frame Number: 5 Frame Length: 287 bytes (2296 bits) Capture Length: 287 bytes (2296 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 186.69.134.118 (186.69.134.118), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 273 Identification: 0x14da (5338) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 248 Protocol: UDP (17) Header checksum: 0xb09f [correct] [Good: True] [Bad: False] Source: 186.69.134.118 (186.69.134.118) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 253 Checksum: 0xb99d [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: upnp:rootdevice\r\n USN: uuid:11111111-1111-1111-1111-111111111111::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 6 0.000157000 114.239.35.57 [CENSORED] SSDP 330 HTTP/1.1 200 OK Frame 6: 330 bytes on wire (2640 bits), 330 bytes captured (2640 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.601257000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.601257000 seconds [Time delta from previous captured frame: 0.000037000 seconds] [Time delta from previous displayed frame: 0.000037000 seconds] [Time since reference or first frame: 0.000157000 seconds] Frame Number: 6 Frame Length: 330 bytes (2640 bits) Capture Length: 330 bytes (2640 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 114.239.35.57 (114.239.35.57), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 316 Identification: 0x1f74 (8052) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x928e [correct] [Good: True] [Bad: False] Source: 114.239.35.57 (114.239.35.57) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 296 Checksum: 0x915b [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 7 0.000195000 58.152.78.30 [CENSORED] SSDP 344 HTTP/1.1 200 OK Frame 7: 344 bytes on wire (2752 bits), 344 bytes captured (2752 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.601295000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.601295000 seconds [Time delta from previous captured frame: 0.000038000 seconds] [Time delta from previous displayed frame: 0.000038000 seconds] [Time since reference or first frame: 0.000195000 seconds] Frame Number: 7 Frame Length: 344 bytes (2752 bits) Capture Length: 344 bytes (2752 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 58.152.78.30 (58.152.78.30), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 330 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 250 Protocol: UDP (17) Header checksum: 0x7b66 [correct] [Good: True] [Bad: False] Source: 58.152.78.30 (58.152.78.30) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 310 Checksum: 0xc4aa [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n USN: uuid:75802409-bccb-40e7-0c43-00116bdd91b9::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n EXT:\r\n Server: Debian/4.0 UPnP/1.0 miniupnpd/1.0\r\n Location: http://192.168.0.1:5555/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 8 0.000228000 58.152.78.30 [CENSORED] SSDP 340 HTTP/1.1 200 OK Frame 8: 340 bytes on wire (2720 bits), 340 bytes captured (2720 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.601328000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.601328000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.000228000 seconds] Frame Number: 8 Frame Length: 340 bytes (2720 bits) Capture Length: 340 bytes (2720 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 58.152.78.30 (58.152.78.30), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 326 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 250 Protocol: UDP (17) Header checksum: 0x7b6a [correct] [Good: True] [Bad: False] Source: 58.152.78.30 (58.152.78.30) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 306 Checksum: 0xead8 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n USN: uuid:75802409-bccb-40e7-0c43-00116bdd91b9::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n EXT:\r\n Server: Debian/4.0 UPnP/1.0 miniupnpd/1.0\r\n Location: http://192.168.0.1:5555/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 9 0.000261000 58.152.78.30 [CENSORED] SSDP 320 HTTP/1.1 200 OK Frame 9: 320 bytes on wire (2560 bits), 320 bytes captured (2560 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.601361000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.601361000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.000261000 seconds] Frame Number: 9 Frame Length: 320 bytes (2560 bits) Capture Length: 320 bytes (2560 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 58.152.78.30 (58.152.78.30), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 306 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 250 Protocol: UDP (17) Header checksum: 0x7b7e [correct] [Good: True] [Bad: False] Source: 58.152.78.30 (58.152.78.30) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 286 Checksum: 0xff14 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n ST: urn:schemas-upnp-org:device:WANDevice:1\r\n USN: uuid:75802409-bccb-40e7-0c43-00116bdd91b9::urn:schemas-upnp-org:device:WANDevice:1\r\n EXT:\r\n Server: Debian/4.0 UPnP/1.0 miniupnpd/1.0\r\n Location: http://192.168.0.1:5555/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 10 0.000298000 58.152.78.30 [CENSORED] SSDP 352 HTTP/1.1 200 OK Frame 10: 352 bytes on wire (2816 bits), 352 bytes captured (2816 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.601398000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.601398000 seconds [Time delta from previous captured frame: 0.000037000 seconds] [Time delta from previous displayed frame: 0.000037000 seconds] [Time since reference or first frame: 0.000298000 seconds] Frame Number: 10 Frame Length: 352 bytes (2816 bits) Capture Length: 352 bytes (2816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 58.152.78.30 (58.152.78.30), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 338 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 250 Protocol: UDP (17) Header checksum: 0x7b5e [correct] [Good: True] [Bad: False] Source: 58.152.78.30 (58.152.78.30) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 318 Checksum: 0x774d [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n USN: uuid:75802409-bccb-40e7-0c43-00116bdd91b9::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n EXT:\r\n Server: Debian/4.0 UPnP/1.0 miniupnpd/1.0\r\n Location: http://192.168.0.1:5555/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 11 0.000333000 5.35.105.21 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 11: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.601433000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.601433000 seconds [Time delta from previous captured frame: 0.000035000 seconds] [Time delta from previous displayed frame: 0.000035000 seconds] [Time since reference or first frame: 0.000333000 seconds] Frame Number: 11 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 5.35.105.21 (5.35.105.21), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0x6f6a (28522) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (17) Header checksum: 0x2775 [correct] [Good: True] [Bad: False] Source: 5.35.105.21 (5.35.105.21) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0x1ceb [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:\r\n USN: uuid:11111111-1111-1111-1111-111111111111::urn:schemas-upnp-org:service:Layer3Forwarding:\r\n \r\n No. Time Source Destination Protocol Length Info 12 0.000364000 58.152.78.30 [CENSORED] SSDP 334 HTTP/1.1 200 OK Frame 12: 334 bytes on wire (2672 bits), 334 bytes captured (2672 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.601464000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.601464000 seconds [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.000364000 seconds] Frame Number: 12 Frame Length: 334 bytes (2672 bits) Capture Length: 334 bytes (2672 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 58.152.78.30 (58.152.78.30), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 320 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 250 Protocol: UDP (17) Header checksum: 0x7b70 [correct] [Good: True] [Bad: False] Source: 58.152.78.30 (58.152.78.30) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 300 Checksum: 0x6ad3 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n USN: uuid:75802409-bccb-40e7-0c43-00116bdd91b9::urn:schemas-upnp-org:service:WANIPConnection:1\r\n EXT:\r\n Server: Debian/4.0 UPnP/1.0 miniupnpd/1.0\r\n Location: http://192.168.0.1:5555/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 13 0.000397000 58.152.78.30 [CENSORED] SSDP 336 HTTP/1.1 200 OK Frame 13: 336 bytes on wire (2688 bits), 336 bytes captured (2688 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.601497000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.601497000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.000397000 seconds] Frame Number: 13 Frame Length: 336 bytes (2688 bits) Capture Length: 336 bytes (2688 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 58.152.78.30 (58.152.78.30), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 322 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 250 Protocol: UDP (17) Header checksum: 0x7b6e [correct] [Good: True] [Bad: False] Source: 58.152.78.30 (58.152.78.30) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 302 Checksum: 0xcac0 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANPPPConnection:1\r\n USN: uuid:75802409-bccb-40e7-0c43-00116bdd91b9::urn:schemas-upnp-org:service:WANPPPConnection:1\r\n EXT:\r\n Server: Debian/4.0 UPnP/1.0 miniupnpd/1.0\r\n Location: http://192.168.0.1:5555/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 14 0.000430000 58.152.78.30 [CENSORED] SSDP 336 HTTP/1.1 200 OK Frame 14: 336 bytes on wire (2688 bits), 336 bytes captured (2688 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.601530000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.601530000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.000430000 seconds] Frame Number: 14 Frame Length: 336 bytes (2688 bits) Capture Length: 336 bytes (2688 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 58.152.78.30 (58.152.78.30), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 322 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 250 Protocol: UDP (17) Header checksum: 0x7b6e [correct] [Good: True] [Bad: False] Source: 58.152.78.30 (58.152.78.30) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 302 Checksum: 0x6d63 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n USN: uuid:75802409-bccb-40e7-0c43-00116bdd91b9::urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n EXT:\r\n Server: Debian/4.0 UPnP/1.0 miniupnpd/1.0\r\n Location: http://192.168.0.1:5555/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 15 0.000468000 69.248.248.60 [CENSORED] SSDP 357 HTTP/1.1 200 OK Frame 15: 357 bytes on wire (2856 bits), 357 bytes captured (2856 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.601568000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.601568000 seconds [Time delta from previous captured frame: 0.000038000 seconds] [Time delta from previous displayed frame: 0.000038000 seconds] [Time since reference or first frame: 0.000468000 seconds] Frame Number: 15 Frame Length: 357 bytes (2856 bits) Capture Length: 357 bytes (2856 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 69.248.248.60 (69.248.248.60), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 343 Identification: 0x5982 (22914) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (17) Header checksum: 0x6d58 [correct] [Good: True] [Bad: False] Source: 69.248.248.60 (69.248.248.60) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 323 Checksum: 0x2944 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n USN: uuid:cc964a20-1dd1-11b2-8127-f3e24f88d2c9::urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 16 0.000497000 69.248.248.60 [CENSORED] SSDP 333 HTTP/1.1 200 OK Frame 16: 333 bytes on wire (2664 bits), 333 bytes captured (2664 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.601597000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.601597000 seconds [Time delta from previous captured frame: 0.000029000 seconds] [Time delta from previous displayed frame: 0.000029000 seconds] [Time since reference or first frame: 0.000497000 seconds] Frame Number: 16 Frame Length: 333 bytes (2664 bits) Capture Length: 333 bytes (2664 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 69.248.248.60 (69.248.248.60), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 319 Identification: 0x5983 (22915) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (17) Header checksum: 0x6d6f [correct] [Good: True] [Bad: False] Source: 69.248.248.60 (69.248.248.60) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 299 Checksum: 0x29e3 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:WANDevice:\r\n USN: uuid:cc9a7564-1dd1-11b2-9355-ef12a3b9880f::urn:schemas-upnp-org:device:WANDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 17 0.000538000 69.248.248.60 [CENSORED] SSDP 365 HTTP/1.1 200 OK Frame 17: 365 bytes on wire (2920 bits), 365 bytes captured (2920 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.601638000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.601638000 seconds [Time delta from previous captured frame: 0.000041000 seconds] [Time delta from previous displayed frame: 0.000041000 seconds] [Time since reference or first frame: 0.000538000 seconds] Frame Number: 17 Frame Length: 365 bytes (2920 bits) Capture Length: 365 bytes (2920 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 69.248.248.60 (69.248.248.60), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 351 Identification: 0x5984 (22916) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (17) Header checksum: 0x6d4e [correct] [Good: True] [Bad: False] Source: 69.248.248.60 (69.248.248.60) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 331 Checksum: 0x1da0 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:\r\n USN: uuid:cc9a7564-1dd1-11b2-9355-ef12a3b9880f::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:\r\n \r\n No. Time Source Destination Protocol Length Info 18 0.000571000 69.248.248.60 [CENSORED] SSDP 353 HTTP/1.1 200 OK Frame 18: 353 bytes on wire (2824 bits), 353 bytes captured (2824 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.601671000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.601671000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.000571000 seconds] Frame Number: 18 Frame Length: 353 bytes (2824 bits) Capture Length: 353 bytes (2824 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 69.248.248.60 (69.248.248.60), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 339 Identification: 0x5985 (22917) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (17) Header checksum: 0x6d59 [correct] [Good: True] [Bad: False] Source: 69.248.248.60 (69.248.248.60) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 319 Checksum: 0x1c60 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:\r\n USN: uuid:cc9ea0da-1dd1-11b2-8a21-8ec5342b8001::urn:schemas-upnp-org:device:WANConnectionDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 19 0.000605000 69.248.248.60 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 19: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.601705000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.601705000 seconds [Time delta from previous captured frame: 0.000034000 seconds] [Time delta from previous displayed frame: 0.000034000 seconds] [Time since reference or first frame: 0.000605000 seconds] Frame Number: 19 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 69.248.248.60 (69.248.248.60), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0x5986 (22918) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (17) Header checksum: 0x6d5c [correct] [Good: True] [Bad: False] Source: 69.248.248.60 (69.248.248.60) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0x77cc [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANPPPConnection:\r\n USN: uuid:cc9ea0da-1dd1-11b2-8a21-8ec5342b8001::urn:schemas-upnp-org:service:WANPPPConnection:\r\n \r\n No. Time Source Destination Protocol Length Info 20 0.000638000 69.248.248.60 [CENSORED] SSDP 347 HTTP/1.1 200 OK Frame 20: 347 bytes on wire (2776 bits), 347 bytes captured (2776 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.601738000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.601738000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.000638000 seconds] Frame Number: 20 Frame Length: 347 bytes (2776 bits) Capture Length: 347 bytes (2776 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 69.248.248.60 (69.248.248.60), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 333 Identification: 0x5987 (22919) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (17) Header checksum: 0x6d5d [correct] [Good: True] [Bad: False] Source: 69.248.248.60 (69.248.248.60) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 313 Checksum: 0x678f [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:\r\n USN: uuid:cc9ea0da-1dd1-11b2-8a21-8ec5342b8001::urn:schemas-upnp-org:service:WANIPConnection:\r\n \r\n No. Time Source Destination Protocol Length Info 21 0.000698000 73.35.124.209 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 21: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.601798000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.601798000 seconds [Time delta from previous captured frame: 0.000060000 seconds] [Time delta from previous displayed frame: 0.000060000 seconds] [Time since reference or first frame: 0.000698000 seconds] Frame Number: 21 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 73.35.124.209 (73.35.124.209), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0xb2d9 (45785) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 253 Protocol: UDP (17) Header checksum: 0x8849 [correct] [Good: True] [Bad: False] Source: 73.35.124.209 (73.35.124.209) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0xc52e [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:\r\n USN: uuid:11111111-1111-1111-1111-111111111111::urn:schemas-upnp-org:service:Layer3Forwarding:\r\n \r\n No. Time Source Destination Protocol Length Info 22 0.000736000 73.35.124.209 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 22: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.601836000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.601836000 seconds [Time delta from previous captured frame: 0.000038000 seconds] [Time delta from previous displayed frame: 0.000038000 seconds] [Time since reference or first frame: 0.000736000 seconds] Frame Number: 22 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 73.35.124.209 (73.35.124.209), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0xb2da (45786) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 253 Protocol: UDP (17) Header checksum: 0x8848 [correct] [Good: True] [Bad: False] Source: 73.35.124.209 (73.35.124.209) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0x57fd [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-wifialliance-org:device:WFADevice:\r\n USN: uuid:565aa949-67c1-4c0e-aa8f-f349e6f59311::urn:schemas-wifialliance-org:device:WFADevice:\r\n \r\n No. Time Source Destination Protocol Length Info 23 0.001261000 73.35.124.209 [CENSORED] SSDP 359 HTTP/1.1 200 OK Frame 23: 359 bytes on wire (2872 bits), 359 bytes captured (2872 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.602361000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.602361000 seconds [Time delta from previous captured frame: 0.000525000 seconds] [Time delta from previous displayed frame: 0.000525000 seconds] [Time since reference or first frame: 0.001261000 seconds] Frame Number: 23 Frame Length: 359 bytes (2872 bits) Capture Length: 359 bytes (2872 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 73.35.124.209 (73.35.124.209), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 345 Identification: 0xb2db (45787) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 253 Protocol: UDP (17) Header checksum: 0x883d [correct] [Good: True] [Bad: False] Source: 73.35.124.209 (73.35.124.209) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 325 Checksum: 0x03c8 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-wifialliance-org:service:WFAWLANConfig:\r\n USN: uuid:565aa949-67c1-4c0e-aa8f-f349e6f59311::urn:schemas-wifialliance-org:service:WFAWLANConfig:\r\n \r\n No. Time Source Destination Protocol Length Info 24 0.001288000 122.6.117.139 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 24: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.602388000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.602388000 seconds [Time delta from previous captured frame: 0.000027000 seconds] [Time delta from previous displayed frame: 0.000027000 seconds] [Time since reference or first frame: 0.001288000 seconds] Frame Number: 24 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 122.6.117.139 (122.6.117.139), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0xc289 (49801) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x9613 [correct] [Good: True] [Bad: False] Source: 122.6.117.139 (122.6.117.139) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0xda37 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 25 0.001326000 71.80.104.119 [CENSORED] SSDP 353 HTTP/1.1 200 OK Frame 25: 353 bytes on wire (2824 bits), 353 bytes captured (2824 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.602426000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.602426000 seconds [Time delta from previous captured frame: 0.000038000 seconds] [Time delta from previous displayed frame: 0.000038000 seconds] [Time since reference or first frame: 0.001326000 seconds] Frame Number: 25 Frame Length: 353 bytes (2824 bits) Capture Length: 353 bytes (2824 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 71.80.104.119 (71.80.104.119), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 339 Identification: 0xd609 (54793) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (17) Header checksum: 0x7f22 [correct] [Good: True] [Bad: False] Source: 71.80.104.119 (71.80.104.119) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 319 Checksum: 0xc821 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:\r\n USN: uuid:33333333-3333-3333-3333-333333333333::urn:schemas-upnp-org:device:WANConnectionDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 26 0.001361000 71.80.104.119 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 26: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.602461000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.602461000 seconds [Time delta from previous captured frame: 0.000035000 seconds] [Time delta from previous displayed frame: 0.000035000 seconds] [Time since reference or first frame: 0.001361000 seconds] Frame Number: 26 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 71.80.104.119 (71.80.104.119), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0xd60a (54794) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (17) Header checksum: 0x7f25 [correct] [Good: True] [Bad: False] Source: 71.80.104.119 (71.80.104.119) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0x238e [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANPPPConnection:\r\n USN: uuid:33333333-3333-3333-3333-333333333333::urn:schemas-upnp-org:service:WANPPPConnection:\r\n \r\n No. Time Source Destination Protocol Length Info 27 0.001392000 71.80.104.119 [CENSORED] SSDP 347 HTTP/1.1 200 OK Frame 27: 347 bytes on wire (2776 bits), 347 bytes captured (2776 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.602492000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.602492000 seconds [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.001392000 seconds] Frame Number: 27 Frame Length: 347 bytes (2776 bits) Capture Length: 347 bytes (2776 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 71.80.104.119 (71.80.104.119), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 333 Identification: 0xd60b (54795) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (17) Header checksum: 0x7f26 [correct] [Good: True] [Bad: False] Source: 71.80.104.119 (71.80.104.119) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 313 Checksum: 0x4a1a [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:\r\n USN: uuid:33333333-3333-3333-3333-333333333333::urn:schemas-upnp-org:service:WANIPConnection:\r\n \r\n No. Time Source Destination Protocol Length Info 28 0.001420000 122.6.117.139 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 28: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.602520000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.602520000 seconds [Time delta from previous captured frame: 0.000028000 seconds] [Time delta from previous displayed frame: 0.000028000 seconds] [Time since reference or first frame: 0.001420000 seconds] Frame Number: 28 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 122.6.117.139 (122.6.117.139), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0xc294 (49812) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x9608 [correct] [Good: True] [Bad: False] Source: 122.6.117.139 (122.6.117.139) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0xda37 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 29 0.001458000 122.6.117.139 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 29: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.602558000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.602558000 seconds [Time delta from previous captured frame: 0.000038000 seconds] [Time delta from previous displayed frame: 0.000038000 seconds] [Time since reference or first frame: 0.001458000 seconds] Frame Number: 29 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 122.6.117.139 (122.6.117.139), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0xc295 (49813) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x95d9 [correct] [Good: True] [Bad: False] Source: 122.6.117.139 (122.6.117.139) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0x2715 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 30 0.001492000 71.80.104.119 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 30: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.602592000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.602592000 seconds [Time delta from previous captured frame: 0.000034000 seconds] [Time delta from previous displayed frame: 0.000034000 seconds] [Time since reference or first frame: 0.001492000 seconds] Frame Number: 30 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 71.80.104.119 (71.80.104.119), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0xd60c (54796) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (17) Header checksum: 0x7f23 [correct] [Good: True] [Bad: False] Source: 71.80.104.119 (71.80.104.119) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0xdb5b [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:\r\n USN: uuid:11111111-1111-1111-1111-111111111111::urn:schemas-upnp-org:service:Layer3Forwarding:\r\n \r\n No. Time Source Destination Protocol Length Info 31 0.001524000 71.80.104.119 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 31: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.602624000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.602624000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.001524000 seconds] Frame Number: 31 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 71.80.104.119 (71.80.104.119), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0xd60d (54797) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (17) Header checksum: 0x7f22 [correct] [Good: True] [Bad: False] Source: 71.80.104.119 (71.80.104.119) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0x6e2a [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-wifialliance-org:device:WFADevice:\r\n USN: uuid:565aa949-67c1-4c0e-aa8f-f349e6f59311::urn:schemas-wifialliance-org:device:WFADevice:\r\n \r\n No. Time Source Destination Protocol Length Info 32 0.001562000 71.80.104.119 [CENSORED] SSDP 359 HTTP/1.1 200 OK Frame 32: 359 bytes on wire (2872 bits), 359 bytes captured (2872 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.602662000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.602662000 seconds [Time delta from previous captured frame: 0.000038000 seconds] [Time delta from previous displayed frame: 0.000038000 seconds] [Time since reference or first frame: 0.001562000 seconds] Frame Number: 32 Frame Length: 359 bytes (2872 bits) Capture Length: 359 bytes (2872 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 71.80.104.119 (71.80.104.119), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 345 Identification: 0xd60e (54798) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (17) Header checksum: 0x7f17 [correct] [Good: True] [Bad: False] Source: 71.80.104.119 (71.80.104.119) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 325 Checksum: 0x19f5 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-wifialliance-org:service:WFAWLANConfig:\r\n USN: uuid:565aa949-67c1-4c0e-aa8f-f349e6f59311::urn:schemas-wifialliance-org:service:WFAWLANConfig:\r\n \r\n No. Time Source Destination Protocol Length Info 33 0.001596000 116.226.138.236 [CENSORED] SSDP 375 HTTP/1.1 200 OK Frame 33: 375 bytes on wire (3000 bits), 375 bytes captured (3000 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.602696000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.602696000 seconds [Time delta from previous captured frame: 0.000034000 seconds] [Time delta from previous displayed frame: 0.000034000 seconds] [Time since reference or first frame: 0.001596000 seconds] Frame Number: 33 Frame Length: 375 bytes (3000 bits) Capture Length: 375 bytes (3000 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 116.226.138.236 (116.226.138.236), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 361 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x082f [correct] [Good: True] [Bad: False] Source: 116.226.138.236 (116.226.138.236) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 341 Checksum: 0xaabf [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Server: Custom/1.0 UPnP/1.0 Proc/Ver\r\n EXT:\r\n Location: http://192.168.1.1:5431/dyndev/uuid:c86c87a9-6148-4861-a987-6cc86ca94800\r\n Cache-Control:max-age=1800\r\n ST:urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n USN:uuid:c86c87a9-6148-4861-a987-6cc86ca94803::urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 34 0.001627000 124.199.20.186 [CENSORED] SSDP 365 HTTP/1.1 200 OK Frame 34: 365 bytes on wire (2920 bits), 365 bytes captured (2920 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.602727000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.602727000 seconds [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.001627000 seconds] Frame Number: 34 Frame Length: 365 bytes (2920 bits) Capture Length: 365 bytes (2920 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 124.199.20.186 (124.199.20.186), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 351 Identification: 0xf3cc (62412) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0xc3a9 [correct] [Good: True] [Bad: False] Source: 124.199.20.186 (124.199.20.186) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 331 Checksum: 0x98bd [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.10.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{30ea3150-5ad3-49e8-808b-6c4111437217}081075105086::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 35 0.001683000 184.59.213.248 [CENSORED] SSDP 357 HTTP/1.1 200 OK Frame 35: 357 bytes on wire (2856 bits), 357 bytes captured (2856 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.602783000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.602783000 seconds [Time delta from previous captured frame: 0.000056000 seconds] [Time delta from previous displayed frame: 0.000056000 seconds] [Time since reference or first frame: 0.001683000 seconds] Frame Number: 35 Frame Length: 357 bytes (2856 bits) Capture Length: 357 bytes (2856 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 184.59.213.248 (184.59.213.248), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 343 Identification: 0x8d5e (36190) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0xe77c [correct] [Good: True] [Bad: False] Source: 184.59.213.248 (184.59.213.248) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 323 Checksum: 0x2252 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n USN: uuid:add10bb6-1dd1-11b2-b9a0-ae49643fd08a::urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 36 0.001712000 171.110.195.61 [CENSORED] SSDP 315 HTTP/1.1 200 OK Frame 36: 315 bytes on wire (2520 bits), 315 bytes captured (2520 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.602812000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.602812000 seconds [Time delta from previous captured frame: 0.000029000 seconds] [Time delta from previous displayed frame: 0.000029000 seconds] [Time since reference or first frame: 0.001712000 seconds] Frame Number: 36 Frame Length: 315 bytes (2520 bits) Capture Length: 315 bytes (2520 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 171.110.195.61 (171.110.195.61), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 301 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x9a8d [correct] [Good: True] [Bad: False] Source: 171.110.195.61 (171.110.195.61) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 281 Checksum: 0xb066 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n ST: urn:schemas-upnp-org:device:WANDevice:1\r\n USN: uuid:ec9982fc-9600-11df-b8e5-000c29d32f89::urn:schemas-upnp-org:device:WANDevice:1\r\n EXT:\r\n Server: Tenda UPnP/1.0 miniupnpd/1.0\r\n Location: http://192.168.2.1:5500/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 37 0.001747000 184.59.213.248 [CENSORED] SSDP 333 HTTP/1.1 200 OK Frame 37: 333 bytes on wire (2664 bits), 333 bytes captured (2664 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.602847000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.602847000 seconds [Time delta from previous captured frame: 0.000035000 seconds] [Time delta from previous displayed frame: 0.000035000 seconds] [Time since reference or first frame: 0.001747000 seconds] Frame Number: 37 Frame Length: 333 bytes (2664 bits) Capture Length: 333 bytes (2664 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 184.59.213.248 (184.59.213.248), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 319 Identification: 0x8d5f (36191) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0xe793 [correct] [Good: True] [Bad: False] Source: 184.59.213.248 (184.59.213.248) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 299 Checksum: 0xda39 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:WANDevice:\r\n USN: uuid:add4ab36-1dd1-11b2-9a3b-a64e6504acd9::urn:schemas-upnp-org:device:WANDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 38 0.001771000 173.81.68.137 [CENSORED] SSDP 269 HTTP/1.1 200 OK Frame 38: 269 bytes on wire (2152 bits), 269 bytes captured (2152 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.602871000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.602871000 seconds [Time delta from previous captured frame: 0.000024000 seconds] [Time delta from previous displayed frame: 0.000024000 seconds] [Time since reference or first frame: 0.001771000 seconds] Frame Number: 38 Frame Length: 269 bytes (2152 bits) Capture Length: 269 bytes (2152 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 173.81.68.137 (173.81.68.137), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 255 Identification: 0x0878 (2168) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x08f5 [correct] [Good: True] [Bad: False] Source: 173.81.68.137 (173.81.68.137) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 235 Checksum: 0x0882 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: upnp:rootdevice\r\n USN: uuid:53ef018c-d2c4-48ad-bc38-49f2e4748533::upnp:rootdevice\r\n EXT:\r\n SERVER: TBS/R2 UPnP/1.0 MiniUPnPd/1.2\r\n LOCATION: http://192.168.2.1:33150/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 39 0.001814000 173.81.68.137 [CENSORED] SSDP 341 HTTP/1.1 200 OK Frame 39: 341 bytes on wire (2728 bits), 341 bytes captured (2728 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.602914000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.602914000 seconds [Time delta from previous captured frame: 0.000043000 seconds] [Time delta from previous displayed frame: 0.000043000 seconds] [Time since reference or first frame: 0.001814000 seconds] Frame Number: 39 Frame Length: 341 bytes (2728 bits) Capture Length: 341 bytes (2728 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 173.81.68.137 (173.81.68.137), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 327 Identification: 0x0879 (2169) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x08ac [correct] [Good: True] [Bad: False] Source: 173.81.68.137 (173.81.68.137) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 307 Checksum: 0x9983 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n USN: uuid:53ef018c-d2c4-48ad-bc38-49f2e4748533::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n EXT:\r\n SERVER: TBS/R2 UPnP/1.0 MiniUPnPd/1.2\r\n LOCATION: http://192.168.2.1:33150/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 40 0.001847000 173.81.68.137 [CENSORED] SSDP 337 HTTP/1.1 200 OK Frame 40: 337 bytes on wire (2696 bits), 337 bytes captured (2696 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.602947000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.602947000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.001847000 seconds] Frame Number: 40 Frame Length: 337 bytes (2696 bits) Capture Length: 337 bytes (2696 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 173.81.68.137 (173.81.68.137), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 323 Identification: 0x087a (2170) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x08af [correct] [Good: True] [Bad: False] Source: 173.81.68.137 (173.81.68.137) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 303 Checksum: 0xbfb1 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n USN: uuid:53ef018c-d2c4-48ad-bc38-49f2e4748533::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n EXT:\r\n SERVER: TBS/R2 UPnP/1.0 MiniUPnPd/1.2\r\n LOCATION: http://192.168.2.1:33150/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 41 0.001880000 171.110.195.61 [CENSORED] SSDP 347 HTTP/1.1 200 OK Frame 41: 347 bytes on wire (2776 bits), 347 bytes captured (2776 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.602980000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.602980000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.001880000 seconds] Frame Number: 41 Frame Length: 347 bytes (2776 bits) Capture Length: 347 bytes (2776 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 171.110.195.61 (171.110.195.61), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 333 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x9a6d [correct] [Good: True] [Bad: False] Source: 171.110.195.61 (171.110.195.61) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 313 Checksum: 0x289f [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n USN: uuid:ec9982fc-9600-11df-b8e5-000c29d32f89::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n EXT:\r\n Server: Tenda UPnP/1.0 miniupnpd/1.0\r\n Location: http://192.168.2.1:5500/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 42 0.001917000 24.7.111.205 [CENSORED] SSDP 359 HTTP/1.1 200 OK Frame 42: 359 bytes on wire (2872 bits), 359 bytes captured (2872 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.603017000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.603017000 seconds [Time delta from previous captured frame: 0.000037000 seconds] [Time delta from previous displayed frame: 0.000037000 seconds] [Time since reference or first frame: 0.001917000 seconds] Frame Number: 42 Frame Length: 359 bytes (2872 bits) Capture Length: 359 bytes (2872 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 24.7.111.205 (24.7.111.205), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 345 Identification: 0x24e6 (9446) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x5c53 [correct] [Good: True] [Bad: False] Source: 24.7.111.205 (24.7.111.205) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 325 Checksum: 0x49fd [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-wifialliance-org:service:WFAWLANConfig:\r\n USN: uuid:9ee0644e-1dd1-11b2-a164-ee14b9e84032::urn:schemas-wifialliance-org:service:WFAWLANConfig:\r\n \r\n No. Time Source Destination Protocol Length Info 43 0.001948000 67.169.47.176 [CENSORED] SSDP 354 HTTP/1.1 200 OK Frame 43: 354 bytes on wire (2832 bits), 354 bytes captured (2832 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.603048000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.603048000 seconds [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.001948000 seconds] Frame Number: 43 Frame Length: 354 bytes (2832 bits) Capture Length: 354 bytes (2832 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 67.169.47.176 (67.169.47.176), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 340 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x94b9 [correct] [Good: True] [Bad: False] Source: 67.169.47.176 (67.169.47.176) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 320 Checksum: 0xc94a [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n USN: uuid:5e69ae49-3fc2-430e-b685-ff459a764f4c::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n EXT:\r\n SERVER: SMCD3G-CCR/... UPnP/1.0 MiniUPnPd/1.4\r\n LOCATION: http://10.1.10.1:5000/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 44 0.001973000 67.169.47.176 [CENSORED] SSDP 283 HTTP/1.1 200 OK Frame 44: 283 bytes on wire (2264 bits), 283 bytes captured (2264 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.603073000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.603073000 seconds [Time delta from previous captured frame: 0.000025000 seconds] [Time delta from previous displayed frame: 0.000025000 seconds] [Time since reference or first frame: 0.001973000 seconds] Frame Number: 44 Frame Length: 283 bytes (2264 bits) Capture Length: 283 bytes (2264 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 67.169.47.176 (67.169.47.176), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 269 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x9500 [correct] [Good: True] [Bad: False] Source: 67.169.47.176 (67.169.47.176) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 249 Checksum: 0xb04f [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: uuid:aeaec5f7-0fa4-40b4-a583-611ce11ae982\r\n USN: uuid:aeaec5f7-0fa4-40b4-a583-611ce11ae982\r\n EXT:\r\n SERVER: SMCD3G-CCR/... UPnP/1.0 MiniUPnPd/1.4\r\n LOCATION: http://10.1.10.1:5000/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 45 0.002013000 67.169.47.176 [CENSORED] SSDP 342 HTTP/1.1 200 OK Frame 45: 342 bytes on wire (2736 bits), 342 bytes captured (2736 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.603113000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.603113000 seconds [Time delta from previous captured frame: 0.000040000 seconds] [Time delta from previous displayed frame: 0.000040000 seconds] [Time since reference or first frame: 0.002013000 seconds] Frame Number: 45 Frame Length: 342 bytes (2736 bits) Capture Length: 342 bytes (2736 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 67.169.47.176 (67.169.47.176), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 328 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x94c5 [correct] [Good: True] [Bad: False] Source: 67.169.47.176 (67.169.47.176) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 308 Checksum: 0x597f [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n USN: uuid:aeaec5f7-0fa4-40b4-a583-611ce11ae982::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n EXT:\r\n SERVER: SMCD3G-CCR/... UPnP/1.0 MiniUPnPd/1.4\r\n LOCATION: http://10.1.10.1:5000/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 46 0.002039000 221.207.207.229 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 46: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.603139000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.603139000 seconds [Time delta from previous captured frame: 0.000026000 seconds] [Time delta from previous displayed frame: 0.000026000 seconds] [Time since reference or first frame: 0.002039000 seconds] Frame Number: 46 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 221.207.207.229 (221.207.207.229), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x01 (DSCP 0x00: Default; ECN: 0x01: ECT(1) (ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..01 = Explicit Congestion Notification: ECT(1) (ECN-Capable Transport) (0x01) Total Length: 296 Identification: 0x297a (10618) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x710e [correct] [Good: True] [Bad: False] Source: 221.207.207.229 (221.207.207.229) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0x1c14 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 47 0.002079000 98.127.51.72 [CENSORED] SSDP 341 HTTP/1.1 200 OK Frame 47: 341 bytes on wire (2728 bits), 341 bytes captured (2728 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.603179000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.603179000 seconds [Time delta from previous captured frame: 0.000040000 seconds] [Time delta from previous displayed frame: 0.000040000 seconds] [Time since reference or first frame: 0.002079000 seconds] Frame Number: 47 Frame Length: 341 bytes (2728 bits) Capture Length: 341 bytes (2728 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 98.127.51.72 (98.127.51.72), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 327 Identification: 0x98bf (39103) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0xda98 [correct] [Good: True] [Bad: False] Source: 98.127.51.72 (98.127.51.72) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 307 Checksum: 0x5e8a [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n USN: uuid:4b2e13c2-e244-4698-b558-db3f2595a726::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n EXT:\r\n SERVER: TBS/R2 UPnP/1.0 MiniUPnPd/1.2\r\n LOCATION: http://192.168.2.1:37025/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 48 0.002111000 98.127.51.72 [CENSORED] SSDP 337 HTTP/1.1 200 OK Frame 48: 337 bytes on wire (2696 bits), 337 bytes captured (2696 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.603211000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.603211000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.002111000 seconds] Frame Number: 48 Frame Length: 337 bytes (2696 bits) Capture Length: 337 bytes (2696 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 98.127.51.72 (98.127.51.72), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 323 Identification: 0x98c0 (39104) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0xda9b [correct] [Good: True] [Bad: False] Source: 98.127.51.72 (98.127.51.72) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 303 Checksum: 0x84b8 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n USN: uuid:4b2e13c2-e244-4698-b558-db3f2595a726::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n EXT:\r\n SERVER: TBS/R2 UPnP/1.0 MiniUPnPd/1.2\r\n LOCATION: http://192.168.2.1:37025/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 49 0.002142000 67.169.47.176 [CENSORED] SSDP 336 HTTP/1.1 200 OK Frame 49: 336 bytes on wire (2688 bits), 336 bytes captured (2688 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.603242000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.603242000 seconds [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.002142000 seconds] Frame Number: 49 Frame Length: 336 bytes (2688 bits) Capture Length: 336 bytes (2688 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 67.169.47.176 (67.169.47.176), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 322 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x94cb [correct] [Good: True] [Bad: False] Source: 67.169.47.176 (67.169.47.176) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 302 Checksum: 0xd979 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n USN: uuid:aeaec5f7-0fa4-40b4-a583-611ce11ae982::urn:schemas-upnp-org:service:WANIPConnection:1\r\n EXT:\r\n SERVER: SMCD3G-CCR/... UPnP/1.0 MiniUPnPd/1.4\r\n LOCATION: http://10.1.10.1:5000/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 50 0.002173000 98.127.51.72 [CENSORED] SSDP 317 HTTP/1.1 200 OK Frame 50: 317 bytes on wire (2536 bits), 317 bytes captured (2536 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.603273000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.603273000 seconds [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.002173000 seconds] Frame Number: 50 Frame Length: 317 bytes (2536 bits) Capture Length: 317 bytes (2536 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 98.127.51.72 (98.127.51.72), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 303 Identification: 0x98c1 (39105) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0xdaae [correct] [Good: True] [Bad: False] Source: 98.127.51.72 (98.127.51.72) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 283 Checksum: 0x98f4 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:WANDevice:1\r\n USN: uuid:4b2e13c2-e244-4698-b558-db3f2595a726::urn:schemas-upnp-org:device:WANDevice:1\r\n EXT:\r\n SERVER: TBS/R2 UPnP/1.0 MiniUPnPd/1.2\r\n LOCATION: http://192.168.2.1:37025/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 51 0.002207000 101.87.200.17 [CENSORED] SSDP 332 HTTP/1.1 200 OK Frame 51: 332 bytes on wire (2656 bits), 332 bytes captured (2656 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.603307000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.603307000 seconds [Time delta from previous captured frame: 0.000034000 seconds] [Time delta from previous displayed frame: 0.000034000 seconds] [Time since reference or first frame: 0.002207000 seconds] Frame Number: 51 Frame Length: 332 bytes (2656 bits) Capture Length: 332 bytes (2656 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 101.87.200.17 (101.87.200.17), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 318 Identification: 0x5913 (22803) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xc1ac [correct] [Good: True] [Bad: False] Source: 101.87.200.17 (101.87.200.17) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 298 Checksum: 0x8aa5 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.254:80/UPnP/IGD.xml\r\n ST: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}081076867169\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}081076867169\r\n \r\n No. Time Source Destination Protocol Length Info 52 0.002246000 101.87.200.17 [CENSORED] SSDP 364 HTTP/1.1 200 OK Frame 52: 364 bytes on wire (2912 bits), 364 bytes captured (2912 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.603346000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.603346000 seconds [Time delta from previous captured frame: 0.000039000 seconds] [Time delta from previous displayed frame: 0.000039000 seconds] [Time since reference or first frame: 0.002246000 seconds] Frame Number: 52 Frame Length: 364 bytes (2912 bits) Capture Length: 364 bytes (2912 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 101.87.200.17 (101.87.200.17), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 350 Identification: 0x5914 (22804) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xc17b [correct] [Good: True] [Bad: False] Source: 101.87.200.17 (101.87.200.17) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 330 Checksum: 0xad30 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.254:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}081076867169::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 53 0.002278000 175.171.139.53 [CENSORED] SSDP 364 HTTP/1.1 200 OK Frame 53: 364 bytes on wire (2912 bits), 364 bytes captured (2912 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.603378000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.603378000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.002278000 seconds] Frame Number: 53 Frame Length: 364 bytes (2912 bits) Capture Length: 364 bytes (2912 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 175.171.139.53 (175.171.139.53), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 350 Identification: 0x6150 (24912) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xabd7 [correct] [Good: True] [Bad: False] Source: 175.171.139.53 (175.171.139.53) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 330 Checksum: 0x6afc [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 54 0.002313000 101.87.200.17 [CENSORED] SSDP 370 HTTP/1.1 200 OK Frame 54: 370 bytes on wire (2960 bits), 370 bytes captured (2960 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.603413000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.603413000 seconds [Time delta from previous captured frame: 0.000035000 seconds] [Time delta from previous displayed frame: 0.000035000 seconds] [Time since reference or first frame: 0.002313000 seconds] Frame Number: 54 Frame Length: 370 bytes (2960 bits) Capture Length: 370 bytes (2960 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 101.87.200.17 (101.87.200.17), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 356 Identification: 0x5915 (22805) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xc174 [correct] [Good: True] [Bad: False] Source: 101.87.200.17 (101.87.200.17) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 336 Checksum: 0x68de [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.254:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}081076867169::urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 55 0.002338000 98.202.113.38 [CENSORED] SSDP 287 HTTP/1.1 200 OK Frame 55: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.603438000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.603438000 seconds [Time delta from previous captured frame: 0.000025000 seconds] [Time delta from previous displayed frame: 0.000025000 seconds] [Time since reference or first frame: 0.002338000 seconds] Frame Number: 55 Frame Length: 287 bytes (2296 bits) Capture Length: 287 bytes (2296 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 98.202.113.38 (98.202.113.38), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 273 Identification: 0xd350 (54096) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (17) Header checksum: 0x5e14 [correct] [Good: True] [Bad: False] Source: 98.202.113.38 (98.202.113.38) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 253 Checksum: 0x7e1a [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: upnp:rootdevice\r\n USN: uuid:2a78b09c-1dd2-11b2-94f2-e6a5fb47b2bd::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 56 0.002377000 98.202.113.38 [CENSORED] SSDP 357 HTTP/1.1 200 OK Frame 56: 357 bytes on wire (2856 bits), 357 bytes captured (2856 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.603477000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.603477000 seconds [Time delta from previous captured frame: 0.000039000 seconds] [Time delta from previous displayed frame: 0.000039000 seconds] [Time since reference or first frame: 0.002377000 seconds] Frame Number: 56 Frame Length: 357 bytes (2856 bits) Capture Length: 357 bytes (2856 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 98.202.113.38 (98.202.113.38), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 343 Identification: 0xd351 (54097) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (17) Header checksum: 0x5dcd [correct] [Good: True] [Bad: False] Source: 98.202.113.38 (98.202.113.38) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 323 Checksum: 0x3061 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n USN: uuid:2a78b09c-1dd2-11b2-94f2-e6a5fb47b2bd::urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 57 0.002404000 98.202.113.38 [CENSORED] SSDP 333 HTTP/1.1 200 OK Frame 57: 333 bytes on wire (2664 bits), 333 bytes captured (2664 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.603504000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.603504000 seconds [Time delta from previous captured frame: 0.000027000 seconds] [Time delta from previous displayed frame: 0.000027000 seconds] [Time since reference or first frame: 0.002404000 seconds] Frame Number: 57 Frame Length: 333 bytes (2664 bits) Capture Length: 333 bytes (2664 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 98.202.113.38 (98.202.113.38), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 319 Identification: 0xd352 (54098) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (17) Header checksum: 0x5de4 [correct] [Good: True] [Bad: False] Source: 98.202.113.38 (98.202.113.38) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 299 Checksum: 0x39a2 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:WANDevice:\r\n USN: uuid:2a7cf9e0-1dd2-11b2-ac84-ef04b9bea71b::urn:schemas-upnp-org:device:WANDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 58 0.002445000 98.202.113.38 [CENSORED] SSDP 365 HTTP/1.1 200 OK Frame 58: 365 bytes on wire (2920 bits), 365 bytes captured (2920 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.603545000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.603545000 seconds [Time delta from previous captured frame: 0.000041000 seconds] [Time delta from previous displayed frame: 0.000041000 seconds] [Time since reference or first frame: 0.002445000 seconds] Frame Number: 58 Frame Length: 365 bytes (2920 bits) Capture Length: 365 bytes (2920 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 98.202.113.38 (98.202.113.38), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 351 Identification: 0xd353 (54099) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (17) Header checksum: 0x5dc3 [correct] [Good: True] [Bad: False] Source: 98.202.113.38 (98.202.113.38) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 331 Checksum: 0x2d5f [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:\r\n USN: uuid:2a7cf9e0-1dd2-11b2-ac84-ef04b9bea71b::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:\r\n \r\n No. Time Source Destination Protocol Length Info 59 0.002476000 98.202.113.38 [CENSORED] SSDP 353 HTTP/1.1 200 OK Frame 59: 353 bytes on wire (2824 bits), 353 bytes captured (2824 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.603576000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.603576000 seconds [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.002476000 seconds] Frame Number: 59 Frame Length: 353 bytes (2824 bits) Capture Length: 353 bytes (2824 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 98.202.113.38 (98.202.113.38), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 339 Identification: 0xd354 (54100) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (17) Header checksum: 0x5dce [correct] [Good: True] [Bad: False] Source: 98.202.113.38 (98.202.113.38) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 319 Checksum: 0x7ff8 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:\r\n USN: uuid:2a812c2c-1dd2-11b2-939f-c09f22f3922d::urn:schemas-upnp-org:device:WANConnectionDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 60 0.002573000 222.39.24.140 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 60: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.603673000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.603673000 seconds [Time delta from previous captured frame: 0.000097000 seconds] [Time delta from previous displayed frame: 0.000097000 seconds] [Time since reference or first frame: 0.002573000 seconds] Frame Number: 60 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 222.39.24.140 (222.39.24.140), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0xcc01 (52225) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 250 Protocol: UDP (17) Header checksum: 0x815b [correct] [Good: True] [Bad: False] Source: 222.39.24.140 (222.39.24.140) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0x20cd [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANIPConnection:1\r\n \r\n No. Time Source Destination Protocol Length Info 61 0.002628000 174.101.120.199 [CENSORED] SSDP 287 HTTP/1.1 200 OK Frame 61: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.603728000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.603728000 seconds [Time delta from previous captured frame: 0.000055000 seconds] [Time delta from previous displayed frame: 0.000055000 seconds] [Time since reference or first frame: 0.002628000 seconds] Frame Number: 61 Frame Length: 287 bytes (2296 bits) Capture Length: 287 bytes (2296 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 174.101.120.199 (174.101.120.199), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 273 Identification: 0x1afa (6906) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0xc12e [correct] [Good: True] [Bad: False] Source: 174.101.120.199 (174.101.120.199) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 253 Checksum: 0xb812 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: upnp:rootdevice\r\n USN: uuid:4676638c-1dd2-11b2-a14b-a95c9ab53810::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 62 0.002675000 174.101.120.199 [CENSORED] SSDP 357 HTTP/1.1 200 OK Frame 62: 357 bytes on wire (2856 bits), 357 bytes captured (2856 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.603775000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.603775000 seconds [Time delta from previous captured frame: 0.000047000 seconds] [Time delta from previous displayed frame: 0.000047000 seconds] [Time since reference or first frame: 0.002675000 seconds] Frame Number: 62 Frame Length: 357 bytes (2856 bits) Capture Length: 357 bytes (2856 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 174.101.120.199 (174.101.120.199), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 343 Identification: 0x1afb (6907) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0xc0e7 [correct] [Good: True] [Bad: False] Source: 174.101.120.199 (174.101.120.199) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 323 Checksum: 0x11b2 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n USN: uuid:4676638c-1dd2-11b2-a14b-a95c9ab53810::urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 63 0.002707000 221.207.207.229 [CENSORED] SSDP 362 HTTP/1.1 200 OK Frame 63: 362 bytes on wire (2896 bits), 362 bytes captured (2896 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.603807000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.603807000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.002707000 seconds] Frame Number: 63 Frame Length: 362 bytes (2896 bits) Capture Length: 362 bytes (2896 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 221.207.207.229 (221.207.207.229), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x01 (DSCP 0x00: Default; ECN: 0x01: ECT(1) (ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..01 = Explicit Congestion Notification: ECT(1) (ECN-Capable Transport) (0x01) Total Length: 348 Identification: 0x2982 (10626) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x70d2 [correct] [Good: True] [Bad: False] Source: 221.207.207.229 (221.207.207.229) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 328 Checksum: 0x803a [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 64 0.002741000 221.207.207.229 [CENSORED] SSDP 368 HTTP/1.1 200 OK Frame 64: 368 bytes on wire (2944 bits), 368 bytes captured (2944 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.603841000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.603841000 seconds [Time delta from previous captured frame: 0.000034000 seconds] [Time delta from previous displayed frame: 0.000034000 seconds] [Time since reference or first frame: 0.002741000 seconds] Frame Number: 64 Frame Length: 368 bytes (2944 bits) Capture Length: 368 bytes (2944 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 221.207.207.229 (221.207.207.229), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x01 (DSCP 0x00: Default; ECN: 0x01: ECT(1) (ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..01 = Explicit Congestion Notification: ECT(1) (ECN-Capable Transport) (0x01) Total Length: 354 Identification: 0x2983 (10627) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x70cb [correct] [Good: True] [Bad: False] Source: 221.207.207.229 (221.207.207.229) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 334 Checksum: 0x3ae9 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 65 0.002803000 114.239.35.57 [CENSORED] SSDP 330 HTTP/1.1 200 OK Frame 65: 330 bytes on wire (2640 bits), 330 bytes captured (2640 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.603903000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.603903000 seconds [Time delta from previous captured frame: 0.000062000 seconds] [Time delta from previous displayed frame: 0.000062000 seconds] [Time since reference or first frame: 0.002803000 seconds] Frame Number: 65 Frame Length: 330 bytes (2640 bits) Capture Length: 330 bytes (2640 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 114.239.35.57 (114.239.35.57), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 316 Identification: 0x1f7f (8063) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x9283 [correct] [Good: True] [Bad: False] Source: 114.239.35.57 (114.239.35.57) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 296 Checksum: 0x915b [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 66 0.002839000 114.239.35.57 [CENSORED] SSDP 362 HTTP/1.1 200 OK Frame 66: 362 bytes on wire (2896 bits), 362 bytes captured (2896 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.603939000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.603939000 seconds [Time delta from previous captured frame: 0.000036000 seconds] [Time delta from previous displayed frame: 0.000036000 seconds] [Time since reference or first frame: 0.002839000 seconds] Frame Number: 66 Frame Length: 362 bytes (2896 bits) Capture Length: 362 bytes (2896 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 114.239.35.57 (114.239.35.57), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 348 Identification: 0x1f80 (8064) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x9262 [correct] [Good: True] [Bad: False] Source: 114.239.35.57 (114.239.35.57) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 328 Checksum: 0x97c7 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 67 0.002871000 182.35.49.102 [CENSORED] SSDP 364 HTTP/1.1 200 OK Frame 67: 364 bytes on wire (2912 bits), 364 bytes captured (2912 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.603971000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.603971000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.002871000 seconds] Frame Number: 67 Frame Length: 364 bytes (2912 bits) Capture Length: 364 bytes (2912 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 182.35.49.102 (182.35.49.102), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 350 Identification: 0xd7a9 (55209) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x88c5 [correct] [Good: True] [Bad: False] Source: 182.35.49.102 (182.35.49.102) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 330 Checksum: 0xbe53 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 68 0.002900000 182.35.49.102 [CENSORED] SSDP 330 HTTP/1.1 200 OK Frame 68: 330 bytes on wire (2640 bits), 330 bytes captured (2640 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.604000000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.604000000 seconds [Time delta from previous captured frame: 0.000029000 seconds] [Time delta from previous displayed frame: 0.000029000 seconds] [Time since reference or first frame: 0.002900000 seconds] Frame Number: 68 Frame Length: 330 bytes (2640 bits) Capture Length: 330 bytes (2640 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 182.35.49.102 (182.35.49.102), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 316 Identification: 0xd7aa (55210) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x88e6 [correct] [Good: True] [Bad: False] Source: 182.35.49.102 (182.35.49.102) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 296 Checksum: 0x3ffa [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 69 0.002937000 182.35.49.102 [CENSORED] SSDP 362 HTTP/1.1 200 OK Frame 69: 362 bytes on wire (2896 bits), 362 bytes captured (2896 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.604037000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.604037000 seconds [Time delta from previous captured frame: 0.000037000 seconds] [Time delta from previous displayed frame: 0.000037000 seconds] [Time since reference or first frame: 0.002937000 seconds] Frame Number: 69 Frame Length: 362 bytes (2896 bits) Capture Length: 362 bytes (2896 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 182.35.49.102 (182.35.49.102), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 348 Identification: 0xd7ab (55211) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x88c5 [correct] [Good: True] [Bad: False] Source: 182.35.49.102 (182.35.49.102) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 328 Checksum: 0x4666 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 70 0.002971000 182.35.49.102 [CENSORED] SSDP 368 HTTP/1.1 200 OK Frame 70: 368 bytes on wire (2944 bits), 368 bytes captured (2944 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.604071000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.604071000 seconds [Time delta from previous captured frame: 0.000034000 seconds] [Time delta from previous displayed frame: 0.000034000 seconds] [Time since reference or first frame: 0.002971000 seconds] Frame Number: 70 Frame Length: 368 bytes (2944 bits) Capture Length: 368 bytes (2944 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 182.35.49.102 (182.35.49.102), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 354 Identification: 0xd7ac (55212) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x88be [correct] [Good: True] [Bad: False] Source: 182.35.49.102 (182.35.49.102) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 334 Checksum: 0x0115 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 71 0.003002000 101.87.200.17 [CENSORED] SSDP 358 HTTP/1.1 200 OK Frame 71: 358 bytes on wire (2864 bits), 358 bytes captured (2864 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.604102000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.604102000 seconds [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.003002000 seconds] Frame Number: 71 Frame Length: 358 bytes (2864 bits) Capture Length: 358 bytes (2864 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 101.87.200.17 (101.87.200.17), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 344 Identification: 0x5916 (22806) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xc17f [correct] [Good: True] [Bad: False] Source: 101.87.200.17 (101.87.200.17) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 324 Checksum: 0x97c0 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.254:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}081076867169::urn:schemas-upnp-org:service:WANIPConnection:1\r\n \r\n No. Time Source Destination Protocol Length Info 72 0.003034000 182.35.49.102 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 72: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.604134000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.604134000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.003034000 seconds] Frame Number: 72 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 182.35.49.102 (182.35.49.102), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0xd7ad (55213) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x88c9 [correct] [Good: True] [Bad: False] Source: 182.35.49.102 (182.35.49.102) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0x2ff7 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANIPConnection:1\r\n \r\n No. Time Source Destination Protocol Length Info 73 0.003063000 70.92.249.80 [CENSORED] SSDP 332 HTTP/1.1 200 OK Frame 73: 332 bytes on wire (2656 bits), 332 bytes captured (2656 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.604163000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.604163000 seconds [Time delta from previous captured frame: 0.000029000 seconds] [Time delta from previous displayed frame: 0.000029000 seconds] [Time since reference or first frame: 0.003063000 seconds] Frame Number: 73 Frame Length: 332 bytes (2656 bits) Capture Length: 332 bytes (2656 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 70.92.249.80 (70.92.249.80), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 318 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0xc37b [correct] [Good: True] [Bad: False] Source: 70.92.249.80 (70.92.249.80) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 298 Checksum: 0xa096 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: uuid:bff90aea-1dd1-11b2-bf08-a6d63333e8ce\r\n USN: uuid:bff90aea-1dd1-11b2-bf08-a6d63333e8ce::uuid:bff90aea-1dd1-11b2-bf08-a6d63333e8ce\r\n \r\n No. Time Source Destination Protocol Length Info 74 0.003100000 76.25.71.92 [CENSORED] SSDP 357 HTTP/1.1 200 OK Frame 74: 357 bytes on wire (2856 bits), 357 bytes captured (2856 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.604200000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.604200000 seconds [Time delta from previous captured frame: 0.000037000 seconds] [Time delta from previous displayed frame: 0.000037000 seconds] [Time since reference or first frame: 0.003100000 seconds] Frame Number: 74 Frame Length: 357 bytes (2856 bits) Capture Length: 357 bytes (2856 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 76.25.71.92 (76.25.71.92), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 343 Identification: 0x8854 (34900) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (17) Header checksum: 0xe945 [correct] [Good: True] [Bad: False] Source: 76.25.71.92 (76.25.71.92) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 323 Checksum: 0xd7a3 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n USN: uuid:a8a77e80-1dd1-11b2-bf1f-8ed141f6a743::urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 75 0.003125000 97.89.160.76 [CENSORED] SSDP 274 HTTP/1.1 200 OK Frame 75: 274 bytes on wire (2192 bits), 274 bytes captured (2192 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.604225000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.604225000 seconds [Time delta from previous captured frame: 0.000025000 seconds] [Time delta from previous displayed frame: 0.000025000 seconds] [Time since reference or first frame: 0.003125000 seconds] Frame Number: 75 Frame Length: 274 bytes (2192 bits) Capture Length: 274 bytes (2192 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 97.89.160.76 (97.89.160.76), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 260 Identification: 0x5fb6 (24502) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (17) Header checksum: 0xe406 [correct] [Good: True] [Bad: False] Source: 97.89.160.76 (97.89.160.76) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 240 Checksum: 0x8f44 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=1800\r\n EXT:\r\n LOCATION: http://192.168.1.253:1900/rootDesc.xml\r\n SERVER: Ubuntu/7.10 UPnP/1.0 miniupnpd/1.0\r\n ST: upnp:rootdevice\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::upnp:rootdevice\n \r\n No. Time Source Destination Protocol Length Info 76 0.003163000 76.25.71.92 [CENSORED] SSDP 333 HTTP/1.1 200 OK Frame 76: 333 bytes on wire (2664 bits), 333 bytes captured (2664 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.604263000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.604263000 seconds [Time delta from previous captured frame: 0.000038000 seconds] [Time delta from previous displayed frame: 0.000038000 seconds] [Time since reference or first frame: 0.003163000 seconds] Frame Number: 76 Frame Length: 333 bytes (2664 bits) Capture Length: 333 bytes (2664 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 76.25.71.92 (76.25.71.92), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 319 Identification: 0x8855 (34901) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (17) Header checksum: 0xe95c [correct] [Good: True] [Bad: False] Source: 76.25.71.92 (76.25.71.92) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 299 Checksum: 0xaa9f [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:WANDevice:\r\n USN: uuid:a8ba6d4c-1dd1-11b2-86fe-8754d3251e91::urn:schemas-upnp-org:device:WANDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 77 0.003213000 24.7.24.116 [CENSORED] SSDP 347 HTTP/1.1 200 OK Frame 77: 347 bytes on wire (2776 bits), 347 bytes captured (2776 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.604313000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.604313000 seconds [Time delta from previous captured frame: 0.000050000 seconds] [Time delta from previous displayed frame: 0.000050000 seconds] [Time since reference or first frame: 0.003213000 seconds] Frame Number: 77 Frame Length: 347 bytes (2776 bits) Capture Length: 347 bytes (2776 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 24.7.24.116 (24.7.24.116), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 333 Identification: 0x442f (17455) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 242 Protocol: UDP (17) Header checksum: 0x976f [correct] [Good: True] [Bad: False] Source: 24.7.24.116 (24.7.24.116) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 313 Checksum: 0xfc5e [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:\r\n USN: uuid:2a81017a-1dd2-11b2-ae19-c00b1220539b::urn:schemas-upnp-org:service:WANIPConnection:\r\n \r\n No. Time Source Destination Protocol Length Info 78 0.003251000 221.207.207.229 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 78: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.604351000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.604351000 seconds [Time delta from previous captured frame: 0.000038000 seconds] [Time delta from previous displayed frame: 0.000038000 seconds] [Time since reference or first frame: 0.003251000 seconds] Frame Number: 78 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 221.207.207.229 (221.207.207.229), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x01 (DSCP 0x00: Default; ECN: 0x01: ECT(1) (ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..01 = Explicit Congestion Notification: ECT(1) (ECN-Capable Transport) (0x01) Total Length: 342 Identification: 0x2986 (10630) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x70d4 [correct] [Good: True] [Bad: False] Source: 221.207.207.229 (221.207.207.229) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0x68f1 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 79 0.003888000 66.189.65.124 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 79: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.604988000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.604988000 seconds [Time delta from previous captured frame: 0.000637000 seconds] [Time delta from previous displayed frame: 0.000637000 seconds] [Time since reference or first frame: 0.003888000 seconds] Frame Number: 79 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 66.189.65.124 (66.189.65.124), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0x0c4c (3148) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x7292 [correct] [Good: True] [Bad: False] Source: 66.189.65.124 (66.189.65.124) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0x05ab [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-wifialliance-org:device:WFADevice:\r\n USN: uuid:bac478c6-1dd1-11b2-a877-f25595587299::urn:schemas-wifialliance-org:device:WFADevice:\r\n \r\n No. Time Source Destination Protocol Length Info 80 0.003921000 66.189.65.124 [CENSORED] SSDP 359 HTTP/1.1 200 OK Frame 80: 359 bytes on wire (2872 bits), 359 bytes captured (2872 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.605021000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.605021000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.003921000 seconds] Frame Number: 80 Frame Length: 359 bytes (2872 bits) Capture Length: 359 bytes (2872 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 66.189.65.124 (66.189.65.124), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 345 Identification: 0x0c4d (3149) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x7287 [correct] [Good: True] [Bad: False] Source: 66.189.65.124 (66.189.65.124) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 325 Checksum: 0x37ef [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-wifialliance-org:service:WFAWLANConfig:\r\n USN: uuid:bac478c6-1dd1-11b2-a877-f25595587299::urn:schemas-wifialliance-org:service:WFAWLANConfig:\r\n \r\n No. Time Source Destination Protocol Length Info 81 0.003946000 71.81.235.253 [CENSORED] SSDP 287 HTTP/1.1 200 OK Frame 81: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.605046000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.605046000 seconds [Time delta from previous captured frame: 0.000025000 seconds] [Time delta from previous displayed frame: 0.000025000 seconds] [Time since reference or first frame: 0.003946000 seconds] Frame Number: 81 Frame Length: 287 bytes (2296 bits) Capture Length: 287 bytes (2296 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 71.81.235.253 (71.81.235.253), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 273 Identification: 0xaff8 (45048) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 247 Protocol: UDP (17) Header checksum: 0x240e [correct] [Good: True] [Bad: False] Source: 71.81.235.253 (71.81.235.253) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 253 Checksum: 0x7893 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: upnp:rootdevice\r\n USN: uuid:2a78c582-1dd2-11b2-a9f1-dffe6c1025c4::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 82 0.003988000 71.81.235.253 [CENSORED] SSDP 357 HTTP/1.1 200 OK Frame 82: 357 bytes on wire (2856 bits), 357 bytes captured (2856 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.605088000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.605088000 seconds [Time delta from previous captured frame: 0.000042000 seconds] [Time delta from previous displayed frame: 0.000042000 seconds] [Time since reference or first frame: 0.003988000 seconds] Frame Number: 82 Frame Length: 357 bytes (2856 bits) Capture Length: 357 bytes (2856 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 71.81.235.253 (71.81.235.253), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 343 Identification: 0xaff9 (45049) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 247 Protocol: UDP (17) Header checksum: 0x23c7 [correct] [Good: True] [Bad: False] Source: 71.81.235.253 (71.81.235.253) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 323 Checksum: 0xa85c [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n USN: uuid:2a78c582-1dd2-11b2-a9f1-dffe6c1025c4::urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 83 0.004016000 71.81.235.253 [CENSORED] SSDP 333 HTTP/1.1 200 OK Frame 83: 333 bytes on wire (2664 bits), 333 bytes captured (2664 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.605116000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.605116000 seconds [Time delta from previous captured frame: 0.000028000 seconds] [Time delta from previous displayed frame: 0.000028000 seconds] [Time since reference or first frame: 0.004016000 seconds] Frame Number: 83 Frame Length: 333 bytes (2664 bits) Capture Length: 333 bytes (2664 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 71.81.235.253 (71.81.235.253), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 319 Identification: 0xaffa (45050) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 247 Protocol: UDP (17) Header checksum: 0x23de [correct] [Good: True] [Bad: False] Source: 71.81.235.253 (71.81.235.253) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 299 Checksum: 0xe098 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:WANDevice:\r\n USN: uuid:2a7ce7a2-1dd2-11b2-b0e5-ec59f27f22d7::urn:schemas-upnp-org:device:WANDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 84 0.004047000 97.91.142.129 [CENSORED] SSDP 333 HTTP/1.1 200 OK Frame 84: 333 bytes on wire (2664 bits), 333 bytes captured (2664 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.605147000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.605147000 seconds [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.004047000 seconds] Frame Number: 84 Frame Length: 333 bytes (2664 bits) Capture Length: 333 bytes (2664 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 97.91.142.129 (97.91.142.129), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 319 Identification: 0x92ee (37614) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x805c [correct] [Good: True] [Bad: False] Source: 97.91.142.129 (97.91.142.129) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 299 Checksum: 0x5cdb [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:WANDevice:\r\n USN: uuid:2a7cff80-1dd2-11b2-a157-d1b4ec11a6e9::urn:schemas-upnp-org:device:WANDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 85 0.004087000 97.91.142.129 [CENSORED] SSDP 365 HTTP/1.1 200 OK Frame 85: 365 bytes on wire (2920 bits), 365 bytes captured (2920 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.605187000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.605187000 seconds [Time delta from previous captured frame: 0.000040000 seconds] [Time delta from previous displayed frame: 0.000040000 seconds] [Time since reference or first frame: 0.004087000 seconds] Frame Number: 85 Frame Length: 365 bytes (2920 bits) Capture Length: 365 bytes (2920 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 97.91.142.129 (97.91.142.129), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 351 Identification: 0x92ef (37615) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x803b [correct] [Good: True] [Bad: False] Source: 97.91.142.129 (97.91.142.129) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 331 Checksum: 0x5098 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:\r\n USN: uuid:2a7cff80-1dd2-11b2-a157-d1b4ec11a6e9::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:\r\n \r\n No. Time Source Destination Protocol Length Info 86 0.004120000 71.81.235.253 [CENSORED] SSDP 365 HTTP/1.1 200 OK Frame 86: 365 bytes on wire (2920 bits), 365 bytes captured (2920 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.605220000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.605220000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.004120000 seconds] Frame Number: 86 Frame Length: 365 bytes (2920 bits) Capture Length: 365 bytes (2920 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 71.81.235.253 (71.81.235.253), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 351 Identification: 0xaffb (45051) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 247 Protocol: UDP (17) Header checksum: 0x23bd [correct] [Good: True] [Bad: False] Source: 71.81.235.253 (71.81.235.253) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 331 Checksum: 0xd455 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:\r\n USN: uuid:2a7ce7a2-1dd2-11b2-b0e5-ec59f27f22d7::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:\r\n \r\n No. Time Source Destination Protocol Length Info 87 0.004150000 97.91.142.129 [CENSORED] SSDP 353 HTTP/1.1 200 OK Frame 87: 353 bytes on wire (2824 bits), 353 bytes captured (2824 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.605250000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.605250000 seconds [Time delta from previous captured frame: 0.000030000 seconds] [Time delta from previous displayed frame: 0.000030000 seconds] [Time since reference or first frame: 0.004150000 seconds] Frame Number: 87 Frame Length: 353 bytes (2824 bits) Capture Length: 353 bytes (2824 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 97.91.142.129 (97.91.142.129), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 339 Identification: 0x92f0 (37616) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x8046 [correct] [Good: True] [Bad: False] Source: 97.91.142.129 (97.91.142.129) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 319 Checksum: 0x5f0d [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:\r\n USN: uuid:2a812506-1dd2-11b2-bec8-9d6986ae23b3::urn:schemas-upnp-org:device:WANConnectionDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 88 0.004179000 39.65.18.40 [CENSORED] SSDP 330 HTTP/1.1 200 OK Frame 88: 330 bytes on wire (2640 bits), 330 bytes captured (2640 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.605279000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.605279000 seconds [Time delta from previous captured frame: 0.000029000 seconds] [Time delta from previous displayed frame: 0.000029000 seconds] [Time since reference or first frame: 0.004179000 seconds] Frame Number: 88 Frame Length: 330 bytes (2640 bits) Capture Length: 330 bytes (2640 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 39.65.18.40 (39.65.18.40), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 316 Identification: 0x34ee (13550) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xd9d3 [correct] [Good: True] [Bad: False] Source: 39.65.18.40 (39.65.18.40) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 296 Checksum: 0xee1a [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 89 0.004204000 1.25.155.134 [CENSORED] SSDP 284 HTTP/1.1 200 OK Frame 89: 284 bytes on wire (2272 bits), 284 bytes captured (2272 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.605304000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.605304000 seconds [Time delta from previous captured frame: 0.000025000 seconds] [Time delta from previous displayed frame: 0.000025000 seconds] [Time since reference or first frame: 0.004204000 seconds] Frame Number: 89 Frame Length: 284 bytes (2272 bits) Capture Length: 284 bytes (2272 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 1.25.155.134 (1.25.155.134), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 270 Identification: 0x88e5 (35045) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x22c4 [correct] [Good: True] [Bad: False] Source: 1.25.155.134 (1.25.155.134) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 250 Checksum: 0xe905 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: upnp:rootdevice\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 90 0.004250000 119.182.102.33 [CENSORED] SSDP 368 HTTP/1.1 200 OK Frame 90: 368 bytes on wire (2944 bits), 368 bytes captured (2944 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.605350000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.605350000 seconds [Time delta from previous captured frame: 0.000046000 seconds] [Time delta from previous displayed frame: 0.000046000 seconds] [Time since reference or first frame: 0.004250000 seconds] Frame Number: 90 Frame Length: 368 bytes (2944 bits) Capture Length: 368 bytes (2944 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 119.182.102.33 (119.182.102.33), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 354 Identification: 0x3fd6 (16342) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x2a57 [correct] [Good: True] [Bad: False] Source: 119.182.102.33 (119.182.102.33) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 334 Checksum: 0x0ac7 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 91 0.004273000 75.71.49.183 [CENSORED] SSDP 274 HTTP/1.1 200 OK Frame 91: 274 bytes on wire (2192 bits), 274 bytes captured (2192 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.605373000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.605373000 seconds [Time delta from previous captured frame: 0.000023000 seconds] [Time delta from previous displayed frame: 0.000023000 seconds] [Time since reference or first frame: 0.004273000 seconds] Frame Number: 91 Frame Length: 274 bytes (2192 bits) Capture Length: 274 bytes (2192 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 75.71.49.183 (75.71.49.183), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 260 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 248 Protocol: UDP (17) Header checksum: 0x8964 [correct] [Good: True] [Bad: False] Source: 75.71.49.183 (75.71.49.183) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 240 Checksum: 0xd4e8 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: upnp:rootdevice\r\n USN: uuid:5a34308c-1a2c-4546-ac5d-7663dd01dca1::upnp:rootdevice\r\n EXT:\r\n SERVER: Ubuntu/lucid UPnP/1.0 MiniUPnPd/1.4\r\n LOCATION: http://192.168.0.1:5943/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 92 0.004311000 75.71.49.183 [CENSORED] SSDP 346 HTTP/1.1 200 OK Frame 92: 346 bytes on wire (2768 bits), 346 bytes captured (2768 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.605411000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.605411000 seconds [Time delta from previous captured frame: 0.000038000 seconds] [Time delta from previous displayed frame: 0.000038000 seconds] [Time since reference or first frame: 0.004311000 seconds] Frame Number: 92 Frame Length: 346 bytes (2768 bits) Capture Length: 346 bytes (2768 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 75.71.49.183 (75.71.49.183), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 332 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 248 Protocol: UDP (17) Header checksum: 0x891c [correct] [Good: True] [Bad: False] Source: 75.71.49.183 (75.71.49.183) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 312 Checksum: 0x65ea [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n USN: uuid:5a34308c-1a2c-4546-ac5d-7663dd01dca1::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n EXT:\r\n SERVER: Ubuntu/lucid UPnP/1.0 MiniUPnPd/1.4\r\n LOCATION: http://192.168.0.1:5943/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 93 0.004343000 75.71.49.183 [CENSORED] SSDP 342 HTTP/1.1 200 OK Frame 93: 342 bytes on wire (2736 bits), 342 bytes captured (2736 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.605443000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.605443000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.004343000 seconds] Frame Number: 93 Frame Length: 342 bytes (2736 bits) Capture Length: 342 bytes (2736 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 75.71.49.183 (75.71.49.183), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 328 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 248 Protocol: UDP (17) Header checksum: 0x8920 [correct] [Good: True] [Bad: False] Source: 75.71.49.183 (75.71.49.183) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 308 Checksum: 0x8c18 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n USN: uuid:5a34308c-1a2c-4546-ac5d-7663dd01dca1::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n EXT:\r\n SERVER: Ubuntu/lucid UPnP/1.0 MiniUPnPd/1.4\r\n LOCATION: http://192.168.0.1:5943/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 94 0.004373000 75.71.49.183 [CENSORED] SSDP 322 HTTP/1.1 200 OK Frame 94: 322 bytes on wire (2576 bits), 322 bytes captured (2576 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.605473000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.605473000 seconds [Time delta from previous captured frame: 0.000030000 seconds] [Time delta from previous displayed frame: 0.000030000 seconds] [Time since reference or first frame: 0.004373000 seconds] Frame Number: 94 Frame Length: 322 bytes (2576 bits) Capture Length: 322 bytes (2576 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 75.71.49.183 (75.71.49.183), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 308 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 248 Protocol: UDP (17) Header checksum: 0x8934 [correct] [Good: True] [Bad: False] Source: 75.71.49.183 (75.71.49.183) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 288 Checksum: 0xa054 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:WANDevice:1\r\n USN: uuid:5a34308c-1a2c-4546-ac5d-7663dd01dca1::urn:schemas-upnp-org:device:WANDevice:1\r\n EXT:\r\n SERVER: Ubuntu/lucid UPnP/1.0 MiniUPnPd/1.4\r\n LOCATION: http://192.168.0.1:5943/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 95 0.004407000 75.71.49.183 [CENSORED] SSDP 354 HTTP/1.1 200 OK Frame 95: 354 bytes on wire (2832 bits), 354 bytes captured (2832 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.605507000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.605507000 seconds [Time delta from previous captured frame: 0.000034000 seconds] [Time delta from previous displayed frame: 0.000034000 seconds] [Time since reference or first frame: 0.004407000 seconds] Frame Number: 95 Frame Length: 354 bytes (2832 bits) Capture Length: 354 bytes (2832 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 75.71.49.183 (75.71.49.183), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 340 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 248 Protocol: UDP (17) Header checksum: 0x8914 [correct] [Good: True] [Bad: False] Source: 75.71.49.183 (75.71.49.183) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 320 Checksum: 0x188d [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n USN: uuid:5a34308c-1a2c-4546-ac5d-7663dd01dca1::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n EXT:\r\n SERVER: Ubuntu/lucid UPnP/1.0 MiniUPnPd/1.4\r\n LOCATION: http://192.168.0.1:5943/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 96 0.004439000 75.71.49.183 [CENSORED] SSDP 336 HTTP/1.1 200 OK Frame 96: 336 bytes on wire (2688 bits), 336 bytes captured (2688 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.605539000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.605539000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.004439000 seconds] Frame Number: 96 Frame Length: 336 bytes (2688 bits) Capture Length: 336 bytes (2688 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 75.71.49.183 (75.71.49.183), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 322 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 248 Protocol: UDP (17) Header checksum: 0x8926 [correct] [Good: True] [Bad: False] Source: 75.71.49.183 (75.71.49.183) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 302 Checksum: 0x120d [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n USN: uuid:5a34308c-1a2c-4546-ac5d-7663dd01dca1::urn:schemas-upnp-org:service:WANIPConnection:1\r\n EXT:\r\n SERVER: Ubuntu/lucid UPnP/1.0 MiniUPnPd/1.4\r\n LOCATION: http://192.168.0.1:5943/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 97 0.004472000 75.71.49.183 [CENSORED] SSDP 338 HTTP/1.1 200 OK Frame 97: 338 bytes on wire (2704 bits), 338 bytes captured (2704 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.605572000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.605572000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.004472000 seconds] Frame Number: 97 Frame Length: 338 bytes (2704 bits) Capture Length: 338 bytes (2704 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 75.71.49.183 (75.71.49.183), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 324 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 248 Protocol: UDP (17) Header checksum: 0x8924 [correct] [Good: True] [Bad: False] Source: 75.71.49.183 (75.71.49.183) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 304 Checksum: 0x6c00 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANPPPConnection:1\r\n USN: uuid:5a34308c-1a2c-4546-ac5d-7663dd01dca1::urn:schemas-upnp-org:service:WANPPPConnection:1\r\n EXT:\r\n SERVER: Ubuntu/lucid UPnP/1.0 MiniUPnPd/1.4\r\n LOCATION: http://192.168.0.1:5943/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 98 0.004575000 121.177.52.139 [CENSORED] SSDP 344 HTTP/1.1 200 OK Frame 98: 344 bytes on wire (2752 bits), 344 bytes captured (2752 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.605675000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.605675000 seconds [Time delta from previous captured frame: 0.000103000 seconds] [Time delta from previous displayed frame: 0.000103000 seconds] [Time since reference or first frame: 0.004575000 seconds] Frame Number: 98 Frame Length: 344 bytes (2752 bits) Capture Length: 344 bytes (2752 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 121.177.52.139 (121.177.52.139), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x28 (DSCP 0x0a: Assured Forwarding 11; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 10.. = Differentiated Services Codepoint: Assured Forwarding 11 (0x0a) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 330 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 250 Protocol: UDP (17) Header checksum: 0x55b8 [correct] [Good: True] [Bad: False] Source: 121.177.52.139 (121.177.52.139) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 310 Checksum: 0x3639 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:2048/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 99 0.004603000 184.167.193.168 [CENSORED] SSDP 333 HTTP/1.1 200 OK Frame 99: 333 bytes on wire (2664 bits), 333 bytes captured (2664 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.605703000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.605703000 seconds [Time delta from previous captured frame: 0.000028000 seconds] [Time delta from previous displayed frame: 0.000028000 seconds] [Time since reference or first frame: 0.004603000 seconds] Frame Number: 99 Frame Length: 333 bytes (2664 bits) Capture Length: 333 bytes (2664 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 184.167.193.168 (184.167.193.168), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 319 Identification: 0x75de (30174) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x18f9 [correct] [Good: True] [Bad: False] Source: 184.167.193.168 (184.167.193.168) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 299 Checksum: 0x9b91 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:WANDevice:\r\n USN: uuid:cc9a6286-1dd1-11b2-9bec-d3a86a4d2c82::urn:schemas-upnp-org:device:WANDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 100 0.004638000 49.64.5.182 [CENSORED] SSDP 364 HTTP/1.1 200 OK Frame 100: 364 bytes on wire (2912 bits), 364 bytes captured (2912 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.605738000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.605738000 seconds [Time delta from previous captured frame: 0.000035000 seconds] [Time delta from previous displayed frame: 0.000035000 seconds] [Time since reference or first frame: 0.004638000 seconds] Frame Number: 100 Frame Length: 364 bytes (2912 bits) Capture Length: 364 bytes (2912 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 49.64.5.182 (49.64.5.182), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 350 Identification: 0x7240 (29248) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x9ed2 [correct] [Good: True] [Bad: False] Source: 49.64.5.182 (49.64.5.182) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 330 Checksum: 0x6ee7 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 101 0.004667000 49.64.5.182 [CENSORED] SSDP 330 HTTP/1.1 200 OK Frame 101: 330 bytes on wire (2640 bits), 330 bytes captured (2640 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.605767000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.605767000 seconds [Time delta from previous captured frame: 0.000029000 seconds] [Time delta from previous displayed frame: 0.000029000 seconds] [Time since reference or first frame: 0.004667000 seconds] Frame Number: 101 Frame Length: 330 bytes (2640 bits) Capture Length: 330 bytes (2640 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 49.64.5.182 (49.64.5.182), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 316 Identification: 0x7241 (29249) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x9ef3 [correct] [Good: True] [Bad: False] Source: 49.64.5.182 (49.64.5.182) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 296 Checksum: 0xf08d [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 102 0.004705000 184.167.193.168 [CENSORED] SSDP 365 HTTP/1.1 200 OK Frame 102: 365 bytes on wire (2920 bits), 365 bytes captured (2920 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.605805000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.605805000 seconds [Time delta from previous captured frame: 0.000038000 seconds] [Time delta from previous displayed frame: 0.000038000 seconds] [Time since reference or first frame: 0.004705000 seconds] Frame Number: 102 Frame Length: 365 bytes (2920 bits) Capture Length: 365 bytes (2920 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 184.167.193.168 (184.167.193.168), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 351 Identification: 0x75df (30175) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x18d8 [correct] [Good: True] [Bad: False] Source: 184.167.193.168 (184.167.193.168) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 331 Checksum: 0x8f4e [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:\r\n USN: uuid:cc9a6286-1dd1-11b2-9bec-d3a86a4d2c82::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:\r\n \r\n No. Time Source Destination Protocol Length Info 103 0.004740000 49.64.5.182 [CENSORED] SSDP 362 HTTP/1.1 200 OK Frame 103: 362 bytes on wire (2896 bits), 362 bytes captured (2896 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.605840000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.605840000 seconds [Time delta from previous captured frame: 0.000035000 seconds] [Time delta from previous displayed frame: 0.000035000 seconds] [Time since reference or first frame: 0.004740000 seconds] Frame Number: 103 Frame Length: 362 bytes (2896 bits) Capture Length: 362 bytes (2896 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 49.64.5.182 (49.64.5.182), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 348 Identification: 0x7242 (29250) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x9ed2 [correct] [Good: True] [Bad: False] Source: 49.64.5.182 (49.64.5.182) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 328 Checksum: 0xf6f9 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 104 0.004768000 175.171.139.53 [CENSORED] SSDP 362 HTTP/1.1 200 OK Frame 104: 362 bytes on wire (2896 bits), 362 bytes captured (2896 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.605868000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.605868000 seconds [Time delta from previous captured frame: 0.000028000 seconds] [Time delta from previous displayed frame: 0.000028000 seconds] [Time since reference or first frame: 0.004768000 seconds] Frame Number: 104 Frame Length: 362 bytes (2896 bits) Capture Length: 362 bytes (2896 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 175.171.139.53 (175.171.139.53), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 348 Identification: 0x615d (24925) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xabcc [correct] [Good: True] [Bad: False] Source: 175.171.139.53 (175.171.139.53) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 328 Checksum: 0xf30e [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 105 0.004800000 121.177.52.139 [CENSORED] SSDP 340 HTTP/1.1 200 OK Frame 105: 340 bytes on wire (2720 bits), 340 bytes captured (2720 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.605900000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.605900000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.004800000 seconds] Frame Number: 105 Frame Length: 340 bytes (2720 bits) Capture Length: 340 bytes (2720 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 121.177.52.139 (121.177.52.139), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x28 (DSCP 0x0a: Assured Forwarding 11; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 10.. = Differentiated Services Codepoint: Assured Forwarding 11 (0x0a) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 326 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 250 Protocol: UDP (17) Header checksum: 0x55bc [correct] [Good: True] [Bad: False] Source: 121.177.52.139 (121.177.52.139) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 306 Checksum: 0x5c67 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:2048/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 106 0.004829000 1.25.155.134 [CENSORED] SSDP 330 HTTP/1.1 200 OK Frame 106: 330 bytes on wire (2640 bits), 330 bytes captured (2640 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.605929000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.605929000 seconds [Time delta from previous captured frame: 0.000029000 seconds] [Time delta from previous displayed frame: 0.000029000 seconds] [Time since reference or first frame: 0.004829000 seconds] Frame Number: 106 Frame Length: 330 bytes (2640 bits) Capture Length: 330 bytes (2640 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 1.25.155.134 (1.25.155.134), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 316 Identification: 0x88ea (35050) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x22a1 [correct] [Good: True] [Bad: False] Source: 1.25.155.134 (1.25.155.134) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 296 Checksum: 0x8ae4 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 107 0.004853000 71.81.181.162 [CENSORED] SSDP 269 HTTP/1.1 200 OK Frame 107: 269 bytes on wire (2152 bits), 269 bytes captured (2152 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.605953000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.605953000 seconds [Time delta from previous captured frame: 0.000024000 seconds] [Time delta from previous displayed frame: 0.000024000 seconds] [Time since reference or first frame: 0.004853000 seconds] Frame Number: 107 Frame Length: 269 bytes (2152 bits) Capture Length: 269 bytes (2152 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 71.81.181.162 (71.81.181.162), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 255 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (17) Header checksum: 0x0874 [correct] [Good: True] [Bad: False] Source: 71.81.181.162 (71.81.181.162) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 235 Checksum: 0x2df5 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: upnp:rootdevice\r\n USN: uuid:5b557e7e-71c7-49c2-9e41-261efb036bef::upnp:rootdevice\r\n EXT:\r\n SERVER: TBS/R2 UPnP/1.0 MiniUPnPd/1.2\r\n LOCATION: http://192.168.2.1:37684/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 108 0.004890000 69.122.151.229 [CENSORED] SSDP 287 HTTP/1.1 200 OK Frame 108: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.605990000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.605990000 seconds [Time delta from previous captured frame: 0.000037000 seconds] [Time delta from previous displayed frame: 0.000037000 seconds] [Time since reference or first frame: 0.004890000 seconds] Frame Number: 108 Frame Length: 287 bytes (2296 bits) Capture Length: 287 bytes (2296 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 69.122.151.229 (69.122.151.229), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 273 Identification: 0x108a (4234) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 248 Protocol: UDP (17) Header checksum: 0x186c [correct] [Good: True] [Bad: False] Source: 69.122.151.229 (69.122.151.229) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 253 Checksum: 0xd4ba [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: upnp:rootdevice\r\n USN: uuid:b1c5b172-1dd1-11b2-8144-8c1b2c3dfb83::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 109 0.004931000 69.122.151.229 [CENSORED] SSDP 357 HTTP/1.1 200 OK Frame 109: 357 bytes on wire (2856 bits), 357 bytes captured (2856 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.606031000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.606031000 seconds [Time delta from previous captured frame: 0.000041000 seconds] [Time delta from previous displayed frame: 0.000041000 seconds] [Time since reference or first frame: 0.004931000 seconds] Frame Number: 109 Frame Length: 357 bytes (2856 bits) Capture Length: 357 bytes (2856 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 69.122.151.229 (69.122.151.229), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 343 Identification: 0x108b (4235) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 248 Protocol: UDP (17) Header checksum: 0x1825 [correct] [Good: True] [Bad: False] Source: 69.122.151.229 (69.122.151.229) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 323 Checksum: 0x3652 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n USN: uuid:b1c5b172-1dd1-11b2-8144-8c1b2c3dfb83::urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 110 0.004956000 50.168.18.193 [CENSORED] SSDP 287 HTTP/1.1 200 OK Frame 110: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.606056000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.606056000 seconds [Time delta from previous captured frame: 0.000025000 seconds] [Time delta from previous displayed frame: 0.000025000 seconds] [Time since reference or first frame: 0.004956000 seconds] Frame Number: 110 Frame Length: 287 bytes (2296 bits) Capture Length: 287 bytes (2296 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 50.168.18.193 (50.168.18.193), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 273 Identification: 0xaadc (43740) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 242 Protocol: UDP (17) Header checksum: 0x1c10 [correct] [Good: True] [Bad: False] Source: 50.168.18.193 (50.168.18.193) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 253 Checksum: 0xb4f0 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: upnp:rootdevice\r\n USN: uuid:11111111-1111-1111-1111-111111111111::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 111 0.004994000 50.168.18.193 [CENSORED] SSDP 357 HTTP/1.1 200 OK Frame 111: 357 bytes on wire (2856 bits), 357 bytes captured (2856 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.606094000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.606094000 seconds [Time delta from previous captured frame: 0.000038000 seconds] [Time delta from previous displayed frame: 0.000038000 seconds] [Time since reference or first frame: 0.004994000 seconds] Frame Number: 111 Frame Length: 357 bytes (2856 bits) Capture Length: 357 bytes (2856 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 50.168.18.193 (50.168.18.193), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 343 Identification: 0xaadd (43741) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 242 Protocol: UDP (17) Header checksum: 0x1bc9 [correct] [Good: True] [Bad: False] Source: 50.168.18.193 (50.168.18.193) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 323 Checksum: 0x0d91 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n USN: uuid:11111111-1111-1111-1111-111111111111::urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 112 0.005023000 50.168.18.193 [CENSORED] SSDP 333 HTTP/1.1 200 OK Frame 112: 333 bytes on wire (2664 bits), 333 bytes captured (2664 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.606123000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.606123000 seconds [Time delta from previous captured frame: 0.000029000 seconds] [Time delta from previous displayed frame: 0.000029000 seconds] [Time since reference or first frame: 0.005023000 seconds] Frame Number: 112 Frame Length: 333 bytes (2664 bits) Capture Length: 333 bytes (2664 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 50.168.18.193 (50.168.18.193), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 319 Identification: 0xaade (43742) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 242 Protocol: UDP (17) Header checksum: 0x1be0 [correct] [Good: True] [Bad: False] Source: 50.168.18.193 (50.168.18.193) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 299 Checksum: 0x38ea [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:WANDevice:\r\n USN: uuid:22222222-2222-2222-2222-222222222222::urn:schemas-upnp-org:device:WANDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 113 0.005093000 67.8.85.141 [CENSORED] SSDP 348 HTTP/1.1 200 OK Frame 113: 348 bytes on wire (2784 bits), 348 bytes captured (2784 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.606193000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.606193000 seconds [Time delta from previous captured frame: 0.000070000 seconds] [Time delta from previous displayed frame: 0.000070000 seconds] [Time since reference or first frame: 0.005093000 seconds] Frame Number: 113 Frame Length: 348 bytes (2784 bits) Capture Length: 348 bytes (2784 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 67.8.85.141 (67.8.85.141), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 334 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 247 Protocol: UDP (17) Header checksum: 0x6e83 [correct] [Good: True] [Bad: False] Source: 67.8.85.141 (67.8.85.141) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 314 Checksum: 0x55b9 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n USN: uuid:6132a764-1dd2-11b2-b019-e701f3f06ede::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 114 0.005121000 96.49.181.204 [CENSORED] SSDP 347 HTTP/1.1 200 OK Frame 114: 347 bytes on wire (2776 bits), 347 bytes captured (2776 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.606221000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.606221000 seconds [Time delta from previous captured frame: 0.000028000 seconds] [Time delta from previous displayed frame: 0.000028000 seconds] [Time since reference or first frame: 0.005121000 seconds] Frame Number: 114 Frame Length: 347 bytes (2776 bits) Capture Length: 347 bytes (2776 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 96.49.181.204 (96.49.181.204), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 333 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xf1fb [correct] [Good: True] [Bad: False] Source: 96.49.181.204 (96.49.181.204) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 313 Checksum: 0x453b [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n USN: uuid:5a34308c-1a2c-4546-ac5d-7663dd01dca1::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n EXT:\r\n SERVER: Ubuntu/lucid UPnP/1.0 MiniUPnPd/1.4\r\n LOCATION: http://192.168.0.1:16793/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 115 0.005151000 96.49.181.204 [CENSORED] SSDP 343 HTTP/1.1 200 OK Frame 115: 343 bytes on wire (2744 bits), 343 bytes captured (2744 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.606251000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.606251000 seconds [Time delta from previous captured frame: 0.000030000 seconds] [Time delta from previous displayed frame: 0.000030000 seconds] [Time since reference or first frame: 0.005151000 seconds] Frame Number: 115 Frame Length: 343 bytes (2744 bits) Capture Length: 343 bytes (2744 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 96.49.181.204 (96.49.181.204), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 329 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xf1ff [correct] [Good: True] [Bad: False] Source: 96.49.181.204 (96.49.181.204) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 309 Checksum: 0x6b69 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n USN: uuid:5a34308c-1a2c-4546-ac5d-7663dd01dca1::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n EXT:\r\n SERVER: Ubuntu/lucid UPnP/1.0 MiniUPnPd/1.4\r\n LOCATION: http://192.168.0.1:16793/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 116 0.005220000 96.49.181.204 [CENSORED] SSDP 323 HTTP/1.1 200 OK Frame 116: 323 bytes on wire (2584 bits), 323 bytes captured (2584 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.606320000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.606320000 seconds [Time delta from previous captured frame: 0.000069000 seconds] [Time delta from previous displayed frame: 0.000069000 seconds] [Time since reference or first frame: 0.005220000 seconds] Frame Number: 116 Frame Length: 323 bytes (2584 bits) Capture Length: 323 bytes (2584 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 96.49.181.204 (96.49.181.204), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 309 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xf213 [correct] [Good: True] [Bad: False] Source: 96.49.181.204 (96.49.181.204) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 289 Checksum: 0x7fa5 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:WANDevice:1\r\n USN: uuid:5a34308c-1a2c-4546-ac5d-7663dd01dca1::urn:schemas-upnp-org:device:WANDevice:1\r\n EXT:\r\n SERVER: Ubuntu/lucid UPnP/1.0 MiniUPnPd/1.4\r\n LOCATION: http://192.168.0.1:16793/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 117 0.005250000 96.49.181.204 [CENSORED] SSDP 355 HTTP/1.1 200 OK Frame 117: 355 bytes on wire (2840 bits), 355 bytes captured (2840 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.606350000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.606350000 seconds [Time delta from previous captured frame: 0.000030000 seconds] [Time delta from previous displayed frame: 0.000030000 seconds] [Time since reference or first frame: 0.005250000 seconds] Frame Number: 117 Frame Length: 355 bytes (2840 bits) Capture Length: 355 bytes (2840 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 96.49.181.204 (96.49.181.204), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 341 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xf1f3 [correct] [Good: True] [Bad: False] Source: 96.49.181.204 (96.49.181.204) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 321 Checksum: 0xf7dd [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n USN: uuid:5a34308c-1a2c-4546-ac5d-7663dd01dca1::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n EXT:\r\n SERVER: Ubuntu/lucid UPnP/1.0 MiniUPnPd/1.4\r\n LOCATION: http://192.168.0.1:16793/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 118 0.005282000 75.84.26.218 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 118: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.606382000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.606382000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.005282000 seconds] Frame Number: 118 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 75.84.26.218 (75.84.26.218), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0x0f4e (3918) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 248 Protocol: UDP (17) Header checksum: 0x909b [correct] [Good: True] [Bad: False] Source: 75.84.26.218 (75.84.26.218) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0x24f5 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:\r\n USN: uuid:11111111-1111-1111-1111-111111111111::urn:schemas-upnp-org:service:Layer3Forwarding:\r\n \r\n No. Time Source Destination Protocol Length Info 119 0.005317000 74.89.236.8 [CENSORED] SSDP 357 HTTP/1.1 200 OK Frame 119: 357 bytes on wire (2856 bits), 357 bytes captured (2856 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.606417000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.606417000 seconds [Time delta from previous captured frame: 0.000035000 seconds] [Time delta from previous displayed frame: 0.000035000 seconds] [Time since reference or first frame: 0.005317000 seconds] Frame Number: 119 Frame Length: 357 bytes (2856 bits) Capture Length: 357 bytes (2856 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 74.89.236.8 (74.89.236.8), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 343 Identification: 0xe4ed (58605) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (17) Header checksum: 0xe9bf [correct] [Good: True] [Bad: False] Source: 74.89.236.8 (74.89.236.8) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 323 Checksum: 0x5e27 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n USN: uuid:add0b512-1dd1-11b2-9a04-9308d584185e::urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 120 0.005351000 42.102.194.176 [CENSORED] SSDP 364 HTTP/1.1 200 OK Frame 120: 364 bytes on wire (2912 bits), 364 bytes captured (2912 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.606451000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.606451000 seconds [Time delta from previous captured frame: 0.000034000 seconds] [Time delta from previous displayed frame: 0.000034000 seconds] [Time since reference or first frame: 0.005351000 seconds] Frame Number: 120 Frame Length: 364 bytes (2912 bits) Capture Length: 364 bytes (2912 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 42.102.194.176 (42.102.194.176), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 350 Identification: 0xcb1f (51999) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x8fd2 [correct] [Good: True] [Bad: False] Source: 42.102.194.176 (42.102.194.176) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 330 Checksum: 0xb8c6 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 121 0.005380000 121.177.52.139 [CENSORED] SSDP 334 HTTP/1.1 200 OK Frame 121: 334 bytes on wire (2672 bits), 334 bytes captured (2672 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.606480000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.606480000 seconds [Time delta from previous captured frame: 0.000029000 seconds] [Time delta from previous displayed frame: 0.000029000 seconds] [Time since reference or first frame: 0.005380000 seconds] Frame Number: 121 Frame Length: 334 bytes (2672 bits) Capture Length: 334 bytes (2672 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 121.177.52.139 (121.177.52.139), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x28 (DSCP 0x0a: Assured Forwarding 11; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 10.. = Differentiated Services Codepoint: Assured Forwarding 11 (0x0a) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 320 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 250 Protocol: UDP (17) Header checksum: 0x55c2 [correct] [Good: True] [Bad: False] Source: 121.177.52.139 (121.177.52.139) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 300 Checksum: 0x132b [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:service:WANIPConnection:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:2048/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 122 0.005481000 49.64.5.182 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 122: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.606581000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.606581000 seconds [Time delta from previous captured frame: 0.000101000 seconds] [Time delta from previous displayed frame: 0.000101000 seconds] [Time since reference or first frame: 0.005481000 seconds] Frame Number: 122 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 49.64.5.182 (49.64.5.182), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0x7246 (29254) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x9ed4 [correct] [Good: True] [Bad: False] Source: 49.64.5.182 (49.64.5.182) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0xdfb0 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 123 0.005542000 49.64.5.182 [CENSORED] SSDP 284 HTTP/1.1 200 OK Frame 123: 284 bytes on wire (2272 bits), 284 bytes captured (2272 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.606642000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.606642000 seconds [Time delta from previous captured frame: 0.000061000 seconds] [Time delta from previous displayed frame: 0.000061000 seconds] [Time since reference or first frame: 0.005542000 seconds] Frame Number: 123 Frame Length: 284 bytes (2272 bits) Capture Length: 284 bytes (2272 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 49.64.5.182 (49.64.5.182), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 270 Identification: 0x7247 (29255) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x9f1b [correct] [Good: True] [Bad: False] Source: 49.64.5.182 (49.64.5.182) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 250 Checksum: 0x4eaf [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: upnp:rootdevice\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 124 0.005611000 49.64.5.182 [CENSORED] SSDP 348 HTTP/1.1 200 OK Frame 124: 348 bytes on wire (2784 bits), 348 bytes captured (2784 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.606711000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.606711000 seconds [Time delta from previous captured frame: 0.000069000 seconds] [Time delta from previous displayed frame: 0.000069000 seconds] [Time since reference or first frame: 0.005611000 seconds] Frame Number: 124 Frame Length: 348 bytes (2784 bits) Capture Length: 348 bytes (2784 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 49.64.5.182 (49.64.5.182), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 334 Identification: 0x7248 (29256) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x9eda [correct] [Good: True] [Bad: False] Source: 49.64.5.182 (49.64.5.182) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 314 Checksum: 0x8869 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n \r\n No. Time Source Destination Protocol Length Info 125 0.005638000 139.210.225.202 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 125: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.606738000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.606738000 seconds [Time delta from previous captured frame: 0.000027000 seconds] [Time delta from previous displayed frame: 0.000027000 seconds] [Time since reference or first frame: 0.005638000 seconds] Frame Number: 125 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 139.210.225.202 (139.210.225.202), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0x0c52 (3154) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xce4f [correct] [Good: True] [Bad: False] Source: 139.210.225.202 (139.210.225.202) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0x5c2c [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 126 0.005676000 139.210.225.202 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 126: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.606776000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.606776000 seconds [Time delta from previous captured frame: 0.000038000 seconds] [Time delta from previous displayed frame: 0.000038000 seconds] [Time since reference or first frame: 0.005676000 seconds] Frame Number: 126 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 139.210.225.202 (139.210.225.202), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0x0c53 (3155) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xce20 [correct] [Good: True] [Bad: False] Source: 139.210.225.202 (139.210.225.202) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0xa909 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 127 0.005726000 27.205.64.108 [CENSORED] SSDP 362 HTTP/1.1 200 OK Frame 127: 362 bytes on wire (2896 bits), 362 bytes captured (2896 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.606826000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.606826000 seconds [Time delta from previous captured frame: 0.000050000 seconds] [Time delta from previous displayed frame: 0.000050000 seconds] [Time since reference or first frame: 0.005726000 seconds] Frame Number: 127 Frame Length: 362 bytes (2896 bits) Capture Length: 362 bytes (2896 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 27.205.64.108 (27.205.64.108), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 348 Identification: 0x5621 (22049) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x95b0 [correct] [Good: True] [Bad: False] Source: 27.205.64.108 (27.205.64.108) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 328 Checksum: 0xd1b6 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 128 0.006272000 75.129.53.29 [CENSORED] SSDP 344 HTTP/1.1 200 OK Frame 128: 344 bytes on wire (2752 bits), 344 bytes captured (2752 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.607372000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.607372000 seconds [Time delta from previous captured frame: 0.000546000 seconds] [Time delta from previous displayed frame: 0.000546000 seconds] [Time since reference or first frame: 0.006272000 seconds] Frame Number: 128 Frame Length: 344 bytes (2752 bits) Capture Length: 344 bytes (2752 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 75.129.53.29 (75.129.53.29), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 330 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x827e [correct] [Good: True] [Bad: False] Source: 75.129.53.29 (75.129.53.29) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 310 Checksum: 0xfe31 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65530/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n USN: uuid:21e49fb0-1dd2-11b2-870a-9a7d92f101d1::urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n \r\n No. Time Source Destination Protocol Length Info 129 0.006307000 75.129.53.29 [CENSORED] SSDP 344 HTTP/1.1 200 OK Frame 129: 344 bytes on wire (2752 bits), 344 bytes captured (2752 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.607407000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.607407000 seconds [Time delta from previous captured frame: 0.000035000 seconds] [Time delta from previous displayed frame: 0.000035000 seconds] [Time since reference or first frame: 0.006307000 seconds] Frame Number: 129 Frame Length: 344 bytes (2752 bits) Capture Length: 344 bytes (2752 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 75.129.53.29 (75.129.53.29), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 330 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x827e [correct] [Good: True] [Bad: False] Source: 75.129.53.29 (75.129.53.29) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 310 Checksum: 0xfead [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65530/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-wifialliance-org:device:WFADevice:1\r\n USN: uuid:21ef3268-1dd2-11b2-bd32-aed7da2c9088::urn:schemas-wifialliance-org:device:WFADevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 130 0.006341000 75.129.53.29 [CENSORED] SSDP 354 HTTP/1.1 200 OK Frame 130: 354 bytes on wire (2832 bits), 354 bytes captured (2832 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.607441000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.607441000 seconds [Time delta from previous captured frame: 0.000034000 seconds] [Time delta from previous displayed frame: 0.000034000 seconds] [Time since reference or first frame: 0.006341000 seconds] Frame Number: 130 Frame Length: 354 bytes (2832 bits) Capture Length: 354 bytes (2832 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 75.129.53.29 (75.129.53.29), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 340 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x8274 [correct] [Good: True] [Bad: False] Source: 75.129.53.29 (75.129.53.29) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 320 Checksum: 0x29f9 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65530/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-wifialliance-org:service:WFAWLANConfig:1\r\n USN: uuid:21ef3268-1dd2-11b2-bd32-aed7da2c9088::urn:schemas-wifialliance-org:service:WFAWLANConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 131 0.006364000 75.129.53.29 [CENSORED] SSDP 289 HTTP/1.1 200 OK Frame 131: 289 bytes on wire (2312 bits), 289 bytes captured (2312 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.607464000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.607464000 seconds [Time delta from previous captured frame: 0.000023000 seconds] [Time delta from previous displayed frame: 0.000023000 seconds] [Time since reference or first frame: 0.006364000 seconds] Frame Number: 131 Frame Length: 289 bytes (2312 bits) Capture Length: 289 bytes (2312 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 75.129.53.29 (75.129.53.29), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 275 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x82b5 [correct] [Good: True] [Bad: False] Source: 75.129.53.29 (75.129.53.29) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 255 Checksum: 0xdf02 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65530/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: uuid:21e49fb0-1dd2-11b2-870a-9a7d92f101d1\r\n USN: uuid:21e49fb0-1dd2-11b2-870a-9a7d92f101d1\r\n \r\n No. Time Source Destination Protocol Length Info 132 0.006396000 75.129.53.29 [CENSORED] SSDP 289 HTTP/1.1 200 OK Frame 132: 289 bytes on wire (2312 bits), 289 bytes captured (2312 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.607496000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.607496000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.006396000 seconds] Frame Number: 132 Frame Length: 289 bytes (2312 bits) Capture Length: 289 bytes (2312 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 75.129.53.29 (75.129.53.29), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 275 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x82b5 [correct] [Good: True] [Bad: False] Source: 75.129.53.29 (75.129.53.29) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 255 Checksum: 0x4dc2 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65530/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: uuid:21e85a60-1dd2-11b2-9846-84368dd80ffc\r\n USN: uuid:21e85a60-1dd2-11b2-9846-84368dd80ffc\r\n \r\n No. Time Source Destination Protocol Length Info 133 0.006432000 75.129.53.29 [CENSORED] SSDP 289 HTTP/1.1 200 OK Frame 133: 289 bytes on wire (2312 bits), 289 bytes captured (2312 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.607532000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.607532000 seconds [Time delta from previous captured frame: 0.000036000 seconds] [Time delta from previous displayed frame: 0.000036000 seconds] [Time since reference or first frame: 0.006432000 seconds] Frame Number: 133 Frame Length: 289 bytes (2312 bits) Capture Length: 289 bytes (2312 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 75.129.53.29 (75.129.53.29), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 275 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x82b5 [correct] [Good: True] [Bad: False] Source: 75.129.53.29 (75.129.53.29) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 255 Checksum: 0x4aae [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65530/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: uuid:21ee0c58-1dd2-11b2-9d48-a59087fffaa6\r\n USN: uuid:21ee0c58-1dd2-11b2-9d48-a59087fffaa6\r\n \r\n No. Time Source Destination Protocol Length Info 134 0.006473000 106.44.209.217 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 134: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.607573000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.607573000 seconds [Time delta from previous captured frame: 0.000041000 seconds] [Time delta from previous displayed frame: 0.000041000 seconds] [Time since reference or first frame: 0.006473000 seconds] Frame Number: 134 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 106.44.209.217 (106.44.209.217), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0x56b7 (22199) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xb553 [correct] [Good: True] [Bad: False] Source: 106.44.209.217 (106.44.209.217) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0xdaa0 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 135 0.006508000 39.68.189.181 [CENSORED] SSDP 362 HTTP/1.1 200 OK Frame 135: 362 bytes on wire (2896 bits), 362 bytes captured (2896 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.607608000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.607608000 seconds [Time delta from previous captured frame: 0.000035000 seconds] [Time delta from previous displayed frame: 0.000035000 seconds] [Time since reference or first frame: 0.006508000 seconds] Frame Number: 135 Frame Length: 362 bytes (2896 bits) Capture Length: 362 bytes (2896 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 39.68.189.181 (39.68.189.181), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 348 Identification: 0xb099 (45209) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xb267 [correct] [Good: True] [Bad: False] Source: 39.68.189.181 (39.68.189.181) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 328 Checksum: 0x48f6 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 136 0.006540000 98.213.81.212 [CENSORED] SSDP 357 HTTP/1.1 200 OK Frame 136: 357 bytes on wire (2856 bits), 357 bytes captured (2856 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.607640000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.607640000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.006540000 seconds] Frame Number: 136 Frame Length: 357 bytes (2856 bits) Capture Length: 357 bytes (2856 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 98.213.81.212 (98.213.81.212), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 343 Identification: 0xb829 (47145) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x963c [correct] [Good: True] [Bad: False] Source: 98.213.81.212 (98.213.81.212) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 323 Checksum: 0x5f7c [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n USN: uuid:cc963dc8-1dd1-11b2-ba00-fb76aaf011c4::urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 137 0.006567000 24.7.24.116 [CENSORED] SSDP 287 HTTP/1.1 200 OK Frame 137: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.607667000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.607667000 seconds [Time delta from previous captured frame: 0.000027000 seconds] [Time delta from previous displayed frame: 0.000027000 seconds] [Time since reference or first frame: 0.006567000 seconds] Frame Number: 137 Frame Length: 287 bytes (2296 bits) Capture Length: 287 bytes (2296 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 24.7.24.116 (24.7.24.116), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 273 Identification: 0x443d (17469) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 242 Protocol: UDP (17) Header checksum: 0x979d [correct] [Good: True] [Bad: False] Source: 24.7.24.116 (24.7.24.116) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 253 Checksum: 0x1cf9 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: upnp:rootdevice\r\n USN: uuid:2a78a570-1dd2-11b2-bb77-e781f2b631ad::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 138 0.006669000 121.174.70.149 [CENSORED] SSDP 344 HTTP/1.1 200 OK Frame 138: 344 bytes on wire (2752 bits), 344 bytes captured (2752 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.607769000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.607769000 seconds [Time delta from previous captured frame: 0.000102000 seconds] [Time delta from previous displayed frame: 0.000102000 seconds] [Time since reference or first frame: 0.006669000 seconds] Frame Number: 138 Frame Length: 344 bytes (2752 bits) Capture Length: 344 bytes (2752 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 121.174.70.149 (121.174.70.149), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x28 (DSCP 0x0a: Assured Forwarding 11; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 10.. = Differentiated Services Codepoint: Assured Forwarding 11 (0x0a) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 330 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x48b1 [correct] [Good: True] [Bad: False] Source: 121.174.70.149 (121.174.70.149) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 310 Checksum: 0x1e39 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:3091/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 139 0.006706000 24.7.24.116 [CENSORED] SSDP 357 HTTP/1.1 200 OK Frame 139: 357 bytes on wire (2856 bits), 357 bytes captured (2856 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.607806000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.607806000 seconds [Time delta from previous captured frame: 0.000037000 seconds] [Time delta from previous displayed frame: 0.000037000 seconds] [Time since reference or first frame: 0.006706000 seconds] Frame Number: 139 Frame Length: 357 bytes (2856 bits) Capture Length: 357 bytes (2856 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 24.7.24.116 (24.7.24.116), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 343 Identification: 0x443e (17470) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 242 Protocol: UDP (17) Header checksum: 0x9756 [correct] [Good: True] [Bad: False] Source: 24.7.24.116 (24.7.24.116) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 323 Checksum: 0x3cd2 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n USN: uuid:2a78a570-1dd2-11b2-bb77-e781f2b631ad::urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 140 0.006742000 24.7.24.116 [CENSORED] SSDP 333 HTTP/1.1 200 OK Frame 140: 333 bytes on wire (2664 bits), 333 bytes captured (2664 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.607842000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.607842000 seconds [Time delta from previous captured frame: 0.000036000 seconds] [Time delta from previous displayed frame: 0.000036000 seconds] [Time since reference or first frame: 0.006742000 seconds] Frame Number: 140 Frame Length: 333 bytes (2664 bits) Capture Length: 333 bytes (2664 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 24.7.24.116 (24.7.24.116), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 319 Identification: 0x443f (17471) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 242 Protocol: UDP (17) Header checksum: 0x976d [correct] [Good: True] [Bad: False] Source: 24.7.24.116 (24.7.24.116) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 299 Checksum: 0xe038 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:WANDevice:\r\n USN: uuid:2a7cd7da-1dd2-11b2-8e39-bec1e7491b7e::urn:schemas-upnp-org:device:WANDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 141 0.006769000 124.199.20.186 [CENSORED] SSDP 333 HTTP/1.1 200 OK Frame 141: 333 bytes on wire (2664 bits), 333 bytes captured (2664 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.607869000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.607869000 seconds [Time delta from previous captured frame: 0.000027000 seconds] [Time delta from previous displayed frame: 0.000027000 seconds] [Time since reference or first frame: 0.006769000 seconds] Frame Number: 141 Frame Length: 333 bytes (2664 bits) Capture Length: 333 bytes (2664 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 124.199.20.186 (124.199.20.186), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 319 Identification: 0xf3d6 (62422) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0xc3bf [correct] [Good: True] [Bad: False] Source: 124.199.20.186 (124.199.20.186) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 299 Checksum: 0x2085 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.10.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{30ea3150-5ad3-49e8-808b-6c4111437217}081075105086::urn:schemas-upnp-org:device:WANDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 142 0.006809000 124.199.20.186 [CENSORED] SSDP 365 HTTP/1.1 200 OK Frame 142: 365 bytes on wire (2920 bits), 365 bytes captured (2920 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.607909000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.607909000 seconds [Time delta from previous captured frame: 0.000040000 seconds] [Time delta from previous displayed frame: 0.000040000 seconds] [Time since reference or first frame: 0.006809000 seconds] Frame Number: 142 Frame Length: 365 bytes (2920 bits) Capture Length: 365 bytes (2920 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 124.199.20.186 (124.199.20.186), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 351 Identification: 0xf3d7 (62423) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0xc39e [correct] [Good: True] [Bad: False] Source: 124.199.20.186 (124.199.20.186) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 331 Checksum: 0x98bd [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.10.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{30ea3150-5ad3-49e8-808b-6c4111437217}081075105086::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 143 0.006838000 76.173.72.108 [CENSORED] SSDP 341 HTTP/1.1 200 OK Frame 143: 341 bytes on wire (2728 bits), 341 bytes captured (2728 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.607938000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.607938000 seconds [Time delta from previous captured frame: 0.000029000 seconds] [Time delta from previous displayed frame: 0.000029000 seconds] [Time since reference or first frame: 0.006838000 seconds] Frame Number: 143 Frame Length: 341 bytes (2728 bits) Capture Length: 341 bytes (2728 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 76.173.72.108 (76.173.72.108), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 327 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x7406 [correct] [Good: True] [Bad: False] Source: 76.173.72.108 (76.173.72.108) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 307 Checksum: 0x219e [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n USN: uuid:11b26059-0d63-48ba-b581-7b75a68b9946::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n EXT:\r\n SERVER: TBS/R2 UPnP/1.0 MiniUPnPd/1.2\r\n LOCATION: http://192.168.2.1:39085/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 144 0.006868000 76.173.72.108 [CENSORED] SSDP 337 HTTP/1.1 200 OK Frame 144: 337 bytes on wire (2696 bits), 337 bytes captured (2696 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.607968000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.607968000 seconds [Time delta from previous captured frame: 0.000030000 seconds] [Time delta from previous displayed frame: 0.000030000 seconds] [Time since reference or first frame: 0.006868000 seconds] Frame Number: 144 Frame Length: 337 bytes (2696 bits) Capture Length: 337 bytes (2696 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 76.173.72.108 (76.173.72.108), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 323 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x740a [correct] [Good: True] [Bad: False] Source: 76.173.72.108 (76.173.72.108) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 303 Checksum: 0x47cc [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n USN: uuid:11b26059-0d63-48ba-b581-7b75a68b9946::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n EXT:\r\n SERVER: TBS/R2 UPnP/1.0 MiniUPnPd/1.2\r\n LOCATION: http://192.168.2.1:39085/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 145 0.006899000 76.173.72.108 [CENSORED] SSDP 317 HTTP/1.1 200 OK Frame 145: 317 bytes on wire (2536 bits), 317 bytes captured (2536 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.607999000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.607999000 seconds [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.006899000 seconds] Frame Number: 145 Frame Length: 317 bytes (2536 bits) Capture Length: 317 bytes (2536 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 76.173.72.108 (76.173.72.108), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 303 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x741e [correct] [Good: True] [Bad: False] Source: 76.173.72.108 (76.173.72.108) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 283 Checksum: 0x5c08 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:WANDevice:1\r\n USN: uuid:11b26059-0d63-48ba-b581-7b75a68b9946::urn:schemas-upnp-org:device:WANDevice:1\r\n EXT:\r\n SERVER: TBS/R2 UPnP/1.0 MiniUPnPd/1.2\r\n LOCATION: http://192.168.2.1:39085/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 146 0.006936000 76.173.72.108 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 146: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.608036000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.608036000 seconds [Time delta from previous captured frame: 0.000037000 seconds] [Time delta from previous displayed frame: 0.000037000 seconds] [Time since reference or first frame: 0.006936000 seconds] Frame Number: 146 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 76.173.72.108 (76.173.72.108), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x73fe [correct] [Good: True] [Bad: False] Source: 76.173.72.108 (76.173.72.108) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0xd440 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n USN: uuid:11b26059-0d63-48ba-b581-7b75a68b9946::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n EXT:\r\n SERVER: TBS/R2 UPnP/1.0 MiniUPnPd/1.2\r\n LOCATION: http://192.168.2.1:39085/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 147 0.006967000 76.173.72.108 [CENSORED] SSDP 331 HTTP/1.1 200 OK Frame 147: 331 bytes on wire (2648 bits), 331 bytes captured (2648 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.608067000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.608067000 seconds [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.006967000 seconds] Frame Number: 147 Frame Length: 331 bytes (2648 bits) Capture Length: 331 bytes (2648 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 76.173.72.108 (76.173.72.108), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 317 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x7410 [correct] [Good: True] [Bad: False] Source: 76.173.72.108 (76.173.72.108) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 297 Checksum: 0x622c [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n USN: uuid:11b26059-0d63-48ba-b581-7b75a68b9946::urn:schemas-upnp-org:service:WANIPConnection:1\r\n EXT:\r\n SERVER: TBS/R2 UPnP/1.0 MiniUPnPd/1.2\r\n LOCATION: http://192.168.2.1:39085/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 148 0.007000000 76.173.72.108 [CENSORED] SSDP 333 HTTP/1.1 200 OK Frame 148: 333 bytes on wire (2664 bits), 333 bytes captured (2664 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.608100000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.608100000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.007000000 seconds] Frame Number: 148 Frame Length: 333 bytes (2664 bits) Capture Length: 333 bytes (2664 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 76.173.72.108 (76.173.72.108), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 319 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x740e [correct] [Good: True] [Bad: False] Source: 76.173.72.108 (76.173.72.108) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 299 Checksum: 0x27b4 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANPPPConnection:1\r\n USN: uuid:11b26059-0d63-48ba-b581-7b75a68b9946::urn:schemas-upnp-org:service:WANPPPConnection:1\r\n EXT:\r\n SERVER: TBS/R2 UPnP/1.0 MiniUPnPd/1.2\r\n LOCATION: http://192.168.2.1:39085/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 149 0.007035000 76.173.72.108 [CENSORED] SSDP 333 HTTP/1.1 200 OK Frame 149: 333 bytes on wire (2664 bits), 333 bytes captured (2664 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.608135000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.608135000 seconds [Time delta from previous captured frame: 0.000035000 seconds] [Time delta from previous displayed frame: 0.000035000 seconds] [Time since reference or first frame: 0.007035000 seconds] Frame Number: 149 Frame Length: 333 bytes (2664 bits) Capture Length: 333 bytes (2664 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 76.173.72.108 (76.173.72.108), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 319 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x740e [correct] [Good: True] [Bad: False] Source: 76.173.72.108 (76.173.72.108) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 299 Checksum: 0xca56 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n USN: uuid:11b26059-0d63-48ba-b581-7b75a68b9946::urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n EXT:\r\n SERVER: TBS/R2 UPnP/1.0 MiniUPnPd/1.2\r\n LOCATION: http://192.168.2.1:39085/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 150 0.007066000 116.114.180.107 [CENSORED] SSDP 330 HTTP/1.1 200 OK Frame 150: 330 bytes on wire (2640 bits), 330 bytes captured (2640 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.608166000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.608166000 seconds [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.007066000 seconds] Frame Number: 150 Frame Length: 330 bytes (2640 bits) Capture Length: 330 bytes (2640 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 116.114.180.107 (116.114.180.107), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 316 Identification: 0x464c (17996) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xd900 [correct] [Good: True] [Bad: False] Source: 116.114.180.107 (116.114.180.107) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 296 Checksum: 0xfea4 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.2.1:80/UPnP/IGD.xml\r\n ST: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 151 0.007100000 121.174.70.149 [CENSORED] SSDP 336 HTTP/1.1 200 OK Frame 151: 336 bytes on wire (2688 bits), 336 bytes captured (2688 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.608200000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.608200000 seconds [Time delta from previous captured frame: 0.000034000 seconds] [Time delta from previous displayed frame: 0.000034000 seconds] [Time since reference or first frame: 0.007100000 seconds] Frame Number: 151 Frame Length: 336 bytes (2688 bits) Capture Length: 336 bytes (2688 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 121.174.70.149 (121.174.70.149), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x28 (DSCP 0x0a: Assured Forwarding 11; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 10.. = Differentiated Services Codepoint: Assured Forwarding 11 (0x0a) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 322 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x48b9 [correct] [Good: True] [Bad: False] Source: 121.174.70.149 (121.174.70.149) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 302 Checksum: 0x244f [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANPPPConnection:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:service:WANPPPConnection:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:3091/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 152 0.007138000 116.114.180.107 [CENSORED] SSDP 362 HTTP/1.1 200 OK Frame 152: 362 bytes on wire (2896 bits), 362 bytes captured (2896 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.608238000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.608238000 seconds [Time delta from previous captured frame: 0.000038000 seconds] [Time delta from previous displayed frame: 0.000038000 seconds] [Time since reference or first frame: 0.007138000 seconds] Frame Number: 152 Frame Length: 362 bytes (2896 bits) Capture Length: 362 bytes (2896 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 116.114.180.107 (116.114.180.107), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 348 Identification: 0x464d (17997) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xd8df [correct] [Good: True] [Bad: False] Source: 116.114.180.107 (116.114.180.107) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 328 Checksum: 0x0511 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.2.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 153 0.007163000 221.194.203.36 [CENSORED] SSDP 284 HTTP/1.1 200 OK Frame 153: 284 bytes on wire (2272 bits), 284 bytes captured (2272 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.608263000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.608263000 seconds [Time delta from previous captured frame: 0.000025000 seconds] [Time delta from previous displayed frame: 0.000025000 seconds] [Time since reference or first frame: 0.007163000 seconds] Frame Number: 153 Frame Length: 284 bytes (2272 bits) Capture Length: 284 bytes (2272 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 221.194.203.36 (221.194.203.36), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 270 Identification: 0x4226 (16934) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x5d3b [correct] [Good: True] [Bad: False] Source: 221.194.203.36 (221.194.203.36) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 250 Checksum: 0xdcbd [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: upnp:rootdevice\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 154 0.007202000 116.114.180.107 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 154: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.608302000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.608302000 seconds [Time delta from previous captured frame: 0.000039000 seconds] [Time delta from previous displayed frame: 0.000039000 seconds] [Time since reference or first frame: 0.007202000 seconds] Frame Number: 154 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 116.114.180.107 (116.114.180.107), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0x464f (17999) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xd8e3 [correct] [Good: True] [Bad: False] Source: 116.114.180.107 (116.114.180.107) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0xeea1 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.2.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANIPConnection:1\r\n \r\n No. Time Source Destination Protocol Length Info 155 0.007227000 116.114.180.107 [CENSORED] SSDP 284 HTTP/1.1 200 OK Frame 155: 284 bytes on wire (2272 bits), 284 bytes captured (2272 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.608327000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.608327000 seconds [Time delta from previous captured frame: 0.000025000 seconds] [Time delta from previous displayed frame: 0.000025000 seconds] [Time since reference or first frame: 0.007227000 seconds] Frame Number: 155 Frame Length: 284 bytes (2272 bits) Capture Length: 284 bytes (2272 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 116.114.180.107 (116.114.180.107), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 270 Identification: 0x4652 (18002) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xd928 [correct] [Good: True] [Bad: False] Source: 116.114.180.107 (116.114.180.107) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 250 Checksum: 0x5cc6 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.2.1:80/UPnP/IGD.xml\r\n ST: upnp:rootdevice\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 156 0.007266000 67.176.50.139 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 156: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.608366000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.608366000 seconds [Time delta from previous captured frame: 0.000039000 seconds] [Time delta from previous displayed frame: 0.000039000 seconds] [Time since reference or first frame: 0.007266000 seconds] Frame Number: 156 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 67.176.50.139 (67.176.50.139), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0x260f (9743) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 248 Protocol: UDP (17) Header checksum: 0x69cd [correct] [Good: True] [Bad: False] Source: 67.176.50.139 (67.176.50.139) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0xa7b6 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-wifialliance-org:device:WFADevice:\r\n USN: uuid:565aa949-67c1-4c0e-aa8f-f349e6f59311::urn:schemas-wifialliance-org:device:WFADevice:\r\n \r\n No. Time Source Destination Protocol Length Info 157 0.007299000 36.249.196.5 [CENSORED] SSDP 348 HTTP/1.1 200 OK Frame 157: 348 bytes on wire (2784 bits), 348 bytes captured (2784 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.608399000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.608399000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.007299000 seconds] Frame Number: 157 Frame Length: 348 bytes (2784 bits) Capture Length: 348 bytes (2784 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 36.249.196.5 (36.249.196.5), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 334 Identification: 0xe633 (58931) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x78d6 [correct] [Good: True] [Bad: False] Source: 36.249.196.5 (36.249.196.5) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 314 Checksum: 0xd660 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n \r\n No. Time Source Destination Protocol Length Info 158 0.007325000 36.249.196.5 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 158: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.608425000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.608425000 seconds [Time delta from previous captured frame: 0.000026000 seconds] [Time delta from previous displayed frame: 0.000026000 seconds] [Time since reference or first frame: 0.007325000 seconds] Frame Number: 158 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 36.249.196.5 (36.249.196.5), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0xe634 (58932) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x790b [correct] [Good: True] [Bad: False] Source: 36.249.196.5 (36.249.196.5) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0x0884 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 159 0.007366000 124.199.20.186 [CENSORED] SSDP 363 HTTP/1.1 200 OK Frame 159: 363 bytes on wire (2904 bits), 363 bytes captured (2904 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.608466000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.608466000 seconds [Time delta from previous captured frame: 0.000041000 seconds] [Time delta from previous displayed frame: 0.000041000 seconds] [Time since reference or first frame: 0.007366000 seconds] Frame Number: 159 Frame Length: 363 bytes (2904 bits) Capture Length: 363 bytes (2904 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 124.199.20.186 (124.199.20.186), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 349 Identification: 0xf3d9 (62425) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0xc39e [correct] [Good: True] [Bad: False] Source: 124.199.20.186 (124.199.20.186) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 329 Checksum: 0xaafc [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.10.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{459d4d41-92ed-42d5-8518-96c297823cec}081075105086::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 160 0.007396000 60.209.15.249 [CENSORED] SSDP 348 HTTP/1.1 200 OK Frame 160: 348 bytes on wire (2784 bits), 348 bytes captured (2784 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.608496000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.608496000 seconds [Time delta from previous captured frame: 0.000030000 seconds] [Time delta from previous displayed frame: 0.000030000 seconds] [Time since reference or first frame: 0.007396000 seconds] Frame Number: 160 Frame Length: 348 bytes (2784 bits) Capture Length: 348 bytes (2784 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 60.209.15.249 (60.209.15.249), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 334 Identification: 0xc412 (50194) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x373c [correct] [Good: True] [Bad: False] Source: 60.209.15.249 (60.209.15.249) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 314 Checksum: 0x7295 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n \r\n No. Time Source Destination Protocol Length Info 161 0.007421000 71.14.140.27 [CENSORED] SSDP 287 HTTP/1.1 200 OK Frame 161: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.608521000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.608521000 seconds [Time delta from previous captured frame: 0.000025000 seconds] [Time delta from previous displayed frame: 0.000025000 seconds] [Time since reference or first frame: 0.007421000 seconds] Frame Number: 161 Frame Length: 287 bytes (2296 bits) Capture Length: 287 bytes (2296 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 71.14.140.27 (71.14.140.27), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 273 Identification: 0xd54a (54602) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 248 Protocol: UDP (17) Header checksum: 0x5dc1 [correct] [Good: True] [Bad: False] Source: 71.14.140.27 (71.14.140.27) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 253 Checksum: 0x0918 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: upnp:rootdevice\r\n USN: uuid:adcb4622-1dd1-11b2-8588-c68c9003347a::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 162 0.007451000 71.80.104.119 [CENSORED] SSDP 287 HTTP/1.1 200 OK Frame 162: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.608551000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.608551000 seconds [Time delta from previous captured frame: 0.000030000 seconds] [Time delta from previous displayed frame: 0.000030000 seconds] [Time since reference or first frame: 0.007451000 seconds] Frame Number: 162 Frame Length: 287 bytes (2296 bits) Capture Length: 287 bytes (2296 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 71.80.104.119 (71.80.104.119), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 273 Identification: 0xd60f (54799) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (17) Header checksum: 0x7f5e [correct] [Good: True] [Bad: False] Source: 71.80.104.119 (71.80.104.119) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 253 Checksum: 0x4a92 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: upnp:rootdevice\r\n USN: uuid:11111111-1111-1111-1111-111111111111::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 163 0.007496000 71.80.104.119 [CENSORED] SSDP 357 HTTP/1.1 200 OK Frame 163: 357 bytes on wire (2856 bits), 357 bytes captured (2856 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.608596000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.608596000 seconds [Time delta from previous captured frame: 0.000045000 seconds] [Time delta from previous displayed frame: 0.000045000 seconds] [Time since reference or first frame: 0.007496000 seconds] Frame Number: 163 Frame Length: 357 bytes (2856 bits) Capture Length: 357 bytes (2856 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 71.80.104.119 (71.80.104.119), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 343 Identification: 0xd610 (54800) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (17) Header checksum: 0x7f17 [correct] [Good: True] [Bad: False] Source: 71.80.104.119 (71.80.104.119) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 323 Checksum: 0xa332 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n USN: uuid:11111111-1111-1111-1111-111111111111::urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 164 0.007524000 71.80.104.119 [CENSORED] SSDP 333 HTTP/1.1 200 OK Frame 164: 333 bytes on wire (2664 bits), 333 bytes captured (2664 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.608624000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.608624000 seconds [Time delta from previous captured frame: 0.000028000 seconds] [Time delta from previous displayed frame: 0.000028000 seconds] [Time since reference or first frame: 0.007524000 seconds] Frame Number: 164 Frame Length: 333 bytes (2664 bits) Capture Length: 333 bytes (2664 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 71.80.104.119 (71.80.104.119), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 319 Identification: 0xd611 (54801) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (17) Header checksum: 0x7f2e [correct] [Good: True] [Bad: False] Source: 71.80.104.119 (71.80.104.119) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 299 Checksum: 0xce8b [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:WANDevice:\r\n USN: uuid:22222222-2222-2222-2222-222222222222::urn:schemas-upnp-org:device:WANDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 165 0.007562000 71.80.104.119 [CENSORED] SSDP 365 HTTP/1.1 200 OK Frame 165: 365 bytes on wire (2920 bits), 365 bytes captured (2920 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.608662000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.608662000 seconds [Time delta from previous captured frame: 0.000038000 seconds] [Time delta from previous displayed frame: 0.000038000 seconds] [Time since reference or first frame: 0.007562000 seconds] Frame Number: 165 Frame Length: 365 bytes (2920 bits) Capture Length: 365 bytes (2920 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 71.80.104.119 (71.80.104.119), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 351 Identification: 0xd612 (54802) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (17) Header checksum: 0x7f0d [correct] [Good: True] [Bad: False] Source: 71.80.104.119 (71.80.104.119) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 331 Checksum: 0xc248 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:\r\n USN: uuid:22222222-2222-2222-2222-222222222222::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:\r\n \r\n No. Time Source Destination Protocol Length Info 166 0.007593000 71.80.104.119 [CENSORED] SSDP 353 HTTP/1.1 200 OK Frame 166: 353 bytes on wire (2824 bits), 353 bytes captured (2824 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.608693000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.608693000 seconds [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.007593000 seconds] Frame Number: 166 Frame Length: 353 bytes (2824 bits) Capture Length: 353 bytes (2824 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 71.80.104.119 (71.80.104.119), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 339 Identification: 0xd613 (54803) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (17) Header checksum: 0x7f18 [correct] [Good: True] [Bad: False] Source: 71.80.104.119 (71.80.104.119) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 319 Checksum: 0xc821 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:\r\n USN: uuid:33333333-3333-3333-3333-333333333333::urn:schemas-upnp-org:device:WANConnectionDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 167 0.007626000 71.80.104.119 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 167: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.608726000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.608726000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.007626000 seconds] Frame Number: 167 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 71.80.104.119 (71.80.104.119), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0xd614 (54804) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (17) Header checksum: 0x7f1b [correct] [Good: True] [Bad: False] Source: 71.80.104.119 (71.80.104.119) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0x238e [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANPPPConnection:\r\n USN: uuid:33333333-3333-3333-3333-333333333333::urn:schemas-upnp-org:service:WANPPPConnection:\r\n \r\n No. Time Source Destination Protocol Length Info 168 0.007657000 71.80.104.119 [CENSORED] SSDP 347 HTTP/1.1 200 OK Frame 168: 347 bytes on wire (2776 bits), 347 bytes captured (2776 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.608757000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.608757000 seconds [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.007657000 seconds] Frame Number: 168 Frame Length: 347 bytes (2776 bits) Capture Length: 347 bytes (2776 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 71.80.104.119 (71.80.104.119), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 333 Identification: 0xd615 (54805) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (17) Header checksum: 0x7f1c [correct] [Good: True] [Bad: False] Source: 71.80.104.119 (71.80.104.119) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 313 Checksum: 0x4a1a [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:\r\n USN: uuid:33333333-3333-3333-3333-333333333333::urn:schemas-upnp-org:service:WANIPConnection:\r\n \r\n No. Time Source Destination Protocol Length Info 169 0.007687000 113.105.206.65 [CENSORED] SSDP 330 HTTP/1.1 200 OK Frame 169: 330 bytes on wire (2640 bits), 330 bytes captured (2640 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.608787000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.608787000 seconds [Time delta from previous captured frame: 0.000030000 seconds] [Time delta from previous displayed frame: 0.000030000 seconds] [Time since reference or first frame: 0.007687000 seconds] Frame Number: 169 Frame Length: 330 bytes (2640 bits) Capture Length: 330 bytes (2640 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 113.105.206.65 (113.105.206.65), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 316 Identification: 0xdbbd (56253) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x2dc2 [correct] [Good: True] [Bad: False] Source: 113.105.206.65 (113.105.206.65) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 296 Checksum: 0x67a2 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WANConnection{459d4d41-92ed-42d5-8518-96c297823cec}0810743F7C48\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{459d4d41-92ed-42d5-8518-96c297823cec}0810743F7C48\r\n \r\n No. Time Source Destination Protocol Length Info 170 0.007725000 113.105.206.65 [CENSORED] SSDP 362 HTTP/1.1 200 OK Frame 170: 362 bytes on wire (2896 bits), 362 bytes captured (2896 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.608825000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.608825000 seconds [Time delta from previous captured frame: 0.000038000 seconds] [Time delta from previous displayed frame: 0.000038000 seconds] [Time since reference or first frame: 0.007725000 seconds] Frame Number: 170 Frame Length: 362 bytes (2896 bits) Capture Length: 362 bytes (2896 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 113.105.206.65 (113.105.206.65), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 348 Identification: 0xdbbe (56254) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x2da1 [correct] [Good: True] [Bad: False] Source: 113.105.206.65 (113.105.206.65) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 328 Checksum: 0xd304 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{459d4d41-92ed-42d5-8518-96c297823cec}0810743F7C48::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 171 0.007757000 111.196.233.1 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 171: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.608857000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.608857000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.007757000 seconds] Frame Number: 171 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 111.196.233.1 (111.196.233.1), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0xaab0 (43696) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x449a [correct] [Good: True] [Bad: False] Source: 111.196.233.1 (111.196.233.1) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0x6283 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{722696eb-73c2-4d55-ae59-ad48e0a6b7aa}081076D78539::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 172 0.007789000 117.62.22.64 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 172: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.608889000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.608889000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.007789000 seconds] Frame Number: 172 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 117.62.22.64 (117.62.22.64), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0xdc89 (56457) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xe008 [correct] [Good: True] [Bad: False] Source: 117.62.22.64 (117.62.22.64) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0x8b28 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 173 0.009722000 186.69.134.118 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 173: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.610822000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.610822000 seconds [Time delta from previous captured frame: 0.001933000 seconds] [Time delta from previous displayed frame: 0.001933000 seconds] [Time since reference or first frame: 0.009722000 seconds] Frame Number: 173 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 186.69.134.118 (186.69.134.118), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0x14e1 (5345) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 248 Protocol: UDP (17) Header checksum: 0xb05a [correct] [Good: True] [Bad: False] Source: 186.69.134.118 (186.69.134.118) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0x4a67 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:\r\n USN: uuid:11111111-1111-1111-1111-111111111111::urn:schemas-upnp-org:service:Layer3Forwarding:\r\n \r\n No. Time Source Destination Protocol Length Info 174 0.009751000 94.215.236.9 [CENSORED] SSDP 336 HTTP/1.1 200 OK Frame 174: 336 bytes on wire (2688 bits), 336 bytes captured (2688 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.610851000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.610851000 seconds [Time delta from previous captured frame: 0.000029000 seconds] [Time delta from previous displayed frame: 0.000029000 seconds] [Time since reference or first frame: 0.009751000 seconds] Frame Number: 174 Frame Length: 336 bytes (2688 bits) Capture Length: 336 bytes (2688 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 94.215.236.9 (94.215.236.9), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 322 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 248 Protocol: UDP (17) Header checksum: 0xbb43 [correct] [Good: True] [Bad: False] Source: 94.215.236.9 (94.215.236.9) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 302 Checksum: 0x93ac [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANPPPConnection:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:service:WANPPPConnection:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.8.1:4066/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 175 0.009775000 27.125.145.106 [CENSORED] SSDP 268 HTTP/1.1 200 OK Frame 175: 268 bytes on wire (2144 bits), 268 bytes captured (2144 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.610875000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.610875000 seconds [Time delta from previous captured frame: 0.000024000 seconds] [Time delta from previous displayed frame: 0.000024000 seconds] [Time since reference or first frame: 0.009775000 seconds] Frame Number: 175 Frame Length: 268 bytes (2144 bits) Capture Length: 268 bytes (2144 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 27.125.145.106 (27.125.145.106), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 254 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x5c61 [correct] [Good: True] [Bad: False] Source: 27.125.145.106 (27.125.145.106) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 234 Checksum: 0x81df [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: upnp:rootdevice\r\n USN: uuid:654737b5-8d8a-43c2-80ee-5442a16154da::upnp:rootdevice\r\n EXT:\r\n SERVER: TBS/R2 UPnP/1.0 MiniUPnPd/1.2\r\n LOCATION: http://192.168.0.1:2504/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 176 0.009821000 112.240.111.200 [CENSORED] SSDP 368 HTTP/1.1 200 OK Frame 176: 368 bytes on wire (2944 bits), 368 bytes captured (2944 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.610921000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.610921000 seconds [Time delta from previous captured frame: 0.000046000 seconds] [Time delta from previous displayed frame: 0.000046000 seconds] [Time since reference or first frame: 0.009821000 seconds] Frame Number: 176 Frame Length: 368 bytes (2944 bits) Capture Length: 368 bytes (2944 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 112.240.111.200 (112.240.111.200), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 354 Identification: 0xffb9 (65465) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x6792 [correct] [Good: True] [Bad: False] Source: 112.240.111.200 (112.240.111.200) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 334 Checksum: 0x07e6 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 177 0.009852000 27.125.145.106 [CENSORED] SSDP 340 HTTP/1.1 200 OK Frame 177: 340 bytes on wire (2720 bits), 340 bytes captured (2720 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.610952000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.610952000 seconds [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.009852000 seconds] Frame Number: 177 Frame Length: 340 bytes (2720 bits) Capture Length: 340 bytes (2720 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 27.125.145.106 (27.125.145.106), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 326 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x5c19 [correct] [Good: True] [Bad: False] Source: 27.125.145.106 (27.125.145.106) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 306 Checksum: 0x12e1 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n USN: uuid:654737b5-8d8a-43c2-80ee-5442a16154da::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n EXT:\r\n SERVER: TBS/R2 UPnP/1.0 MiniUPnPd/1.2\r\n LOCATION: http://192.168.0.1:2504/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 178 0.009875000 49.64.5.182 [CENSORED] SSDP 284 HTTP/1.1 200 OK Frame 178: 284 bytes on wire (2272 bits), 284 bytes captured (2272 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.610975000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.610975000 seconds [Time delta from previous captured frame: 0.000023000 seconds] [Time delta from previous displayed frame: 0.000023000 seconds] [Time since reference or first frame: 0.009875000 seconds] Frame Number: 178 Frame Length: 284 bytes (2272 bits) Capture Length: 284 bytes (2272 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 49.64.5.182 (49.64.5.182), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 270 Identification: 0x7252 (29266) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x9f10 [correct] [Good: True] [Bad: False] Source: 49.64.5.182 (49.64.5.182) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 250 Checksum: 0x4eaf [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: upnp:rootdevice\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 179 0.009915000 49.64.5.182 [CENSORED] SSDP 348 HTTP/1.1 200 OK Frame 179: 348 bytes on wire (2784 bits), 348 bytes captured (2784 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.611015000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.611015000 seconds [Time delta from previous captured frame: 0.000040000 seconds] [Time delta from previous displayed frame: 0.000040000 seconds] [Time since reference or first frame: 0.009915000 seconds] Frame Number: 179 Frame Length: 348 bytes (2784 bits) Capture Length: 348 bytes (2784 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 49.64.5.182 (49.64.5.182), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 334 Identification: 0x7253 (29267) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x9ecf [correct] [Good: True] [Bad: False] Source: 49.64.5.182 (49.64.5.182) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 314 Checksum: 0x8869 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n \r\n No. Time Source Destination Protocol Length Info 180 0.009941000 49.64.5.182 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 180: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.611041000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.611041000 seconds [Time delta from previous captured frame: 0.000026000 seconds] [Time delta from previous displayed frame: 0.000026000 seconds] [Time since reference or first frame: 0.009941000 seconds] Frame Number: 180 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 49.64.5.182 (49.64.5.182), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0x7254 (29268) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x9ef4 [correct] [Good: True] [Bad: False] Source: 49.64.5.182 (49.64.5.182) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0xba8c [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 181 0.009983000 60.209.15.249 [CENSORED] SSDP 368 HTTP/1.1 200 OK Frame 181: 368 bytes on wire (2944 bits), 368 bytes captured (2944 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.611083000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.611083000 seconds [Time delta from previous captured frame: 0.000042000 seconds] [Time delta from previous displayed frame: 0.000042000 seconds] [Time since reference or first frame: 0.009983000 seconds] Frame Number: 181 Frame Length: 368 bytes (2944 bits) Capture Length: 368 bytes (2944 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 60.209.15.249 (60.209.15.249), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 354 Identification: 0xc423 (50211) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x3717 [correct] [Good: True] [Bad: False] Source: 60.209.15.249 (60.209.15.249) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 334 Checksum: 0x9bd4 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 182 0.010013000 60.209.15.249 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 182: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.611113000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.611113000 seconds [Time delta from previous captured frame: 0.000030000 seconds] [Time delta from previous displayed frame: 0.000030000 seconds] [Time since reference or first frame: 0.010013000 seconds] Frame Number: 182 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 60.209.15.249 (60.209.15.249), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0xc424 (50212) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x3722 [correct] [Good: True] [Bad: False] Source: 60.209.15.249 (60.209.15.249) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0xcab6 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANIPConnection:1\r\n \r\n No. Time Source Destination Protocol Length Info 183 0.010044000 112.229.165.222 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 183: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.611144000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.611144000 seconds [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.010044000 seconds] Frame Number: 183 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 112.229.165.222 (112.229.165.222), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0x934c (37708) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x9e00 [correct] [Good: True] [Bad: False] Source: 112.229.165.222 (112.229.165.222) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0x00bd [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANIPConnection:1\r\n \r\n No. Time Source Destination Protocol Length Info 184 0.010071000 107.3.143.167 [CENSORED] SSDP 333 HTTP/1.1 200 OK Frame 184: 333 bytes on wire (2664 bits), 333 bytes captured (2664 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.611171000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.611171000 seconds [Time delta from previous captured frame: 0.000027000 seconds] [Time delta from previous displayed frame: 0.000027000 seconds] [Time since reference or first frame: 0.010071000 seconds] Frame Number: 184 Frame Length: 333 bytes (2664 bits) Capture Length: 333 bytes (2664 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 107.3.143.167 (107.3.143.167), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 319 Identification: 0x2c32 (11314) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xe14a [correct] [Good: True] [Bad: False] Source: 107.3.143.167 (107.3.143.167) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 299 Checksum: 0x83a8 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:WANDevice:\r\n USN: uuid:22222222-2222-2222-2222-222222222222::urn:schemas-upnp-org:device:WANDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 185 0.010111000 107.3.143.167 [CENSORED] SSDP 365 HTTP/1.1 200 OK Frame 185: 365 bytes on wire (2920 bits), 365 bytes captured (2920 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.611211000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.611211000 seconds [Time delta from previous captured frame: 0.000040000 seconds] [Time delta from previous displayed frame: 0.000040000 seconds] [Time since reference or first frame: 0.010111000 seconds] Frame Number: 185 Frame Length: 365 bytes (2920 bits) Capture Length: 365 bytes (2920 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 107.3.143.167 (107.3.143.167), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 351 Identification: 0x2c33 (11315) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xe129 [correct] [Good: True] [Bad: False] Source: 107.3.143.167 (107.3.143.167) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 331 Checksum: 0x7765 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:\r\n USN: uuid:22222222-2222-2222-2222-222222222222::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:\r\n \r\n No. Time Source Destination Protocol Length Info 186 0.010137000 65.31.92.103 [CENSORED] SSDP 287 HTTP/1.1 200 OK Frame 186: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.611237000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.611237000 seconds [Time delta from previous captured frame: 0.000026000 seconds] [Time delta from previous displayed frame: 0.000026000 seconds] [Time since reference or first frame: 0.010137000 seconds] Frame Number: 186 Frame Length: 287 bytes (2296 bits) Capture Length: 287 bytes (2296 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 65.31.92.103 (65.31.92.103), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 273 Identification: 0x50f4 (20724) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x14db [correct] [Good: True] [Bad: False] Source: 65.31.92.103 (65.31.92.103) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 253 Checksum: 0x49b8 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: upnp:rootdevice\r\n USN: uuid:77e2cf9e-1dd2-11b2-adae-b1e37771b8a7::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 187 0.010173000 65.31.92.103 [CENSORED] SSDP 357 HTTP/1.1 200 OK Frame 187: 357 bytes on wire (2856 bits), 357 bytes captured (2856 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.611273000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.611273000 seconds [Time delta from previous captured frame: 0.000036000 seconds] [Time delta from previous displayed frame: 0.000036000 seconds] [Time since reference or first frame: 0.010173000 seconds] Frame Number: 187 Frame Length: 357 bytes (2856 bits) Capture Length: 357 bytes (2856 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 65.31.92.103 (65.31.92.103), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 343 Identification: 0x50f5 (20725) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x1494 [correct] [Good: True] [Bad: False] Source: 65.31.92.103 (65.31.92.103) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 323 Checksum: 0x9a60 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n USN: uuid:77e2cf9e-1dd2-11b2-adae-b1e37771b8a7::urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 188 0.010201000 27.125.145.106 [CENSORED] SSDP 316 HTTP/1.1 200 OK Frame 188: 316 bytes on wire (2528 bits), 316 bytes captured (2528 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.611301000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.611301000 seconds [Time delta from previous captured frame: 0.000028000 seconds] [Time delta from previous displayed frame: 0.000028000 seconds] [Time since reference or first frame: 0.010201000 seconds] Frame Number: 188 Frame Length: 316 bytes (2528 bits) Capture Length: 316 bytes (2528 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 27.125.145.106 (27.125.145.106), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 302 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x5c31 [correct] [Good: True] [Bad: False] Source: 27.125.145.106 (27.125.145.106) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 282 Checksum: 0x4d4b [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:WANDevice:1\r\n USN: uuid:654737b5-8d8a-43c2-80ee-5442a16154da::urn:schemas-upnp-org:device:WANDevice:1\r\n EXT:\r\n SERVER: TBS/R2 UPnP/1.0 MiniUPnPd/1.2\r\n LOCATION: http://192.168.0.1:2504/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 189 0.010228000 68.117.79.122 [CENSORED] SSDP 287 HTTP/1.1 200 OK Frame 189: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.611328000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.611328000 seconds [Time delta from previous captured frame: 0.000027000 seconds] [Time delta from previous displayed frame: 0.000027000 seconds] [Time since reference or first frame: 0.010228000 seconds] Frame Number: 189 Frame Length: 287 bytes (2296 bits) Capture Length: 287 bytes (2296 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 68.117.79.122 (68.117.79.122), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 273 Identification: 0xedef (60911) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x8176 [correct] [Good: True] [Bad: False] Source: 68.117.79.122 (68.117.79.122) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 253 Checksum: 0x666a [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: upnp:rootdevice\r\n USN: uuid:11111111-1111-1111-1111-111111111111::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 190 0.010275000 68.117.79.122 [CENSORED] SSDP 357 HTTP/1.1 200 OK Frame 190: 357 bytes on wire (2856 bits), 357 bytes captured (2856 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.611375000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.611375000 seconds [Time delta from previous captured frame: 0.000047000 seconds] [Time delta from previous displayed frame: 0.000047000 seconds] [Time since reference or first frame: 0.010275000 seconds] Frame Number: 190 Frame Length: 357 bytes (2856 bits) Capture Length: 357 bytes (2856 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 68.117.79.122 (68.117.79.122), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 343 Identification: 0xedf0 (60912) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x812f [correct] [Good: True] [Bad: False] Source: 68.117.79.122 (68.117.79.122) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 323 Checksum: 0xbf0a [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n USN: uuid:11111111-1111-1111-1111-111111111111::urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 191 0.010304000 68.117.79.122 [CENSORED] SSDP 333 HTTP/1.1 200 OK Frame 191: 333 bytes on wire (2664 bits), 333 bytes captured (2664 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.611404000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.611404000 seconds [Time delta from previous captured frame: 0.000029000 seconds] [Time delta from previous displayed frame: 0.000029000 seconds] [Time since reference or first frame: 0.010304000 seconds] Frame Number: 191 Frame Length: 333 bytes (2664 bits) Capture Length: 333 bytes (2664 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 68.117.79.122 (68.117.79.122), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 319 Identification: 0xedf1 (60913) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x8146 [correct] [Good: True] [Bad: False] Source: 68.117.79.122 (68.117.79.122) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 299 Checksum: 0xea63 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:WANDevice:\r\n USN: uuid:22222222-2222-2222-2222-222222222222::urn:schemas-upnp-org:device:WANDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 192 0.010343000 68.117.79.122 [CENSORED] SSDP 365 HTTP/1.1 200 OK Frame 192: 365 bytes on wire (2920 bits), 365 bytes captured (2920 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.611443000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.611443000 seconds [Time delta from previous captured frame: 0.000039000 seconds] [Time delta from previous displayed frame: 0.000039000 seconds] [Time since reference or first frame: 0.010343000 seconds] Frame Number: 192 Frame Length: 365 bytes (2920 bits) Capture Length: 365 bytes (2920 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 68.117.79.122 (68.117.79.122), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 351 Identification: 0xedf2 (60914) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x8125 [correct] [Good: True] [Bad: False] Source: 68.117.79.122 (68.117.79.122) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 331 Checksum: 0xde20 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:\r\n USN: uuid:22222222-2222-2222-2222-222222222222::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:\r\n \r\n No. Time Source Destination Protocol Length Info 193 0.010371000 68.117.79.122 [CENSORED] SSDP 353 HTTP/1.1 200 OK Frame 193: 353 bytes on wire (2824 bits), 353 bytes captured (2824 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.611471000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.611471000 seconds [Time delta from previous captured frame: 0.000028000 seconds] [Time delta from previous displayed frame: 0.000028000 seconds] [Time since reference or first frame: 0.010371000 seconds] Frame Number: 193 Frame Length: 353 bytes (2824 bits) Capture Length: 353 bytes (2824 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 68.117.79.122 (68.117.79.122), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 339 Identification: 0xedf3 (60915) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x8130 [correct] [Good: True] [Bad: False] Source: 68.117.79.122 (68.117.79.122) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 319 Checksum: 0xe3f9 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:\r\n USN: uuid:33333333-3333-3333-3333-333333333333::urn:schemas-upnp-org:device:WANConnectionDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 194 0.010403000 68.117.79.122 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 194: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.611503000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.611503000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.010403000 seconds] Frame Number: 194 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 68.117.79.122 (68.117.79.122), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0xedf4 (60916) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x8133 [correct] [Good: True] [Bad: False] Source: 68.117.79.122 (68.117.79.122) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0x3f66 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANPPPConnection:\r\n USN: uuid:33333333-3333-3333-3333-333333333333::urn:schemas-upnp-org:service:WANPPPConnection:\r\n \r\n No. Time Source Destination Protocol Length Info 195 0.010427000 66.215.159.138 [CENSORED] SSDP 289 HTTP/1.1 200 OK Frame 195: 289 bytes on wire (2312 bits), 289 bytes captured (2312 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.611527000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.611527000 seconds [Time delta from previous captured frame: 0.000024000 seconds] [Time delta from previous displayed frame: 0.000024000 seconds] [Time since reference or first frame: 0.010427000 seconds] Frame Number: 195 Frame Length: 289 bytes (2312 bits) Capture Length: 289 bytes (2312 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 66.215.159.138 (66.215.159.138), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 275 Identification: 0xe0fc (57596) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x45f5 [correct] [Good: True] [Bad: False] Source: 66.215.159.138 (66.215.159.138) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 255 Checksum: 0x37d3 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.2.254:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: upnp:rootdevice\r\n USN: uuid:a8935356-1dd1-11b2-bc8b-bc7118cf51e1::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 196 0.010466000 27.125.145.106 [CENSORED] SSDP 332 HTTP/1.1 200 OK Frame 196: 332 bytes on wire (2656 bits), 332 bytes captured (2656 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.611566000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.611566000 seconds [Time delta from previous captured frame: 0.000039000 seconds] [Time delta from previous displayed frame: 0.000039000 seconds] [Time since reference or first frame: 0.010466000 seconds] Frame Number: 196 Frame Length: 332 bytes (2656 bits) Capture Length: 332 bytes (2656 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 27.125.145.106 (27.125.145.106), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 318 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x5c21 [correct] [Good: True] [Bad: False] Source: 27.125.145.106 (27.125.145.106) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 298 Checksum: 0x18f7 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANPPPConnection:1\r\n USN: uuid:654737b5-8d8a-43c2-80ee-5442a16154da::urn:schemas-upnp-org:service:WANPPPConnection:1\r\n EXT:\r\n SERVER: TBS/R2 UPnP/1.0 MiniUPnPd/1.2\r\n LOCATION: http://192.168.0.1:2504/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 197 0.010499000 119.203.190.145 [CENSORED] SSDP 344 HTTP/1.1 200 OK Frame 197: 344 bytes on wire (2752 bits), 344 bytes captured (2752 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.611599000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.611599000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.010499000 seconds] Frame Number: 197 Frame Length: 344 bytes (2752 bits) Capture Length: 344 bytes (2752 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 119.203.190.145 (119.203.190.145), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x28 (DSCP 0x0a: Assured Forwarding 11; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 10.. = Differentiated Services Codepoint: Assured Forwarding 11 (0x0a) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 330 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 250 Protocol: UDP (17) Header checksum: 0xcd97 [correct] [Good: True] [Bad: False] Source: 119.203.190.145 (119.203.190.145) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 310 Checksum: 0xb111 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:3807/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 198 0.010531000 49.64.5.182 [CENSORED] SSDP 332 HTTP/1.1 200 OK Frame 198: 332 bytes on wire (2656 bits), 332 bytes captured (2656 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.611631000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.611631000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.010531000 seconds] Frame Number: 198 Frame Length: 332 bytes (2656 bits) Capture Length: 332 bytes (2656 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 49.64.5.182 (49.64.5.182), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 318 Identification: 0x7255 (29269) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x9edd [correct] [Good: True] [Bad: False] Source: 49.64.5.182 (49.64.5.182) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 298 Checksum: 0xf6ae [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000::urn:schemas-upnp-org:device:WANDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 199 0.010569000 49.64.5.182 [CENSORED] SSDP 364 HTTP/1.1 200 OK Frame 199: 364 bytes on wire (2912 bits), 364 bytes captured (2912 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.611669000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.611669000 seconds [Time delta from previous captured frame: 0.000038000 seconds] [Time delta from previous displayed frame: 0.000038000 seconds] [Time since reference or first frame: 0.010569000 seconds] Frame Number: 199 Frame Length: 364 bytes (2912 bits) Capture Length: 364 bytes (2912 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 49.64.5.182 (49.64.5.182), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 350 Identification: 0x7256 (29270) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x9ebc [correct] [Good: True] [Bad: False] Source: 49.64.5.182 (49.64.5.182) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 330 Checksum: 0x6ee7 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 200 0.010593000 112.248.27.79 [CENSORED] SSDP 284 HTTP/1.1 200 OK Frame 200: 284 bytes on wire (2272 bits), 284 bytes captured (2272 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.611693000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.611693000 seconds [Time delta from previous captured frame: 0.000024000 seconds] [Time delta from previous displayed frame: 0.000024000 seconds] [Time since reference or first frame: 0.010593000 seconds] Frame Number: 200 Frame Length: 284 bytes (2272 bits) Capture Length: 284 bytes (2272 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 112.248.27.79 (112.248.27.79), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 270 Identification: 0x5971 (22897) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x62a0 [correct] [Good: True] [Bad: False] Source: 112.248.27.79 (112.248.27.79) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 250 Checksum: 0xf95d [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: upnp:rootdevice\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 201 0.010628000 49.64.5.182 [CENSORED] SSDP 330 HTTP/1.1 200 OK Frame 201: 330 bytes on wire (2640 bits), 330 bytes captured (2640 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.611728000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.611728000 seconds [Time delta from previous captured frame: 0.000035000 seconds] [Time delta from previous displayed frame: 0.000035000 seconds] [Time since reference or first frame: 0.010628000 seconds] Frame Number: 201 Frame Length: 330 bytes (2640 bits) Capture Length: 330 bytes (2640 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 49.64.5.182 (49.64.5.182), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 316 Identification: 0x7257 (29271) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x9edd [correct] [Good: True] [Bad: False] Source: 49.64.5.182 (49.64.5.182) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 296 Checksum: 0xf08d [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 202 0.010667000 112.240.111.200 [CENSORED] SSDP 364 HTTP/1.1 200 OK Frame 202: 364 bytes on wire (2912 bits), 364 bytes captured (2912 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.611767000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.611767000 seconds [Time delta from previous captured frame: 0.000039000 seconds] [Time delta from previous displayed frame: 0.000039000 seconds] [Time since reference or first frame: 0.010667000 seconds] Frame Number: 202 Frame Length: 364 bytes (2912 bits) Capture Length: 364 bytes (2912 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 112.240.111.200 (112.240.111.200), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 350 Identification: 0xffc1 (65473) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x678e [correct] [Good: True] [Bad: False] Source: 112.240.111.200 (112.240.111.200) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 330 Checksum: 0xc524 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 203 0.010695000 27.125.145.106 [CENSORED] SSDP 332 HTTP/1.1 200 OK Frame 203: 332 bytes on wire (2656 bits), 332 bytes captured (2656 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.611795000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.611795000 seconds [Time delta from previous captured frame: 0.000028000 seconds] [Time delta from previous displayed frame: 0.000028000 seconds] [Time since reference or first frame: 0.010695000 seconds] Frame Number: 203 Frame Length: 332 bytes (2656 bits) Capture Length: 332 bytes (2656 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 27.125.145.106 (27.125.145.106), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 318 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x5c21 [correct] [Good: True] [Bad: False] Source: 27.125.145.106 (27.125.145.106) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 298 Checksum: 0xbb99 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n USN: uuid:654737b5-8d8a-43c2-80ee-5442a16154da::urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n EXT:\r\n SERVER: TBS/R2 UPnP/1.0 MiniUPnPd/1.2\r\n LOCATION: http://192.168.0.1:2504/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 204 0.010727000 112.240.111.200 [CENSORED] SSDP 330 HTTP/1.1 200 OK Frame 204: 330 bytes on wire (2640 bits), 330 bytes captured (2640 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.611827000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.611827000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.010727000 seconds] Frame Number: 204 Frame Length: 330 bytes (2640 bits) Capture Length: 330 bytes (2640 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 112.240.111.200 (112.240.111.200), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 316 Identification: 0xffc2 (65474) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x67af [correct] [Good: True] [Bad: False] Source: 112.240.111.200 (112.240.111.200) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 296 Checksum: 0x46cb [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 205 0.011252000 184.167.193.168 [CENSORED] SSDP 353 HTTP/1.1 200 OK Frame 205: 353 bytes on wire (2824 bits), 353 bytes captured (2824 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.612352000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.612352000 seconds [Time delta from previous captured frame: 0.000525000 seconds] [Time delta from previous displayed frame: 0.000525000 seconds] [Time since reference or first frame: 0.011252000 seconds] Frame Number: 205 Frame Length: 353 bytes (2824 bits) Capture Length: 353 bytes (2824 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 184.167.193.168 (184.167.193.168), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 339 Identification: 0x75e0 (30176) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x18e3 [correct] [Good: True] [Bad: False] Source: 184.167.193.168 (184.167.193.168) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 319 Checksum: 0x162a [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:\r\n USN: uuid:cc9e94e6-1dd1-11b2-a8f4-dd1d7d9bd2fe::urn:schemas-upnp-org:device:WANConnectionDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 206 0.011286000 184.167.193.168 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 206: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.612386000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.612386000 seconds [Time delta from previous captured frame: 0.000034000 seconds] [Time delta from previous displayed frame: 0.000034000 seconds] [Time since reference or first frame: 0.011286000 seconds] Frame Number: 206 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 184.167.193.168 (184.167.193.168), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0x75e1 (30177) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x18e6 [correct] [Good: True] [Bad: False] Source: 184.167.193.168 (184.167.193.168) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0x7196 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANPPPConnection:\r\n USN: uuid:cc9e94e6-1dd1-11b2-a8f4-dd1d7d9bd2fe::urn:schemas-upnp-org:service:WANPPPConnection:\r\n \r\n No. Time Source Destination Protocol Length Info 207 0.011320000 119.203.190.145 [CENSORED] SSDP 340 HTTP/1.1 200 OK Frame 207: 340 bytes on wire (2720 bits), 340 bytes captured (2720 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.612420000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.612420000 seconds [Time delta from previous captured frame: 0.000034000 seconds] [Time delta from previous displayed frame: 0.000034000 seconds] [Time since reference or first frame: 0.011320000 seconds] Frame Number: 207 Frame Length: 340 bytes (2720 bits) Capture Length: 340 bytes (2720 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 119.203.190.145 (119.203.190.145), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x28 (DSCP 0x0a: Assured Forwarding 11; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 10.. = Differentiated Services Codepoint: Assured Forwarding 11 (0x0a) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 326 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 250 Protocol: UDP (17) Header checksum: 0xcd9b [correct] [Good: True] [Bad: False] Source: 119.203.190.145 (119.203.190.145) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 306 Checksum: 0xd73f [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:3807/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 208 0.011355000 117.62.22.64 [CENSORED] SSDP 368 HTTP/1.1 200 OK Frame 208: 368 bytes on wire (2944 bits), 368 bytes captured (2944 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.612455000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.612455000 seconds [Time delta from previous captured frame: 0.000035000 seconds] [Time delta from previous displayed frame: 0.000035000 seconds] [Time since reference or first frame: 0.011355000 seconds] Frame Number: 208 Frame Length: 368 bytes (2944 bits) Capture Length: 368 bytes (2944 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 117.62.22.64 (117.62.22.64), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 354 Identification: 0xdc91 (56465) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xdff4 [correct] [Good: True] [Bad: False] Source: 117.62.22.64 (117.62.22.64) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 334 Checksum: 0x5d20 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 209 0.011385000 184.167.193.168 [CENSORED] SSDP 347 HTTP/1.1 200 OK Frame 209: 347 bytes on wire (2776 bits), 347 bytes captured (2776 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.612485000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.612485000 seconds [Time delta from previous captured frame: 0.000030000 seconds] [Time delta from previous displayed frame: 0.000030000 seconds] [Time since reference or first frame: 0.011385000 seconds] Frame Number: 209 Frame Length: 347 bytes (2776 bits) Capture Length: 347 bytes (2776 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 184.167.193.168 (184.167.193.168), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 333 Identification: 0x75e2 (30178) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x18e7 [correct] [Good: True] [Bad: False] Source: 184.167.193.168 (184.167.193.168) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 313 Checksum: 0x10aa [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:\r\n USN: uuid:cc9e94e6-1dd1-11b2-a8f4-dd1d7d9bd2fe::urn:schemas-upnp-org:service:WANIPConnection:\r\n \r\n No. Time Source Destination Protocol Length Info 210 0.011442000 112.248.27.79 [CENSORED] SSDP 368 HTTP/1.1 200 OK Frame 210: 368 bytes on wire (2944 bits), 368 bytes captured (2944 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.612542000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.612542000 seconds [Time delta from previous captured frame: 0.000057000 seconds] [Time delta from previous displayed frame: 0.000057000 seconds] [Time since reference or first frame: 0.011442000 seconds] Frame Number: 210 Frame Length: 368 bytes (2944 bits) Capture Length: 368 bytes (2944 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 112.248.27.79 (112.248.27.79), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 354 Identification: 0x5978 (22904) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x6245 [correct] [Good: True] [Bad: False] Source: 112.248.27.79 (112.248.27.79) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 334 Checksum: 0x5c57 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 211 0.011490000 71.81.181.162 [CENSORED] SSDP 341 HTTP/1.1 200 OK Frame 211: 341 bytes on wire (2728 bits), 341 bytes captured (2728 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.612590000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.612590000 seconds [Time delta from previous captured frame: 0.000048000 seconds] [Time delta from previous displayed frame: 0.000048000 seconds] [Time since reference or first frame: 0.011490000 seconds] Frame Number: 211 Frame Length: 341 bytes (2728 bits) Capture Length: 341 bytes (2728 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 71.81.181.162 (71.81.181.162), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 327 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (17) Header checksum: 0x082c [correct] [Good: True] [Bad: False] Source: 71.81.181.162 (71.81.181.162) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 307 Checksum: 0xbef6 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n USN: uuid:5b557e7e-71c7-49c2-9e41-261efb036bef::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n EXT:\r\n SERVER: TBS/R2 UPnP/1.0 MiniUPnPd/1.2\r\n LOCATION: http://192.168.2.1:37684/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 212 0.011537000 27.125.145.106 [CENSORED] SSDP 332 HTTP/1.1 200 OK Frame 212: 332 bytes on wire (2656 bits), 332 bytes captured (2656 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.612637000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.612637000 seconds [Time delta from previous captured frame: 0.000047000 seconds] [Time delta from previous displayed frame: 0.000047000 seconds] [Time since reference or first frame: 0.011537000 seconds] Frame Number: 212 Frame Length: 332 bytes (2656 bits) Capture Length: 332 bytes (2656 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 27.125.145.106 (27.125.145.106), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 318 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x5c21 [correct] [Good: True] [Bad: False] Source: 27.125.145.106 (27.125.145.106) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 298 Checksum: 0x18f7 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANPPPConnection:1\r\n USN: uuid:654737b5-8d8a-43c2-80ee-5442a16154da::urn:schemas-upnp-org:service:WANPPPConnection:1\r\n EXT:\r\n SERVER: TBS/R2 UPnP/1.0 MiniUPnPd/1.2\r\n LOCATION: http://192.168.0.1:2504/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 213 0.011573000 119.203.190.145 [CENSORED] SSDP 336 HTTP/1.1 200 OK Frame 213: 336 bytes on wire (2688 bits), 336 bytes captured (2688 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.612673000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.612673000 seconds [Time delta from previous captured frame: 0.000036000 seconds] [Time delta from previous displayed frame: 0.000036000 seconds] [Time since reference or first frame: 0.011573000 seconds] Frame Number: 213 Frame Length: 336 bytes (2688 bits) Capture Length: 336 bytes (2688 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 119.203.190.145 (119.203.190.145), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x28 (DSCP 0x0a: Assured Forwarding 11; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 10.. = Differentiated Services Codepoint: Assured Forwarding 11 (0x0a) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 322 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 250 Protocol: UDP (17) Header checksum: 0xcd9f [correct] [Good: True] [Bad: False] Source: 119.203.190.145 (119.203.190.145) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 302 Checksum: 0x59ca [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:3807/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 214 0.011606000 221.194.203.36 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 214: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.612706000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.612706000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.011606000 seconds] Frame Number: 214 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 221.194.203.36 (221.194.203.36), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0x424f (16975) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x5cca [correct] [Good: True] [Bad: False] Source: 221.194.203.36 (221.194.203.36) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0x6e99 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANIPConnection:1\r\n \r\n No. Time Source Destination Protocol Length Info 215 0.011630000 31.19.157.187 [CENSORED] SSDP 280 HTTP/1.1 200 OK Frame 215: 280 bytes on wire (2240 bits), 280 bytes captured (2240 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.612730000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.612730000 seconds [Time delta from previous captured frame: 0.000024000 seconds] [Time delta from previous displayed frame: 0.000024000 seconds] [Time since reference or first frame: 0.011630000 seconds] Frame Number: 215 Frame Length: 280 bytes (2240 bits) Capture Length: 280 bytes (2240 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 31.19.157.187 (31.19.157.187), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 266 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x466e [correct] [Good: True] [Bad: False] Source: 31.19.157.187 (31.19.157.187) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 246 Checksum: 0x72a8 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: upnp:rootdevice\r\n USN: uuid:0389e8b0-1dd2-11b2-9701-90cd366b719d::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 216 0.011674000 58.22.244.174 [CENSORED] SSDP 284 HTTP/1.1 200 OK Frame 216: 284 bytes on wire (2272 bits), 284 bytes captured (2272 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.612774000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.612774000 seconds [Time delta from previous captured frame: 0.000044000 seconds] [Time delta from previous displayed frame: 0.000044000 seconds] [Time since reference or first frame: 0.011674000 seconds] Frame Number: 216 Frame Length: 284 bytes (2272 bits) Capture Length: 284 bytes (2272 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 58.22.244.174 (58.22.244.174), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 270 Identification: 0x96c7 (38599) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x82cc [correct] [Good: True] [Bad: False] Source: 58.22.244.174 (58.22.244.174) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 250 Checksum: 0x3db4 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: upnp:rootdevice\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}081077B602B2::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 217 0.011712000 49.64.5.182 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 217: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.612812000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.612812000 seconds [Time delta from previous captured frame: 0.000038000 seconds] [Time delta from previous displayed frame: 0.000038000 seconds] [Time since reference or first frame: 0.011712000 seconds] Frame Number: 217 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 49.64.5.182 (49.64.5.182), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0x725b (29275) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x9eed [correct] [Good: True] [Bad: False] Source: 49.64.5.182 (49.64.5.182) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0x92d3 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 218 0.011746000 31.19.157.187 [CENSORED] SSDP 328 HTTP/1.1 200 OK Frame 218: 328 bytes on wire (2624 bits), 328 bytes captured (2624 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.612846000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.612846000 seconds [Time delta from previous captured frame: 0.000034000 seconds] [Time delta from previous displayed frame: 0.000034000 seconds] [Time since reference or first frame: 0.011746000 seconds] Frame Number: 218 Frame Length: 328 bytes (2624 bits) Capture Length: 328 bytes (2624 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 31.19.157.187 (31.19.157.187), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 314 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x463e [correct] [Good: True] [Bad: False] Source: 31.19.157.187 (31.19.157.187) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 294 Checksum: 0xb1c4 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-upnp-org:device:WANDevice:1\r\n USN: uuid:038c1c20-1dd2-11b2-bf3e-e7a22e2e5af8::urn:schemas-upnp-org:device:WANDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 219 0.011781000 177.192.183.189 [CENSORED] SSDP 333 HTTP/1.1 200 OK Frame 219: 333 bytes on wire (2664 bits), 333 bytes captured (2664 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.612881000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.612881000 seconds [Time delta from previous captured frame: 0.000035000 seconds] [Time delta from previous displayed frame: 0.000035000 seconds] [Time since reference or first frame: 0.011781000 seconds] Frame Number: 219 Frame Length: 333 bytes (2664 bits) Capture Length: 333 bytes (2664 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 177.192.183.189 (177.192.183.189), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 319 Identification: 0x0250 (592) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 55 Protocol: UDP (17) Header checksum: 0x5b5a [correct] [Good: True] [Bad: False] Source: 177.192.183.189 (177.192.183.189) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 299 Checksum: 0x843f [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:WANDevice:\r\n USN: uuid:2a7cb2dc-1dd2-11b2-8df0-c376b01cca8c::urn:schemas-upnp-org:device:WANDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 220 0.011816000 177.192.183.189 [CENSORED] SSDP 365 HTTP/1.1 200 OK Frame 220: 365 bytes on wire (2920 bits), 365 bytes captured (2920 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.612916000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.612916000 seconds [Time delta from previous captured frame: 0.000035000 seconds] [Time delta from previous displayed frame: 0.000035000 seconds] [Time since reference or first frame: 0.011816000 seconds] Frame Number: 220 Frame Length: 365 bytes (2920 bits) Capture Length: 365 bytes (2920 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 177.192.183.189 (177.192.183.189), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 351 Identification: 0x0251 (593) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 55 Protocol: UDP (17) Header checksum: 0x5b39 [correct] [Good: True] [Bad: False] Source: 177.192.183.189 (177.192.183.189) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 331 Checksum: 0x77fc [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:\r\n USN: uuid:2a7cb2dc-1dd2-11b2-8df0-c376b01cca8c::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:\r\n \r\n No. Time Source Destination Protocol Length Info 221 0.011849000 216.19.35.172 [CENSORED] SSDP 359 HTTP/1.1 200 OK Frame 221: 359 bytes on wire (2872 bits), 359 bytes captured (2872 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.612949000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.612949000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.011849000 seconds] Frame Number: 221 Frame Length: 359 bytes (2872 bits) Capture Length: 359 bytes (2872 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 216.19.35.172 (216.19.35.172), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 345 Identification: 0x296c (10604) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 248 Protocol: UDP (17) Header checksum: 0xe0e1 [correct] [Good: True] [Bad: False] Source: 216.19.35.172 (216.19.35.172) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 325 Checksum: 0x4a04 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-wifialliance-org:service:WFAWLANConfig:\r\n USN: uuid:ccb1fc34-1dd1-11b2-9f8e-c9bf01169d58::urn:schemas-wifialliance-org:service:WFAWLANConfig:\r\n \r\n No. Time Source Destination Protocol Length Info 222 0.011878000 177.192.183.189 [CENSORED] SSDP 353 HTTP/1.1 200 OK Frame 222: 353 bytes on wire (2824 bits), 353 bytes captured (2824 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.612978000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.612978000 seconds [Time delta from previous captured frame: 0.000029000 seconds] [Time delta from previous displayed frame: 0.000029000 seconds] [Time since reference or first frame: 0.011878000 seconds] Frame Number: 222 Frame Length: 353 bytes (2824 bits) Capture Length: 353 bytes (2824 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 177.192.183.189 (177.192.183.189), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 339 Identification: 0x0252 (594) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 55 Protocol: UDP (17) Header checksum: 0x5b44 [correct] [Good: True] [Bad: False] Source: 177.192.183.189 (177.192.183.189) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 319 Checksum: 0xe90b [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:\r\n USN: uuid:2a80da60-1dd2-11b2-9d7b-da68412ab99f::urn:schemas-upnp-org:device:WANConnectionDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 223 0.011905000 182.247.32.224 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 223: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.613005000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.613005000 seconds [Time delta from previous captured frame: 0.000027000 seconds] [Time delta from previous displayed frame: 0.000027000 seconds] [Time since reference or first frame: 0.011905000 seconds] Frame Number: 223 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 182.247.32.224 (182.247.32.224), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0xfa07 (64007) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x775f [correct] [Good: True] [Bad: False] Source: 182.247.32.224 (182.247.32.224) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0xf1f1 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 224 0.011940000 177.192.183.189 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 224: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.613040000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.613040000 seconds [Time delta from previous captured frame: 0.000035000 seconds] [Time delta from previous displayed frame: 0.000035000 seconds] [Time since reference or first frame: 0.011940000 seconds] Frame Number: 224 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 177.192.183.189 (177.192.183.189), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0x0253 (595) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 55 Protocol: UDP (17) Header checksum: 0x5b47 [correct] [Good: True] [Bad: False] Source: 177.192.183.189 (177.192.183.189) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0x4478 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANPPPConnection:\r\n USN: uuid:2a80da60-1dd2-11b2-9d7b-da68412ab99f::urn:schemas-upnp-org:service:WANPPPConnection:\r\n \r\n No. Time Source Destination Protocol Length Info 225 0.011974000 31.19.157.187 [CENSORED] SSDP 360 HTTP/1.1 200 OK Frame 225: 360 bytes on wire (2880 bits), 360 bytes captured (2880 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.613074000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.613074000 seconds [Time delta from previous captured frame: 0.000034000 seconds] [Time delta from previous displayed frame: 0.000034000 seconds] [Time since reference or first frame: 0.011974000 seconds] Frame Number: 225 Frame Length: 360 bytes (2880 bits) Capture Length: 360 bytes (2880 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 31.19.157.187 (31.19.157.187), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 346 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x461e [correct] [Good: True] [Bad: False] Source: 31.19.157.187 (31.19.157.187) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 326 Checksum: 0x29fd [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n USN: uuid:038c1c20-1dd2-11b2-bf3e-e7a22e2e5af8::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 226 0.011998000 68.51.71.38 [CENSORED] SSDP 272 HTTP/1.1 200 OK Frame 226: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.613098000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.613098000 seconds [Time delta from previous captured frame: 0.000024000 seconds] [Time delta from previous displayed frame: 0.000024000 seconds] [Time since reference or first frame: 0.011998000 seconds] Frame Number: 226 Frame Length: 272 bytes (2176 bits) Capture Length: 272 bytes (2176 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 68.51.71.38 (68.51.71.38), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 258 Identification: 0x3090 (12432) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x877b [correct] [Good: True] [Bad: False] Source: 68.51.71.38 (68.51.71.38) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 238 Checksum: 0x8051 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control:max-age=120\r\n Location:http://192.168.1.1:5678/rootDesc.xml\r\n Server:NT/5.0 UPnP/1.0\r\n ST:uuid:upnp-InternetGatewayDevice-1_0-0090a2777777\r\n USN:uuid:upnp-InternetGatewayDevice-1_0-0090a2777777\r\n EXT:\r\n \r\n No. Time Source Destination Protocol Length Info 227 0.012023000 68.51.71.38 [CENSORED] SSDP 268 HTTP/1.1 200 OK Frame 227: 268 bytes on wire (2144 bits), 268 bytes captured (2144 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.613123000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.613123000 seconds [Time delta from previous captured frame: 0.000025000 seconds] [Time delta from previous displayed frame: 0.000025000 seconds] [Time since reference or first frame: 0.012023000 seconds] Frame Number: 227 Frame Length: 268 bytes (2144 bits) Capture Length: 268 bytes (2144 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 68.51.71.38 (68.51.71.38), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 254 Identification: 0x3091 (12433) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x877e [correct] [Good: True] [Bad: False] Source: 68.51.71.38 (68.51.71.38) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 234 Checksum: 0x879e [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control:max-age=120\r\n Location:http://192.168.1.1:5678/rootDesc.xml\r\n Server:NT/5.0 UPnP/1.0\r\n ST:uuid:upnp-WANConnectionDevice-1_0-0090a2777777\r\n USN:uuid:upnp-WANConnectionDevice-1_0-0090a2777777\r\n EXT:\r\n \r\n No. Time Source Destination Protocol Length Info 228 0.012058000 50.168.18.193 [CENSORED] SSDP 287 HTTP/1.1 200 OK Frame 228: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.613158000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.613158000 seconds [Time delta from previous captured frame: 0.000035000 seconds] [Time delta from previous displayed frame: 0.000035000 seconds] [Time since reference or first frame: 0.012058000 seconds] Frame Number: 228 Frame Length: 287 bytes (2296 bits) Capture Length: 287 bytes (2296 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 50.168.18.193 (50.168.18.193), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 273 Identification: 0xaafa (43770) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 242 Protocol: UDP (17) Header checksum: 0x1bf2 [correct] [Good: True] [Bad: False] Source: 50.168.18.193 (50.168.18.193) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 253 Checksum: 0xb4f0 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: upnp:rootdevice\r\n USN: uuid:11111111-1111-1111-1111-111111111111::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 229 0.012099000 50.168.18.193 [CENSORED] SSDP 357 HTTP/1.1 200 OK Frame 229: 357 bytes on wire (2856 bits), 357 bytes captured (2856 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.613199000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.613199000 seconds [Time delta from previous captured frame: 0.000041000 seconds] [Time delta from previous displayed frame: 0.000041000 seconds] [Time since reference or first frame: 0.012099000 seconds] Frame Number: 229 Frame Length: 357 bytes (2856 bits) Capture Length: 357 bytes (2856 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 50.168.18.193 (50.168.18.193), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 343 Identification: 0xaafb (43771) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 242 Protocol: UDP (17) Header checksum: 0x1bab [correct] [Good: True] [Bad: False] Source: 50.168.18.193 (50.168.18.193) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 323 Checksum: 0x0d91 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n USN: uuid:11111111-1111-1111-1111-111111111111::urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 230 0.012129000 50.168.18.193 [CENSORED] SSDP 333 HTTP/1.1 200 OK Frame 230: 333 bytes on wire (2664 bits), 333 bytes captured (2664 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.613229000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.613229000 seconds [Time delta from previous captured frame: 0.000030000 seconds] [Time delta from previous displayed frame: 0.000030000 seconds] [Time since reference or first frame: 0.012129000 seconds] Frame Number: 230 Frame Length: 333 bytes (2664 bits) Capture Length: 333 bytes (2664 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 50.168.18.193 (50.168.18.193), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 319 Identification: 0xaafc (43772) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 242 Protocol: UDP (17) Header checksum: 0x1bc2 [correct] [Good: True] [Bad: False] Source: 50.168.18.193 (50.168.18.193) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 299 Checksum: 0x38ea [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:WANDevice:\r\n USN: uuid:22222222-2222-2222-2222-222222222222::urn:schemas-upnp-org:device:WANDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 231 0.012165000 50.168.18.193 [CENSORED] SSDP 365 HTTP/1.1 200 OK Frame 231: 365 bytes on wire (2920 bits), 365 bytes captured (2920 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.613265000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.613265000 seconds [Time delta from previous captured frame: 0.000036000 seconds] [Time delta from previous displayed frame: 0.000036000 seconds] [Time since reference or first frame: 0.012165000 seconds] Frame Number: 231 Frame Length: 365 bytes (2920 bits) Capture Length: 365 bytes (2920 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 50.168.18.193 (50.168.18.193), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 351 Identification: 0xaafd (43773) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 242 Protocol: UDP (17) Header checksum: 0x1ba1 [correct] [Good: True] [Bad: False] Source: 50.168.18.193 (50.168.18.193) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 331 Checksum: 0x2ca7 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:\r\n USN: uuid:22222222-2222-2222-2222-222222222222::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:\r\n \r\n No. Time Source Destination Protocol Length Info 232 0.012195000 50.168.18.193 [CENSORED] SSDP 353 HTTP/1.1 200 OK Frame 232: 353 bytes on wire (2824 bits), 353 bytes captured (2824 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.613295000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.613295000 seconds [Time delta from previous captured frame: 0.000030000 seconds] [Time delta from previous displayed frame: 0.000030000 seconds] [Time since reference or first frame: 0.012195000 seconds] Frame Number: 232 Frame Length: 353 bytes (2824 bits) Capture Length: 353 bytes (2824 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 50.168.18.193 (50.168.18.193), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 339 Identification: 0xaafe (43774) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 242 Protocol: UDP (17) Header checksum: 0x1bac [correct] [Good: True] [Bad: False] Source: 50.168.18.193 (50.168.18.193) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 319 Checksum: 0x3280 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:\r\n USN: uuid:33333333-3333-3333-3333-333333333333::urn:schemas-upnp-org:device:WANConnectionDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 233 0.012226000 50.168.18.193 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 233: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.613326000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.613326000 seconds [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.012226000 seconds] Frame Number: 233 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 50.168.18.193 (50.168.18.193), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0xaaff (43775) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 242 Protocol: UDP (17) Header checksum: 0x1baf [correct] [Good: True] [Bad: False] Source: 50.168.18.193 (50.168.18.193) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0x8dec [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANPPPConnection:\r\n USN: uuid:33333333-3333-3333-3333-333333333333::urn:schemas-upnp-org:service:WANPPPConnection:\r\n \r\n No. Time Source Destination Protocol Length Info 234 0.012257000 50.168.18.193 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 234: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.613357000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.613357000 seconds [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.012257000 seconds] Frame Number: 234 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 50.168.18.193 (50.168.18.193), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0xab01 (43777) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 242 Protocol: UDP (17) Header checksum: 0x1bad [correct] [Good: True] [Bad: False] Source: 50.168.18.193 (50.168.18.193) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0x45ba [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:\r\n USN: uuid:11111111-1111-1111-1111-111111111111::urn:schemas-upnp-org:service:Layer3Forwarding:\r\n \r\n No. Time Source Destination Protocol Length Info 235 0.012290000 50.168.18.193 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 235: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.613390000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.613390000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.012290000 seconds] Frame Number: 235 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 50.168.18.193 (50.168.18.193), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0xab02 (43778) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 242 Protocol: UDP (17) Header checksum: 0x1bac [correct] [Good: True] [Bad: False] Source: 50.168.18.193 (50.168.18.193) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0xd888 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-wifialliance-org:device:WFADevice:\r\n USN: uuid:565aa949-67c1-4c0e-aa8f-f349e6f59311::urn:schemas-wifialliance-org:device:WFADevice:\r\n \r\n No. Time Source Destination Protocol Length Info 236 0.012321000 106.44.209.217 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 236: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.613421000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.613421000 seconds [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.012321000 seconds] Frame Number: 236 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 106.44.209.217 (106.44.209.217), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0x56c0 (22208) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xb54a [correct] [Good: True] [Bad: False] Source: 106.44.209.217 (106.44.209.217) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0xdb7a [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANIPConnection:1\r\n \r\n No. Time Source Destination Protocol Length Info 237 0.012372000 101.87.200.17 [CENSORED] SSDP 366 HTTP/1.1 200 OK Frame 237: 366 bytes on wire (2928 bits), 366 bytes captured (2928 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.613472000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.613472000 seconds [Time delta from previous captured frame: 0.000051000 seconds] [Time delta from previous displayed frame: 0.000051000 seconds] [Time since reference or first frame: 0.012372000 seconds] Frame Number: 237 Frame Length: 366 bytes (2928 bits) Capture Length: 366 bytes (2928 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 101.87.200.17 (101.87.200.17), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 352 Identification: 0x5928 (22824) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xc175 [correct] [Good: True] [Bad: False] Source: 101.87.200.17 (101.87.200.17) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 332 Checksum: 0x251e [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.254:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}081076867169::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 238 0.012402000 74.89.236.8 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 238: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.613502000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.613502000 seconds [Time delta from previous captured frame: 0.000030000 seconds] [Time delta from previous displayed frame: 0.000030000 seconds] [Time since reference or first frame: 0.012402000 seconds] Frame Number: 238 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 74.89.236.8 (74.89.236.8), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0xe4fd (58621) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (17) Header checksum: 0xe9b7 [correct] [Good: True] [Bad: False] Source: 74.89.236.8 (74.89.236.8) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0x9650 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:\r\n USN: uuid:add0b512-1dd1-11b2-9a04-9308d584185e::urn:schemas-upnp-org:service:Layer3Forwarding:\r\n \r\n No. Time Source Destination Protocol Length Info 239 0.012432000 74.89.236.8 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 239: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.613532000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.613532000 seconds [Time delta from previous captured frame: 0.000030000 seconds] [Time delta from previous displayed frame: 0.000030000 seconds] [Time since reference or first frame: 0.012432000 seconds] Frame Number: 239 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 74.89.236.8 (74.89.236.8), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0xe4fe (58622) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (17) Header checksum: 0xe9b6 [correct] [Good: True] [Bad: False] Source: 74.89.236.8 (74.89.236.8) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0x90d9 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-wifialliance-org:device:WFADevice:\r\n USN: uuid:addb968a-1dd1-11b2-8b9f-dca3d9b53d3f::urn:schemas-wifialliance-org:device:WFADevice:\r\n \r\n No. Time Source Destination Protocol Length Info 240 0.012466000 74.89.236.8 [CENSORED] SSDP 359 HTTP/1.1 200 OK Frame 240: 359 bytes on wire (2872 bits), 359 bytes captured (2872 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.613566000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.613566000 seconds [Time delta from previous captured frame: 0.000034000 seconds] [Time delta from previous displayed frame: 0.000034000 seconds] [Time since reference or first frame: 0.012466000 seconds] Frame Number: 240 Frame Length: 359 bytes (2872 bits) Capture Length: 359 bytes (2872 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 74.89.236.8 (74.89.236.8), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 345 Identification: 0xe4ff (58623) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (17) Header checksum: 0xe9ab [correct] [Good: True] [Bad: False] Source: 74.89.236.8 (74.89.236.8) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 325 Checksum: 0xdd03 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-wifialliance-org:service:WFAWLANConfig:\r\n USN: uuid:addb968a-1dd1-11b2-8b9f-dca3d9b53d3f::urn:schemas-wifialliance-org:service:WFAWLANConfig:\r\n \r\n No. Time Source Destination Protocol Length Info 241 0.012491000 74.89.236.8 [CENSORED] SSDP 287 HTTP/1.1 200 OK Frame 241: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.613591000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.613591000 seconds [Time delta from previous captured frame: 0.000025000 seconds] [Time delta from previous displayed frame: 0.000025000 seconds] [Time since reference or first frame: 0.012491000 seconds] Frame Number: 241 Frame Length: 287 bytes (2296 bits) Capture Length: 287 bytes (2296 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 74.89.236.8 (74.89.236.8), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 273 Identification: 0xe500 (58624) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (17) Header checksum: 0xe9f2 [correct] [Good: True] [Bad: False] Source: 74.89.236.8 (74.89.236.8) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 253 Checksum: 0x5339 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: upnp:rootdevice\r\n USN: uuid:add0b512-1dd1-11b2-9a04-9308d584185e::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 242 0.012544000 84.29.212.250 [CENSORED] SSDP 352 HTTP/1.1 200 OK Frame 242: 352 bytes on wire (2816 bits), 352 bytes captured (2816 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.613644000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.613644000 seconds [Time delta from previous captured frame: 0.000053000 seconds] [Time delta from previous displayed frame: 0.000053000 seconds] [Time since reference or first frame: 0.012544000 seconds] Frame Number: 242 Frame Length: 352 bytes (2816 bits) Capture Length: 352 bytes (2816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 84.29.212.250 (84.29.212.250), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 338 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 248 Protocol: UDP (17) Header checksum: 0xdcfc [correct] [Good: True] [Bad: False] Source: 84.29.212.250 (84.29.212.250) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 318 Checksum: 0x7373 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:25015/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n USN: uuid:f5d8001c-1dd1-11b2-a379-83a253780a0b::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 243 0.012568000 175.208.83.126 [CENSORED] SSDP 273 HTTP/1.1 200 OK Frame 243: 273 bytes on wire (2184 bits), 273 bytes captured (2184 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.613668000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.613668000 seconds [Time delta from previous captured frame: 0.000024000 seconds] [Time delta from previous displayed frame: 0.000024000 seconds] [Time since reference or first frame: 0.012568000 seconds] Frame Number: 243 Frame Length: 273 bytes (2184 bits) Capture Length: 273 bytes (2184 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 175.208.83.126 (175.208.83.126), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x28 (DSCP 0x0a: Assured Forwarding 11; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 10.. = Differentiated Services Codepoint: Assured Forwarding 11 (0x0a) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 259 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 250 Protocol: UDP (17) Header checksum: 0x00ed [correct] [Good: True] [Bad: False] Source: 175.208.83.126 (175.208.83.126) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 239 Checksum: 0xd072 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: upnp:rootdevice\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::upnp:rootdevice\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:36041/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 244 0.012616000 181.136.134.126 [CENSORED] SSDP 380 HTTP/1.1 200 OK Frame 244: 380 bytes on wire (3040 bits), 380 bytes captured (3040 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.613716000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.613716000 seconds [Time delta from previous captured frame: 0.000048000 seconds] [Time delta from previous displayed frame: 0.000048000 seconds] [Time since reference or first frame: 0.012616000 seconds] Frame Number: 244 Frame Length: 380 bytes (3040 bits) Capture Length: 380 bytes (3040 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 181.136.134.126 (181.136.134.126), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 366 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0xc6d1 [correct] [Good: True] [Bad: False] Source: 181.136.134.126 (181.136.134.126) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 346 Checksum: 0xa069 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n DATE: Sun, 23 Nov 2014 17:41:54 GMT\r\n EXT:\r\n LOCATION: http://192.168.0.1:2869/Desc.xml\r\n SERVER: OS/0.0 UPnP/1.0 UPnP-Device-Host/1.0\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n USN: uuid:f1bcf3c0-9299-11e2-9e96-0800200c9a66::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 245 0.012663000 113.238.251.118 [CENSORED] SSDP 364 HTTP/1.1 200 OK Frame 245: 364 bytes on wire (2912 bits), 364 bytes captured (2912 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.613763000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.613763000 seconds [Time delta from previous captured frame: 0.000047000 seconds] [Time delta from previous displayed frame: 0.000047000 seconds] [Time since reference or first frame: 0.012663000 seconds] Frame Number: 245 Frame Length: 364 bytes (2912 bits) Capture Length: 364 bytes (2912 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 113.238.251.118 (113.238.251.118), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 350 Identification: 0x3087 (12423) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xaa1c [correct] [Good: True] [Bad: False] Source: 113.238.251.118 (113.238.251.118) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 330 Checksum: 0x3878 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 246 0.012693000 74.89.236.8 [CENSORED] SSDP 353 HTTP/1.1 200 OK Frame 246: 353 bytes on wire (2824 bits), 353 bytes captured (2824 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.613793000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.613793000 seconds [Time delta from previous captured frame: 0.000030000 seconds] [Time delta from previous displayed frame: 0.000030000 seconds] [Time since reference or first frame: 0.012693000 seconds] Frame Number: 246 Frame Length: 353 bytes (2824 bits) Capture Length: 353 bytes (2824 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 74.89.236.8 (74.89.236.8), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 339 Identification: 0xe504 (58628) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (17) Header checksum: 0xe9ac [correct] [Good: True] [Bad: False] Source: 74.89.236.8 (74.89.236.8) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 319 Checksum: 0xa90d [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:\r\n USN: uuid:add7faa2-1dd1-11b2-8f10-a10345103669::urn:schemas-upnp-org:device:WANConnectionDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 247 0.012740000 75.129.53.29 [CENSORED] SSDP 332 HTTP/1.1 200 OK Frame 247: 332 bytes on wire (2656 bits), 332 bytes captured (2656 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.613840000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.613840000 seconds [Time delta from previous captured frame: 0.000047000 seconds] [Time delta from previous displayed frame: 0.000047000 seconds] [Time since reference or first frame: 0.012740000 seconds] Frame Number: 247 Frame Length: 332 bytes (2656 bits) Capture Length: 332 bytes (2656 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 75.129.53.29 (75.129.53.29), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 318 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x828a [correct] [Good: True] [Bad: False] Source: 75.129.53.29 (75.129.53.29) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 298 Checksum: 0xf8bf [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65530/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: uuid:21ef3268-1dd2-11b2-bd32-aed7da2c9088\r\n USN: uuid:21ef3268-1dd2-11b2-bd32-aed7da2c9088::uuid:21ef3268-1dd2-11b2-bd32-aed7da2c9088\r\n \r\n No. Time Source Destination Protocol Length Info 248 0.012775000 42.102.194.176 [CENSORED] SSDP 362 HTTP/1.1 200 OK Frame 248: 362 bytes on wire (2896 bits), 362 bytes captured (2896 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.613875000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.613875000 seconds [Time delta from previous captured frame: 0.000035000 seconds] [Time delta from previous displayed frame: 0.000035000 seconds] [Time since reference or first frame: 0.012775000 seconds] Frame Number: 248 Frame Length: 362 bytes (2896 bits) Capture Length: 362 bytes (2896 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 42.102.194.176 (42.102.194.176), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 348 Identification: 0xcb4d (52045) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x8fa6 [correct] [Good: True] [Bad: False] Source: 42.102.194.176 (42.102.194.176) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 328 Checksum: 0x40d9 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 249 0.012809000 42.102.194.176 [CENSORED] SSDP 368 HTTP/1.1 200 OK Frame 249: 368 bytes on wire (2944 bits), 368 bytes captured (2944 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.613909000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.613909000 seconds [Time delta from previous captured frame: 0.000034000 seconds] [Time delta from previous displayed frame: 0.000034000 seconds] [Time since reference or first frame: 0.012809000 seconds] Frame Number: 249 Frame Length: 368 bytes (2944 bits) Capture Length: 368 bytes (2944 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 42.102.194.176 (42.102.194.176), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 354 Identification: 0xcb4e (52046) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x8f9f [correct] [Good: True] [Bad: False] Source: 42.102.194.176 (42.102.194.176) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 334 Checksum: 0xfb87 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 250 0.012836000 218.73.246.159 [CENSORED] SSDP 332 HTTP/1.1 200 OK Frame 250: 332 bytes on wire (2656 bits), 332 bytes captured (2656 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.613936000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.613936000 seconds [Time delta from previous captured frame: 0.000027000 seconds] [Time delta from previous displayed frame: 0.000027000 seconds] [Time since reference or first frame: 0.012836000 seconds] Frame Number: 250 Frame Length: 332 bytes (2656 bits) Capture Length: 332 bytes (2656 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 218.73.246.159 (218.73.246.159), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 318 Identification: 0x7d52 (32082) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xf9ec [correct] [Good: True] [Bad: False] Source: 218.73.246.159 (218.73.246.159) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 298 Checksum: 0x5cbb [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000::urn:schemas-upnp-org:device:WANDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 251 0.012874000 218.73.246.159 [CENSORED] SSDP 364 HTTP/1.1 200 OK Frame 251: 364 bytes on wire (2912 bits), 364 bytes captured (2912 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.613974000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.613974000 seconds [Time delta from previous captured frame: 0.000038000 seconds] [Time delta from previous displayed frame: 0.000038000 seconds] [Time since reference or first frame: 0.012874000 seconds] Frame Number: 251 Frame Length: 364 bytes (2912 bits) Capture Length: 364 bytes (2912 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 218.73.246.159 (218.73.246.159), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 350 Identification: 0x7d53 (32083) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xf9cb [correct] [Good: True] [Bad: False] Source: 218.73.246.159 (218.73.246.159) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 330 Checksum: 0xd4f3 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 252 0.012930000 218.73.246.159 [CENSORED] SSDP 330 HTTP/1.1 200 OK Frame 252: 330 bytes on wire (2640 bits), 330 bytes captured (2640 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.614030000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.614030000 seconds [Time delta from previous captured frame: 0.000056000 seconds] [Time delta from previous displayed frame: 0.000056000 seconds] [Time since reference or first frame: 0.012930000 seconds] Frame Number: 252 Frame Length: 330 bytes (2640 bits) Capture Length: 330 bytes (2640 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 218.73.246.159 (218.73.246.159), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 316 Identification: 0x7d54 (32084) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xf9ec [correct] [Good: True] [Bad: False] Source: 218.73.246.159 (218.73.246.159) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 296 Checksum: 0x569a [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 253 0.012965000 218.73.246.159 [CENSORED] SSDP 362 HTTP/1.1 200 OK Frame 253: 362 bytes on wire (2896 bits), 362 bytes captured (2896 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.614065000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.614065000 seconds [Time delta from previous captured frame: 0.000035000 seconds] [Time delta from previous displayed frame: 0.000035000 seconds] [Time since reference or first frame: 0.012965000 seconds] Frame Number: 253 Frame Length: 362 bytes (2896 bits) Capture Length: 362 bytes (2896 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 218.73.246.159 (218.73.246.159), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 348 Identification: 0x7d55 (32085) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xf9cb [correct] [Good: True] [Bad: False] Source: 218.73.246.159 (218.73.246.159) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 328 Checksum: 0x5d06 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 254 0.013026000 175.208.83.126 [CENSORED] SSDP 341 HTTP/1.1 200 OK Frame 254: 341 bytes on wire (2728 bits), 341 bytes captured (2728 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.614126000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.614126000 seconds [Time delta from previous captured frame: 0.000061000 seconds] [Time delta from previous displayed frame: 0.000061000 seconds] [Time since reference or first frame: 0.013026000 seconds] Frame Number: 254 Frame Length: 341 bytes (2728 bits) Capture Length: 341 bytes (2728 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 175.208.83.126 (175.208.83.126), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x28 (DSCP 0x0a: Assured Forwarding 11; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 10.. = Differentiated Services Codepoint: Assured Forwarding 11 (0x0a) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 327 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 250 Protocol: UDP (17) Header checksum: 0x00a9 [correct] [Good: True] [Bad: False] Source: 175.208.83.126 (175.208.83.126) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 307 Checksum: 0x87a2 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:36041/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 255 0.013062000 104.34.244.151 [CENSORED] SSDP 358 HTTP/1.1 200 OK Frame 255: 358 bytes on wire (2864 bits), 358 bytes captured (2864 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.614162000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.614162000 seconds [Time delta from previous captured frame: 0.000036000 seconds] [Time delta from previous displayed frame: 0.000036000 seconds] [Time since reference or first frame: 0.013062000 seconds] Frame Number: 255 Frame Length: 358 bytes (2864 bits) Capture Length: 358 bytes (2864 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 104.34.244.151 (104.34.244.151), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 344 Identification: 0xcebc (52924) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0xdd97 [correct] [Good: True] [Bad: False] Source: 104.34.244.151 (104.34.244.151) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 324 Checksum: 0xb91d [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.10:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n USN: uuid:cd6fced0-1dd1-11b2-b78d-8549a3c674ca::urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 256 0.013092000 119.179.250.72 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 256: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.614192000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.614192000 seconds [Time delta from previous captured frame: 0.000030000 seconds] [Time delta from previous displayed frame: 0.000030000 seconds] [Time since reference or first frame: 0.013092000 seconds] Frame Number: 256 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 119.179.250.72 (119.179.250.72), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0xe7e4 (59364) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xee2f [correct] [Good: True] [Bad: False] Source: 119.179.250.72 (119.179.250.72) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0xa4aa [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 257 0.013133000 119.179.250.72 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 257: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.614233000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.614233000 seconds [Time delta from previous captured frame: 0.000041000 seconds] [Time delta from previous displayed frame: 0.000041000 seconds] [Time since reference or first frame: 0.013133000 seconds] Frame Number: 257 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 119.179.250.72 (119.179.250.72), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0xe7ee (59374) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xee53 [correct] [Good: True] [Bad: False] Source: 119.179.250.72 (119.179.250.72) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0x57cd [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 258 0.013203000 58.152.78.30 [CENSORED] SSDP 336 HTTP/1.1 200 OK Frame 258: 336 bytes on wire (2688 bits), 336 bytes captured (2688 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.614303000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.614303000 seconds [Time delta from previous captured frame: 0.000070000 seconds] [Time delta from previous displayed frame: 0.000070000 seconds] [Time since reference or first frame: 0.013203000 seconds] Frame Number: 258 Frame Length: 336 bytes (2688 bits) Capture Length: 336 bytes (2688 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 58.152.78.30 (58.152.78.30), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 322 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 250 Protocol: UDP (17) Header checksum: 0x7b6e [correct] [Good: True] [Bad: False] Source: 58.152.78.30 (58.152.78.30) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 302 Checksum: 0xcac0 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANPPPConnection:1\r\n USN: uuid:75802409-bccb-40e7-0c43-00116bdd91b9::urn:schemas-upnp-org:service:WANPPPConnection:1\r\n EXT:\r\n Server: Debian/4.0 UPnP/1.0 miniupnpd/1.0\r\n Location: http://192.168.0.1:5555/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 259 0.013237000 58.152.78.30 [CENSORED] SSDP 336 HTTP/1.1 200 OK Frame 259: 336 bytes on wire (2688 bits), 336 bytes captured (2688 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.614337000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.614337000 seconds [Time delta from previous captured frame: 0.000034000 seconds] [Time delta from previous displayed frame: 0.000034000 seconds] [Time since reference or first frame: 0.013237000 seconds] Frame Number: 259 Frame Length: 336 bytes (2688 bits) Capture Length: 336 bytes (2688 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 58.152.78.30 (58.152.78.30), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 322 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 250 Protocol: UDP (17) Header checksum: 0x7b6e [correct] [Good: True] [Bad: False] Source: 58.152.78.30 (58.152.78.30) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 302 Checksum: 0x6d63 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n USN: uuid:75802409-bccb-40e7-0c43-00116bdd91b9::urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n EXT:\r\n Server: Debian/4.0 UPnP/1.0 miniupnpd/1.0\r\n Location: http://192.168.0.1:5555/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 260 0.013813000 84.29.212.250 [CENSORED] SSDP 348 HTTP/1.1 200 OK Frame 260: 348 bytes on wire (2784 bits), 348 bytes captured (2784 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.614913000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.614913000 seconds [Time delta from previous captured frame: 0.000576000 seconds] [Time delta from previous displayed frame: 0.000576000 seconds] [Time since reference or first frame: 0.013813000 seconds] Frame Number: 260 Frame Length: 348 bytes (2784 bits) Capture Length: 348 bytes (2784 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 84.29.212.250 (84.29.212.250), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 334 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 248 Protocol: UDP (17) Header checksum: 0xdd00 [correct] [Good: True] [Bad: False] Source: 84.29.212.250 (84.29.212.250) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 314 Checksum: 0x0a6e [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:25015/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n USN: uuid:f5db84b2-1dd1-11b2-b6c2-ae9a295b230d::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 261 0.013846000 112.248.27.79 [CENSORED] SSDP 348 HTTP/1.1 200 OK Frame 261: 348 bytes on wire (2784 bits), 348 bytes captured (2784 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.614946000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.614946000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.013846000 seconds] Frame Number: 261 Frame Length: 348 bytes (2784 bits) Capture Length: 348 bytes (2784 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 112.248.27.79 (112.248.27.79), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 334 Identification: 0x5988 (22920) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x6249 [correct] [Good: True] [Bad: False] Source: 112.248.27.79 (112.248.27.79) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 314 Checksum: 0x3318 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n \r\n No. Time Source Destination Protocol Length Info 262 0.013872000 183.194.33.232 [CENSORED] SSDP 284 HTTP/1.1 200 OK Frame 262: 284 bytes on wire (2272 bits), 284 bytes captured (2272 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.614972000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.614972000 seconds [Time delta from previous captured frame: 0.000026000 seconds] [Time delta from previous displayed frame: 0.000026000 seconds] [Time since reference or first frame: 0.013872000 seconds] Frame Number: 262 Frame Length: 284 bytes (2272 bits) Capture Length: 284 bytes (2272 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 183.194.33.232 (183.194.33.232), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 270 Identification: 0x5809 (22537) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x17a5 [correct] [Good: True] [Bad: False] Source: 183.194.33.232 (183.194.33.232) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 250 Checksum: 0xabfa [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: upnp:rootdevice\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 263 0.013916000 183.194.33.232 [CENSORED] SSDP 348 HTTP/1.1 200 OK Frame 263: 348 bytes on wire (2784 bits), 348 bytes captured (2784 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.615016000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.615016000 seconds [Time delta from previous captured frame: 0.000044000 seconds] [Time delta from previous displayed frame: 0.000044000 seconds] [Time since reference or first frame: 0.013916000 seconds] Frame Number: 263 Frame Length: 348 bytes (2784 bits) Capture Length: 348 bytes (2784 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 183.194.33.232 (183.194.33.232), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 334 Identification: 0x580a (22538) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x1764 [correct] [Good: True] [Bad: False] Source: 183.194.33.232 (183.194.33.232) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 314 Checksum: 0xe5b4 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n \r\n No. Time Source Destination Protocol Length Info 264 0.013944000 183.194.33.232 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 264: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.615044000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.615044000 seconds [Time delta from previous captured frame: 0.000028000 seconds] [Time delta from previous displayed frame: 0.000028000 seconds] [Time since reference or first frame: 0.013944000 seconds] Frame Number: 264 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 183.194.33.232 (183.194.33.232), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0x580b (22539) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x1789 [correct] [Good: True] [Bad: False] Source: 183.194.33.232 (183.194.33.232) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0x17d8 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 265 0.013981000 183.194.33.232 [CENSORED] SSDP 332 HTTP/1.1 200 OK Frame 265: 332 bytes on wire (2656 bits), 332 bytes captured (2656 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.615081000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.615081000 seconds [Time delta from previous captured frame: 0.000037000 seconds] [Time delta from previous displayed frame: 0.000037000 seconds] [Time since reference or first frame: 0.013981000 seconds] Frame Number: 265 Frame Length: 332 bytes (2656 bits) Capture Length: 332 bytes (2656 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 183.194.33.232 (183.194.33.232), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 318 Identification: 0x580c (22540) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x1772 [correct] [Good: True] [Bad: False] Source: 183.194.33.232 (183.194.33.232) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 298 Checksum: 0x53fa [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000::urn:schemas-upnp-org:device:WANDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 266 0.014022000 183.194.33.232 [CENSORED] SSDP 364 HTTP/1.1 200 OK Frame 266: 364 bytes on wire (2912 bits), 364 bytes captured (2912 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.615122000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.615122000 seconds [Time delta from previous captured frame: 0.000041000 seconds] [Time delta from previous displayed frame: 0.000041000 seconds] [Time since reference or first frame: 0.014022000 seconds] Frame Number: 266 Frame Length: 364 bytes (2912 bits) Capture Length: 364 bytes (2912 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 183.194.33.232 (183.194.33.232), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 350 Identification: 0x580d (22541) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x1751 [correct] [Good: True] [Bad: False] Source: 183.194.33.232 (183.194.33.232) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 330 Checksum: 0xcc32 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 267 0.014051000 183.194.33.232 [CENSORED] SSDP 330 HTTP/1.1 200 OK Frame 267: 330 bytes on wire (2640 bits), 330 bytes captured (2640 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.615151000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.615151000 seconds [Time delta from previous captured frame: 0.000029000 seconds] [Time delta from previous displayed frame: 0.000029000 seconds] [Time since reference or first frame: 0.014051000 seconds] Frame Number: 267 Frame Length: 330 bytes (2640 bits) Capture Length: 330 bytes (2640 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 183.194.33.232 (183.194.33.232), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 316 Identification: 0x580e (22542) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x1772 [correct] [Good: True] [Bad: False] Source: 183.194.33.232 (183.194.33.232) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 296 Checksum: 0x4dd9 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 268 0.014091000 183.194.33.232 [CENSORED] SSDP 362 HTTP/1.1 200 OK Frame 268: 362 bytes on wire (2896 bits), 362 bytes captured (2896 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.615191000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.615191000 seconds [Time delta from previous captured frame: 0.000040000 seconds] [Time delta from previous displayed frame: 0.000040000 seconds] [Time since reference or first frame: 0.014091000 seconds] Frame Number: 268 Frame Length: 362 bytes (2896 bits) Capture Length: 362 bytes (2896 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 183.194.33.232 (183.194.33.232), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 348 Identification: 0x580f (22543) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x1751 [correct] [Good: True] [Bad: False] Source: 183.194.33.232 (183.194.33.232) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 328 Checksum: 0x5445 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 269 0.014127000 183.194.33.232 [CENSORED] SSDP 368 HTTP/1.1 200 OK Frame 269: 368 bytes on wire (2944 bits), 368 bytes captured (2944 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.615227000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.615227000 seconds [Time delta from previous captured frame: 0.000036000 seconds] [Time delta from previous displayed frame: 0.000036000 seconds] [Time since reference or first frame: 0.014127000 seconds] Frame Number: 269 Frame Length: 368 bytes (2944 bits) Capture Length: 368 bytes (2944 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 183.194.33.232 (183.194.33.232), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 354 Identification: 0x5810 (22544) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x174a [correct] [Good: True] [Bad: False] Source: 183.194.33.232 (183.194.33.232) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 334 Checksum: 0x0ef4 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 270 0.014161000 125.115.198.66 [CENSORED] SSDP 368 HTTP/1.1 200 OK Frame 270: 368 bytes on wire (2944 bits), 368 bytes captured (2944 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.615261000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.615261000 seconds [Time delta from previous captured frame: 0.000034000 seconds] [Time delta from previous displayed frame: 0.000034000 seconds] [Time since reference or first frame: 0.014161000 seconds] Frame Number: 270 Frame Length: 368 bytes (2944 bits) Capture Length: 368 bytes (2944 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 125.115.198.66 (125.115.198.66), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 354 Identification: 0xdc87 (56455) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x27b7 [correct] [Good: True] [Bad: False] Source: 125.115.198.66 (125.115.198.66) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 334 Checksum: 0xa4e8 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 271 0.014191000 175.208.83.126 [CENSORED] SSDP 335 HTTP/1.1 200 OK Frame 271: 335 bytes on wire (2680 bits), 335 bytes captured (2680 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.615291000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.615291000 seconds [Time delta from previous captured frame: 0.000030000 seconds] [Time delta from previous displayed frame: 0.000030000 seconds] [Time since reference or first frame: 0.014191000 seconds] Frame Number: 271 Frame Length: 335 bytes (2680 bits) Capture Length: 335 bytes (2680 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 175.208.83.126 (175.208.83.126), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x28 (DSCP 0x0a: Assured Forwarding 11; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 10.. = Differentiated Services Codepoint: Assured Forwarding 11 (0x0a) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 321 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 250 Protocol: UDP (17) Header checksum: 0x00af [correct] [Good: True] [Bad: False] Source: 175.208.83.126 (175.208.83.126) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 301 Checksum: 0x3e66 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:service:WANIPConnection:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:36041/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 272 0.014214000 27.125.145.106 [CENSORED] SSDP 268 HTTP/1.1 200 OK Frame 272: 268 bytes on wire (2144 bits), 268 bytes captured (2144 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.615314000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.615314000 seconds [Time delta from previous captured frame: 0.000023000 seconds] [Time delta from previous displayed frame: 0.000023000 seconds] [Time since reference or first frame: 0.014214000 seconds] Frame Number: 272 Frame Length: 268 bytes (2144 bits) Capture Length: 268 bytes (2144 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 27.125.145.106 (27.125.145.106), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 254 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x5c61 [correct] [Good: True] [Bad: False] Source: 27.125.145.106 (27.125.145.106) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 234 Checksum: 0x81df [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: upnp:rootdevice\r\n USN: uuid:654737b5-8d8a-43c2-80ee-5442a16154da::upnp:rootdevice\r\n EXT:\r\n SERVER: TBS/R2 UPnP/1.0 MiniUPnPd/1.2\r\n LOCATION: http://192.168.0.1:2504/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 273 0.014259000 27.125.145.106 [CENSORED] SSDP 340 HTTP/1.1 200 OK Frame 273: 340 bytes on wire (2720 bits), 340 bytes captured (2720 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.615359000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.615359000 seconds [Time delta from previous captured frame: 0.000045000 seconds] [Time delta from previous displayed frame: 0.000045000 seconds] [Time since reference or first frame: 0.014259000 seconds] Frame Number: 273 Frame Length: 340 bytes (2720 bits) Capture Length: 340 bytes (2720 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 27.125.145.106 (27.125.145.106), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 326 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x5c19 [correct] [Good: True] [Bad: False] Source: 27.125.145.106 (27.125.145.106) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 306 Checksum: 0x12e1 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n USN: uuid:654737b5-8d8a-43c2-80ee-5442a16154da::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n EXT:\r\n SERVER: TBS/R2 UPnP/1.0 MiniUPnPd/1.2\r\n LOCATION: http://192.168.0.1:2504/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 274 0.014296000 68.188.249.168 [CENSORED] SSDP 357 HTTP/1.1 200 OK Frame 274: 357 bytes on wire (2856 bits), 357 bytes captured (2856 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.615396000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.615396000 seconds [Time delta from previous captured frame: 0.000037000 seconds] [Time delta from previous displayed frame: 0.000037000 seconds] [Time since reference or first frame: 0.014296000 seconds] Frame Number: 274 Frame Length: 357 bytes (2856 bits) Capture Length: 357 bytes (2856 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 68.188.249.168 (68.188.249.168), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 343 Identification: 0x6607 (26119) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x5ea3 [correct] [Good: True] [Bad: False] Source: 68.188.249.168 (68.188.249.168) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 323 Checksum: 0x49dc [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n USN: uuid:2a9be7ec-1dd2-11b2-b5af-c2523deb9ee2::urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 275 0.014326000 68.188.249.168 [CENSORED] SSDP 333 HTTP/1.1 200 OK Frame 275: 333 bytes on wire (2664 bits), 333 bytes captured (2664 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.615426000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.615426000 seconds [Time delta from previous captured frame: 0.000030000 seconds] [Time delta from previous displayed frame: 0.000030000 seconds] [Time since reference or first frame: 0.014326000 seconds] Frame Number: 275 Frame Length: 333 bytes (2664 bits) Capture Length: 333 bytes (2664 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 68.188.249.168 (68.188.249.168), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 319 Identification: 0x6608 (26120) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x5eba [correct] [Good: True] [Bad: False] Source: 68.188.249.168 (68.188.249.168) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 299 Checksum: 0xd1c4 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:WANDevice:\r\n USN: uuid:2aa00fac-1dd2-11b2-97bb-b7021d18757f::urn:schemas-upnp-org:device:WANDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 276 0.014365000 68.188.249.168 [CENSORED] SSDP 365 HTTP/1.1 200 OK Frame 276: 365 bytes on wire (2920 bits), 365 bytes captured (2920 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.615465000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.615465000 seconds [Time delta from previous captured frame: 0.000039000 seconds] [Time delta from previous displayed frame: 0.000039000 seconds] [Time since reference or first frame: 0.014365000 seconds] Frame Number: 276 Frame Length: 365 bytes (2920 bits) Capture Length: 365 bytes (2920 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 68.188.249.168 (68.188.249.168), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 351 Identification: 0x6609 (26121) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x5e99 [correct] [Good: True] [Bad: False] Source: 68.188.249.168 (68.188.249.168) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 331 Checksum: 0xc581 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:\r\n USN: uuid:2aa00fac-1dd2-11b2-97bb-b7021d18757f::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:\r\n \r\n No. Time Source Destination Protocol Length Info 277 0.014394000 27.125.145.106 [CENSORED] SSDP 336 HTTP/1.1 200 OK Frame 277: 336 bytes on wire (2688 bits), 336 bytes captured (2688 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.615494000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.615494000 seconds [Time delta from previous captured frame: 0.000029000 seconds] [Time delta from previous displayed frame: 0.000029000 seconds] [Time since reference or first frame: 0.014394000 seconds] Frame Number: 277 Frame Length: 336 bytes (2688 bits) Capture Length: 336 bytes (2688 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 27.125.145.106 (27.125.145.106), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 322 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x5c1d [correct] [Good: True] [Bad: False] Source: 27.125.145.106 (27.125.145.106) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 302 Checksum: 0x390f [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n USN: uuid:654737b5-8d8a-43c2-80ee-5442a16154da::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n EXT:\r\n SERVER: TBS/R2 UPnP/1.0 MiniUPnPd/1.2\r\n LOCATION: http://192.168.0.1:2504/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 278 0.014431000 68.188.249.168 [CENSORED] SSDP 353 HTTP/1.1 200 OK Frame 278: 353 bytes on wire (2824 bits), 353 bytes captured (2824 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.615531000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.615531000 seconds [Time delta from previous captured frame: 0.000037000 seconds] [Time delta from previous displayed frame: 0.000037000 seconds] [Time since reference or first frame: 0.014431000 seconds] Frame Number: 278 Frame Length: 353 bytes (2824 bits) Capture Length: 353 bytes (2824 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 68.188.249.168 (68.188.249.168), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 339 Identification: 0x660a (26122) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x5ea4 [correct] [Good: True] [Bad: False] Source: 68.188.249.168 (68.188.249.168) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 319 Checksum: 0xe424 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:\r\n USN: uuid:2aa43d02-1dd2-11b2-9d99-8bba9edbf154::urn:schemas-upnp-org:device:WANConnectionDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 279 0.014463000 42.94.68.57 [CENSORED] SSDP 332 HTTP/1.1 200 OK Frame 279: 332 bytes on wire (2656 bits), 332 bytes captured (2656 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.615563000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.615563000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.014463000 seconds] Frame Number: 279 Frame Length: 332 bytes (2656 bits) Capture Length: 332 bytes (2656 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 42.94.68.57 (42.94.68.57), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 318 Identification: 0x6a68 (27240) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x6f29 [correct] [Good: True] [Bad: False] Source: 42.94.68.57 (42.94.68.57) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 298 Checksum: 0xbf0d [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000::urn:schemas-upnp-org:device:WANDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 280 0.014503000 42.94.68.57 [CENSORED] SSDP 364 HTTP/1.1 200 OK Frame 280: 364 bytes on wire (2912 bits), 364 bytes captured (2912 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.615603000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.615603000 seconds [Time delta from previous captured frame: 0.000040000 seconds] [Time delta from previous displayed frame: 0.000040000 seconds] [Time since reference or first frame: 0.014503000 seconds] Frame Number: 280 Frame Length: 364 bytes (2912 bits) Capture Length: 364 bytes (2912 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 42.94.68.57 (42.94.68.57), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 350 Identification: 0x6a69 (27241) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x6f08 [correct] [Good: True] [Bad: False] Source: 42.94.68.57 (42.94.68.57) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 330 Checksum: 0x3746 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 281 0.014534000 125.115.198.66 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 281: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.615634000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.615634000 seconds [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.014534000 seconds] Frame Number: 281 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 125.115.198.66 (125.115.198.66), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0xdc88 (56456) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x27c2 [correct] [Good: True] [Bad: False] Source: 125.115.198.66 (125.115.198.66) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0xd3ca [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANIPConnection:1\r\n \r\n No. Time Source Destination Protocol Length Info 282 0.014572000 24.111.163.14 [CENSORED] SSDP 366 HTTP/1.1 200 OK Frame 282: 366 bytes on wire (2928 bits), 366 bytes captured (2928 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.615672000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.615672000 seconds [Time delta from previous captured frame: 0.000038000 seconds] [Time delta from previous displayed frame: 0.000038000 seconds] [Time since reference or first frame: 0.014572000 seconds] Frame Number: 282 Frame Length: 366 bytes (2928 bits) Capture Length: 366 bytes (2928 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 24.111.163.14 (24.111.163.14), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 352 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x4789 [correct] [Good: True] [Bad: False] Source: 24.111.163.14 (24.111.163.14) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 332 Checksum: 0xf022 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK ST: urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n LOCATION: http://192.168.1.1:5000/Public_UPNP_gatedesc.xml\r\n SERVER: Linux/2.6.12, UPnP/1.0, NETGEAR-UPNP/1.0\r\n EXT:\r\n CACHE-CONTROL: max-age=3600\r\n USN: uuid:6acf22e2-1125-9cd4-3209-0cf98d035313::urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 283 0.014599000 125.115.198.66 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 283: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.615699000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.615699000 seconds [Time delta from previous captured frame: 0.000027000 seconds] [Time delta from previous displayed frame: 0.000027000 seconds] [Time since reference or first frame: 0.014599000 seconds] Frame Number: 283 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 125.115.198.66 (125.115.198.66), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0xdc89 (56457) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x27ef [correct] [Good: True] [Bad: False] Source: 125.115.198.66 (125.115.198.66) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0x8613 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 284 0.014624000 175.209.41.192 [CENSORED] SSDP 272 HTTP/1.1 200 OK Frame 284: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.615724000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.615724000 seconds [Time delta from previous captured frame: 0.000025000 seconds] [Time delta from previous displayed frame: 0.000025000 seconds] [Time since reference or first frame: 0.014624000 seconds] Frame Number: 284 Frame Length: 272 bytes (2176 bits) Capture Length: 272 bytes (2176 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 175.209.41.192 (175.209.41.192), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x28 (DSCP 0x0a: Assured Forwarding 11; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 10.. = Differentiated Services Codepoint: Assured Forwarding 11 (0x0a) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 258 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 250 Protocol: UDP (17) Header checksum: 0x2aab [correct] [Good: True] [Bad: False] Source: 175.209.41.192 (175.209.41.192) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 238 Checksum: 0x78dd [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: upnp:rootdevice\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::upnp:rootdevice\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:3548/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 285 0.014671000 175.209.41.192 [CENSORED] SSDP 344 HTTP/1.1 200 OK Frame 285: 344 bytes on wire (2752 bits), 344 bytes captured (2752 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.615771000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.615771000 seconds [Time delta from previous captured frame: 0.000047000 seconds] [Time delta from previous displayed frame: 0.000047000 seconds] [Time since reference or first frame: 0.014671000 seconds] Frame Number: 285 Frame Length: 344 bytes (2752 bits) Capture Length: 344 bytes (2752 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 175.209.41.192 (175.209.41.192), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x28 (DSCP 0x0a: Assured Forwarding 11; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 10.. = Differentiated Services Codepoint: Assured Forwarding 11 (0x0a) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 330 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 250 Protocol: UDP (17) Header checksum: 0x2a63 [correct] [Good: True] [Bad: False] Source: 175.209.41.192 (175.209.41.192) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 310 Checksum: 0x09df [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:3548/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 286 0.014703000 42.94.68.57 [CENSORED] SSDP 330 HTTP/1.1 200 OK Frame 286: 330 bytes on wire (2640 bits), 330 bytes captured (2640 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.615803000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.615803000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.014703000 seconds] Frame Number: 286 Frame Length: 330 bytes (2640 bits) Capture Length: 330 bytes (2640 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 42.94.68.57 (42.94.68.57), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 316 Identification: 0x6a6a (27242) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x6f29 [correct] [Good: True] [Bad: False] Source: 42.94.68.57 (42.94.68.57) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 296 Checksum: 0xb8ec [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 287 0.014741000 24.111.163.14 [CENSORED] SSDP 354 HTTP/1.1 200 OK Frame 287: 354 bytes on wire (2832 bits), 354 bytes captured (2832 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.615841000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.615841000 seconds [Time delta from previous captured frame: 0.000038000 seconds] [Time delta from previous displayed frame: 0.000038000 seconds] [Time since reference or first frame: 0.014741000 seconds] Frame Number: 287 Frame Length: 354 bytes (2832 bits) Capture Length: 354 bytes (2832 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 24.111.163.14 (24.111.163.14), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 340 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x4795 [correct] [Good: True] [Bad: False] Source: 24.111.163.14 (24.111.163.14) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 320 Checksum: 0x6cb7 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n LOCATION: http://192.168.1.1:5000/Public_UPNP_gatedesc.xml\r\n SERVER: Linux/2.6.12, UPnP/1.0, NETGEAR-UPNP/1.0\r\n EXT:\r\n CACHE-CONTROL: max-age=3600\r\n USN: uuid:6acf22e2-1125-9cd4-3209-0cf98d035313::urn:schemas-upnp-org:service:WANIPConnection:1\r\n \r\n No. Time Source Destination Protocol Length Info 288 0.014776000 42.102.194.176 [CENSORED] SSDP 362 HTTP/1.1 200 OK Frame 288: 362 bytes on wire (2896 bits), 362 bytes captured (2896 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.615876000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.615876000 seconds [Time delta from previous captured frame: 0.000035000 seconds] [Time delta from previous displayed frame: 0.000035000 seconds] [Time since reference or first frame: 0.014776000 seconds] Frame Number: 288 Frame Length: 362 bytes (2896 bits) Capture Length: 362 bytes (2896 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 42.102.194.176 (42.102.194.176), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 348 Identification: 0xcb58 (52056) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x8f8b [correct] [Good: True] [Bad: False] Source: 42.102.194.176 (42.102.194.176) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 328 Checksum: 0x40d9 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 289 0.014812000 42.102.194.176 [CENSORED] SSDP 368 HTTP/1.1 200 OK Frame 289: 368 bytes on wire (2944 bits), 368 bytes captured (2944 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.615912000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.615912000 seconds [Time delta from previous captured frame: 0.000036000 seconds] [Time delta from previous displayed frame: 0.000036000 seconds] [Time since reference or first frame: 0.014812000 seconds] Frame Number: 289 Frame Length: 368 bytes (2944 bits) Capture Length: 368 bytes (2944 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 42.102.194.176 (42.102.194.176), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 354 Identification: 0xcb59 (52057) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x8f84 [correct] [Good: True] [Bad: False] Source: 42.102.194.176 (42.102.194.176) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 334 Checksum: 0xfb87 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 290 0.014841000 109.246.235.79 [CENSORED] SSDP 339 HTTP/1.1 200 OK Frame 290: 339 bytes on wire (2712 bits), 339 bytes captured (2712 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.615941000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.615941000 seconds [Time delta from previous captured frame: 0.000029000 seconds] [Time delta from previous displayed frame: 0.000029000 seconds] [Time since reference or first frame: 0.014841000 seconds] Frame Number: 290 Frame Length: 339 bytes (2712 bits) Capture Length: 339 bytes (2712 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 109.246.235.79 (109.246.235.79), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 325 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0xa9db [correct] [Good: True] [Bad: False] Source: 109.246.235.79 (109.246.235.79) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 305 Checksum: 0x20d5 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n USN: uuid:6B8B4567-23C6-9869-E4A2-DC9FDB0E1BBB::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n EXT:\r\n SERVER: v5.5 UPnP/1.0 MiniUPnPd/1.4\r\n LOCATION: http://192.168.0.1:49796/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 291 0.014878000 42.102.194.176 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 291: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.615978000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.615978000 seconds [Time delta from previous captured frame: 0.000037000 seconds] [Time delta from previous displayed frame: 0.000037000 seconds] [Time since reference or first frame: 0.014878000 seconds] Frame Number: 291 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 42.102.194.176 (42.102.194.176), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0xcb5a (52058) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x8f8f [correct] [Good: True] [Bad: False] Source: 42.102.194.176 (42.102.194.176) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0x2a6a [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANIPConnection:1\r\n \r\n No. Time Source Destination Protocol Length Info 292 0.014910000 69.245.221.152 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 292: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.616010000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.616010000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.014910000 seconds] Frame Number: 292 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 69.245.221.152 (69.245.221.152), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0xd495 (54421) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x0af4 [correct] [Good: True] [Bad: False] Source: 69.245.221.152 (69.245.221.152) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0x530a [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:\r\n USN: uuid:2a789b84-1dd2-11b2-b629-a8a0e5eac694::urn:schemas-upnp-org:service:Layer3Forwarding:\r\n \r\n No. Time Source Destination Protocol Length Info 293 0.014946000 69.245.221.152 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 293: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.616046000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.616046000 seconds [Time delta from previous captured frame: 0.000036000 seconds] [Time delta from previous displayed frame: 0.000036000 seconds] [Time since reference or first frame: 0.014946000 seconds] Frame Number: 293 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 69.245.221.152 (69.245.221.152), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0xd496 (54422) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x0af3 [correct] [Good: True] [Bad: False] Source: 69.245.221.152 (69.245.221.152) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0x7ac2 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-wifialliance-org:device:WFADevice:\r\n USN: uuid:2a851f26-1dd2-11b2-92d9-9d5aa256fd7f::urn:schemas-wifialliance-org:device:WFADevice:\r\n \r\n No. Time Source Destination Protocol Length Info 294 0.014981000 69.245.221.152 [CENSORED] SSDP 359 HTTP/1.1 200 OK Frame 294: 359 bytes on wire (2872 bits), 359 bytes captured (2872 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.616081000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.616081000 seconds [Time delta from previous captured frame: 0.000035000 seconds] [Time delta from previous displayed frame: 0.000035000 seconds] [Time since reference or first frame: 0.014981000 seconds] Frame Number: 294 Frame Length: 359 bytes (2872 bits) Capture Length: 359 bytes (2872 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 69.245.221.152 (69.245.221.152), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 345 Identification: 0xd497 (54423) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x0ae8 [correct] [Good: True] [Bad: False] Source: 69.245.221.152 (69.245.221.152) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 325 Checksum: 0x04af [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-wifialliance-org:service:WFAWLANConfig:\r\n USN: uuid:2a851f26-1dd2-11b2-92d9-9d5aa256fd7f::urn:schemas-wifialliance-org:service:WFAWLANConfig:\r\n \r\n No. Time Source Destination Protocol Length Info 295 0.015011000 109.246.235.79 [CENSORED] SSDP 335 HTTP/1.1 200 OK Frame 295: 335 bytes on wire (2680 bits), 335 bytes captured (2680 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.616111000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.616111000 seconds [Time delta from previous captured frame: 0.000030000 seconds] [Time delta from previous displayed frame: 0.000030000 seconds] [Time since reference or first frame: 0.015011000 seconds] Frame Number: 295 Frame Length: 335 bytes (2680 bits) Capture Length: 335 bytes (2680 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 109.246.235.79 (109.246.235.79), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 321 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0xa9df [correct] [Good: True] [Bad: False] Source: 109.246.235.79 (109.246.235.79) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 301 Checksum: 0x4703 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n USN: uuid:6B8B4567-23C6-9869-E4A2-DC9FDB0E1BBB::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n EXT:\r\n SERVER: v5.5 UPnP/1.0 MiniUPnPd/1.4\r\n LOCATION: http://192.168.0.1:49796/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 296 0.015039000 69.245.221.152 [CENSORED] SSDP 287 HTTP/1.1 200 OK Frame 296: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.616139000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.616139000 seconds [Time delta from previous captured frame: 0.000028000 seconds] [Time delta from previous displayed frame: 0.000028000 seconds] [Time since reference or first frame: 0.015039000 seconds] Frame Number: 296 Frame Length: 287 bytes (2296 bits) Capture Length: 287 bytes (2296 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 69.245.221.152 (69.245.221.152), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 273 Identification: 0xd4a2 (54434) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x0b25 [correct] [Good: True] [Bad: False] Source: 69.245.221.152 (69.245.221.152) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 253 Checksum: 0x4bb7 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: upnp:rootdevice\r\n USN: uuid:2a789b84-1dd2-11b2-b629-a8a0e5eac694::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 297 0.015116000 175.142.217.6 [CENSORED] SSDP 331 HTTP/1.1 200 OK Frame 297: 331 bytes on wire (2648 bits), 331 bytes captured (2648 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.616216000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.616216000 seconds [Time delta from previous captured frame: 0.000077000 seconds] [Time delta from previous displayed frame: 0.000077000 seconds] [Time since reference or first frame: 0.015116000 seconds] Frame Number: 297 Frame Length: 331 bytes (2648 bits) Capture Length: 331 bytes (2648 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 175.142.217.6 (175.142.217.6), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 317 Identification: 0x50f3 (20723) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 242 Protocol: UDP (17) Header checksum: 0x32a1 [correct] [Good: True] [Bad: False] Source: 175.142.217.6 (175.142.217.6) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 297 Checksum: 0xf1c4 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n USN: uuid:cee8d217-4eca-42ae-b7ac-6a0220f4dd89::urn:schemas-upnp-org:service:WANIPConnection:1\r\n EXT:\r\n SERVER: TBS/R2 UPnP/1.0 MiniUPnPd/1.2\r\n LOCATION: http://192.168.0.1:33724/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 298 0.015150000 175.142.217.6 [CENSORED] SSDP 333 HTTP/1.1 200 OK Frame 298: 333 bytes on wire (2664 bits), 333 bytes captured (2664 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.616250000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.616250000 seconds [Time delta from previous captured frame: 0.000034000 seconds] [Time delta from previous displayed frame: 0.000034000 seconds] [Time since reference or first frame: 0.015150000 seconds] Frame Number: 298 Frame Length: 333 bytes (2664 bits) Capture Length: 333 bytes (2664 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 175.142.217.6 (175.142.217.6), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 319 Identification: 0x50f4 (20724) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 242 Protocol: UDP (17) Header checksum: 0x329e [correct] [Good: True] [Bad: False] Source: 175.142.217.6 (175.142.217.6) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 299 Checksum: 0x58ab [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANPPPConnection:1\r\n USN: uuid:cee8d217-4eca-42ae-b7ac-6a0220f4dd89::urn:schemas-upnp-org:service:WANPPPConnection:1\r\n EXT:\r\n SERVER: TBS/R2 UPnP/1.0 MiniUPnPd/1.2\r\n LOCATION: http://192.168.0.1:33724/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 299 0.015185000 175.142.217.6 [CENSORED] SSDP 333 HTTP/1.1 200 OK Frame 299: 333 bytes on wire (2664 bits), 333 bytes captured (2664 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.616285000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.616285000 seconds [Time delta from previous captured frame: 0.000035000 seconds] [Time delta from previous displayed frame: 0.000035000 seconds] [Time since reference or first frame: 0.015185000 seconds] Frame Number: 299 Frame Length: 333 bytes (2664 bits) Capture Length: 333 bytes (2664 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 175.142.217.6 (175.142.217.6), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 319 Identification: 0x50f5 (20725) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 242 Protocol: UDP (17) Header checksum: 0x329d [correct] [Good: True] [Bad: False] Source: 175.142.217.6 (175.142.217.6) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 299 Checksum: 0xfb4d [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n USN: uuid:cee8d217-4eca-42ae-b7ac-6a0220f4dd89::urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n EXT:\r\n SERVER: TBS/R2 UPnP/1.0 MiniUPnPd/1.2\r\n LOCATION: http://192.168.0.1:33724/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 300 0.015209000 175.142.217.6 [CENSORED] SSDP 269 HTTP/1.1 200 OK Frame 300: 269 bytes on wire (2152 bits), 269 bytes captured (2152 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.616309000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.616309000 seconds [Time delta from previous captured frame: 0.000024000 seconds] [Time delta from previous displayed frame: 0.000024000 seconds] [Time since reference or first frame: 0.015209000 seconds] Frame Number: 300 Frame Length: 269 bytes (2152 bits) Capture Length: 269 bytes (2152 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 175.142.217.6 (175.142.217.6), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 255 Identification: 0x50f6 (20726) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 242 Protocol: UDP (17) Header checksum: 0x32dc [correct] [Good: True] [Bad: False] Source: 175.142.217.6 (175.142.217.6) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 235 Checksum: 0xc193 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: upnp:rootdevice\r\n USN: uuid:cee8d217-4eca-42ae-b7ac-6a0220f4dd89::upnp:rootdevice\r\n EXT:\r\n SERVER: TBS/R2 UPnP/1.0 MiniUPnPd/1.2\r\n LOCATION: http://192.168.0.1:33724/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 301 0.015255000 175.142.217.6 [CENSORED] SSDP 341 HTTP/1.1 200 OK Frame 301: 341 bytes on wire (2728 bits), 341 bytes captured (2728 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.616355000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.616355000 seconds [Time delta from previous captured frame: 0.000046000 seconds] [Time delta from previous displayed frame: 0.000046000 seconds] [Time since reference or first frame: 0.015255000 seconds] Frame Number: 301 Frame Length: 341 bytes (2728 bits) Capture Length: 341 bytes (2728 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 175.142.217.6 (175.142.217.6), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 327 Identification: 0x50f7 (20727) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 242 Protocol: UDP (17) Header checksum: 0x3293 [correct] [Good: True] [Bad: False] Source: 175.142.217.6 (175.142.217.6) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 307 Checksum: 0x5295 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n USN: uuid:cee8d217-4eca-42ae-b7ac-6a0220f4dd89::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n EXT:\r\n SERVER: TBS/R2 UPnP/1.0 MiniUPnPd/1.2\r\n LOCATION: http://192.168.0.1:33724/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 302 0.015288000 175.142.217.6 [CENSORED] SSDP 337 HTTP/1.1 200 OK Frame 302: 337 bytes on wire (2696 bits), 337 bytes captured (2696 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.616388000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.616388000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.015288000 seconds] Frame Number: 302 Frame Length: 337 bytes (2696 bits) Capture Length: 337 bytes (2696 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 175.142.217.6 (175.142.217.6), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 323 Identification: 0x50f8 (20728) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 242 Protocol: UDP (17) Header checksum: 0x3296 [correct] [Good: True] [Bad: False] Source: 175.142.217.6 (175.142.217.6) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 303 Checksum: 0x78c3 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n USN: uuid:cee8d217-4eca-42ae-b7ac-6a0220f4dd89::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n EXT:\r\n SERVER: TBS/R2 UPnP/1.0 MiniUPnPd/1.2\r\n LOCATION: http://192.168.0.1:33724/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 303 0.015318000 175.142.217.6 [CENSORED] SSDP 317 HTTP/1.1 200 OK Frame 303: 317 bytes on wire (2536 bits), 317 bytes captured (2536 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.616418000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.616418000 seconds [Time delta from previous captured frame: 0.000030000 seconds] [Time delta from previous displayed frame: 0.000030000 seconds] [Time since reference or first frame: 0.015318000 seconds] Frame Number: 303 Frame Length: 317 bytes (2536 bits) Capture Length: 317 bytes (2536 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 175.142.217.6 (175.142.217.6), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 303 Identification: 0x50f9 (20729) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 242 Protocol: UDP (17) Header checksum: 0x32a9 [correct] [Good: True] [Bad: False] Source: 175.142.217.6 (175.142.217.6) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 283 Checksum: 0x8cff [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:WANDevice:1\r\n USN: uuid:cee8d217-4eca-42ae-b7ac-6a0220f4dd89::urn:schemas-upnp-org:device:WANDevice:1\r\n EXT:\r\n SERVER: TBS/R2 UPnP/1.0 MiniUPnPd/1.2\r\n LOCATION: http://192.168.0.1:33724/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 304 0.015356000 109.246.235.79 [CENSORED] SSDP 329 HTTP/1.1 200 OK Frame 304: 329 bytes on wire (2632 bits), 329 bytes captured (2632 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.616456000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.616456000 seconds [Time delta from previous captured frame: 0.000038000 seconds] [Time delta from previous displayed frame: 0.000038000 seconds] [Time since reference or first frame: 0.015356000 seconds] Frame Number: 304 Frame Length: 329 bytes (2632 bits) Capture Length: 329 bytes (2632 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 109.246.235.79 (109.246.235.79), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 315 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0xa9e5 [correct] [Good: True] [Bad: False] Source: 109.246.235.79 (109.246.235.79) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 295 Checksum: 0xe9da [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n USN: uuid:6B8B4567-23C6-9869-E4A2-DC9FDB0E1BBB::urn:schemas-upnp-org:service:WANIPConnection:1\r\n EXT:\r\n SERVER: v5.5 UPnP/1.0 MiniUPnPd/1.4\r\n LOCATION: http://192.168.0.1:49796/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 305 0.015393000 107.145.91.5 [CENSORED] SSDP 341 HTTP/1.1 200 OK Frame 305: 341 bytes on wire (2728 bits), 341 bytes captured (2728 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.616493000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.616493000 seconds [Time delta from previous captured frame: 0.000037000 seconds] [Time delta from previous displayed frame: 0.000037000 seconds] [Time since reference or first frame: 0.015393000 seconds] Frame Number: 305 Frame Length: 341 bytes (2728 bits) Capture Length: 341 bytes (2728 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 107.145.91.5 (107.145.91.5), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 327 Identification: 0x32a3 (12963) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 247 Protocol: UDP (17) Header checksum: 0x0de6 [correct] [Good: True] [Bad: False] Source: 107.145.91.5 (107.145.91.5) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 307 Checksum: 0xa65c [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n USN: uuid:cefaaf8f-a56a-412f-8725-8bb35a07c314::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n EXT:\r\n SERVER: TBS/R2 UPnP/1.0 MiniUPnPd/1.2\r\n LOCATION: http://192.168.2.1:52606/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 306 0.015426000 107.145.91.5 [CENSORED] SSDP 337 HTTP/1.1 200 OK Frame 306: 337 bytes on wire (2696 bits), 337 bytes captured (2696 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.616526000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.616526000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.015426000 seconds] Frame Number: 306 Frame Length: 337 bytes (2696 bits) Capture Length: 337 bytes (2696 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 107.145.91.5 (107.145.91.5), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 323 Identification: 0x32a4 (12964) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 247 Protocol: UDP (17) Header checksum: 0x0de9 [correct] [Good: True] [Bad: False] Source: 107.145.91.5 (107.145.91.5) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 303 Checksum: 0xcc8a [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n USN: uuid:cefaaf8f-a56a-412f-8725-8bb35a07c314::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n EXT:\r\n SERVER: TBS/R2 UPnP/1.0 MiniUPnPd/1.2\r\n LOCATION: http://192.168.2.1:52606/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 307 0.015460000 107.145.91.5 [CENSORED] SSDP 317 HTTP/1.1 200 OK Frame 307: 317 bytes on wire (2536 bits), 317 bytes captured (2536 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.616560000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.616560000 seconds [Time delta from previous captured frame: 0.000034000 seconds] [Time delta from previous displayed frame: 0.000034000 seconds] [Time since reference or first frame: 0.015460000 seconds] Frame Number: 307 Frame Length: 317 bytes (2536 bits) Capture Length: 317 bytes (2536 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 107.145.91.5 (107.145.91.5), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 303 Identification: 0x32a5 (12965) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 247 Protocol: UDP (17) Header checksum: 0x0dfc [correct] [Good: True] [Bad: False] Source: 107.145.91.5 (107.145.91.5) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 283 Checksum: 0xe0c6 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:WANDevice:1\r\n USN: uuid:cefaaf8f-a56a-412f-8725-8bb35a07c314::urn:schemas-upnp-org:device:WANDevice:1\r\n EXT:\r\n SERVER: TBS/R2 UPnP/1.0 MiniUPnPd/1.2\r\n LOCATION: http://192.168.2.1:52606/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 308 0.015497000 107.145.91.5 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 308: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.616597000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.616597000 seconds [Time delta from previous captured frame: 0.000037000 seconds] [Time delta from previous displayed frame: 0.000037000 seconds] [Time since reference or first frame: 0.015497000 seconds] Frame Number: 308 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 107.145.91.5 (107.145.91.5), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0x32a6 (12966) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 247 Protocol: UDP (17) Header checksum: 0x0ddb [correct] [Good: True] [Bad: False] Source: 107.145.91.5 (107.145.91.5) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0x58ff [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n USN: uuid:cefaaf8f-a56a-412f-8725-8bb35a07c314::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n EXT:\r\n SERVER: TBS/R2 UPnP/1.0 MiniUPnPd/1.2\r\n LOCATION: http://192.168.2.1:52606/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 309 0.015534000 1.25.155.134 [CENSORED] SSDP 368 HTTP/1.1 200 OK Frame 309: 368 bytes on wire (2944 bits), 368 bytes captured (2944 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.616634000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.616634000 seconds [Time delta from previous captured frame: 0.000037000 seconds] [Time delta from previous displayed frame: 0.000037000 seconds] [Time since reference or first frame: 0.015534000 seconds] Frame Number: 309 Frame Length: 368 bytes (2944 bits) Capture Length: 368 bytes (2944 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 1.25.155.134 (1.25.155.134), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 354 Identification: 0x8939 (35129) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x221c [correct] [Good: True] [Bad: False] Source: 1.25.155.134 (1.25.155.134) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 334 Checksum: 0x4bff [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 310 0.015563000 107.145.91.5 [CENSORED] SSDP 331 HTTP/1.1 200 OK Frame 310: 331 bytes on wire (2648 bits), 331 bytes captured (2648 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.616663000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.616663000 seconds [Time delta from previous captured frame: 0.000029000 seconds] [Time delta from previous displayed frame: 0.000029000 seconds] [Time since reference or first frame: 0.015563000 seconds] Frame Number: 310 Frame Length: 331 bytes (2648 bits) Capture Length: 331 bytes (2648 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 107.145.91.5 (107.145.91.5), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 317 Identification: 0x32a7 (12967) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 247 Protocol: UDP (17) Header checksum: 0x0dec [correct] [Good: True] [Bad: False] Source: 107.145.91.5 (107.145.91.5) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 297 Checksum: 0x844d [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n USN: uuid:cefaaf8f-a56a-412f-8725-8bb35a07c314::urn:schemas-upnp-org:service:WANIPConnection:1\r\n EXT:\r\n SERVER: TBS/R2 UPnP/1.0 MiniUPnPd/1.2\r\n LOCATION: http://192.168.2.1:52606/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 311 0.015598000 107.145.91.5 [CENSORED] SSDP 333 HTTP/1.1 200 OK Frame 311: 333 bytes on wire (2664 bits), 333 bytes captured (2664 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.616698000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.616698000 seconds [Time delta from previous captured frame: 0.000035000 seconds] [Time delta from previous displayed frame: 0.000035000 seconds] [Time since reference or first frame: 0.015598000 seconds] Frame Number: 311 Frame Length: 333 bytes (2664 bits) Capture Length: 333 bytes (2664 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 107.145.91.5 (107.145.91.5), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 319 Identification: 0x32a8 (12968) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 247 Protocol: UDP (17) Header checksum: 0x0de9 [correct] [Good: True] [Bad: False] Source: 107.145.91.5 (107.145.91.5) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 299 Checksum: 0xac72 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANPPPConnection:1\r\n USN: uuid:cefaaf8f-a56a-412f-8725-8bb35a07c314::urn:schemas-upnp-org:service:WANPPPConnection:1\r\n EXT:\r\n SERVER: TBS/R2 UPnP/1.0 MiniUPnPd/1.2\r\n LOCATION: http://192.168.2.1:52606/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 312 0.015621000 112.248.27.79 [CENSORED] SSDP 284 HTTP/1.1 200 OK Frame 312: 284 bytes on wire (2272 bits), 284 bytes captured (2272 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.616721000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.616721000 seconds [Time delta from previous captured frame: 0.000023000 seconds] [Time delta from previous displayed frame: 0.000023000 seconds] [Time since reference or first frame: 0.015621000 seconds] Frame Number: 312 Frame Length: 284 bytes (2272 bits) Capture Length: 284 bytes (2272 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 112.248.27.79 (112.248.27.79), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 270 Identification: 0x5992 (22930) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x627f [correct] [Good: True] [Bad: False] Source: 112.248.27.79 (112.248.27.79) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 250 Checksum: 0xf95d [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: upnp:rootdevice\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 313 0.015664000 107.145.91.5 [CENSORED] SSDP 333 HTTP/1.1 200 OK Frame 313: 333 bytes on wire (2664 bits), 333 bytes captured (2664 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.616764000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.616764000 seconds [Time delta from previous captured frame: 0.000043000 seconds] [Time delta from previous displayed frame: 0.000043000 seconds] [Time since reference or first frame: 0.015664000 seconds] Frame Number: 313 Frame Length: 333 bytes (2664 bits) Capture Length: 333 bytes (2664 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 107.145.91.5 (107.145.91.5), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 319 Identification: 0x32a9 (12969) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 247 Protocol: UDP (17) Header checksum: 0x0de8 [correct] [Good: True] [Bad: False] Source: 107.145.91.5 (107.145.91.5) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 299 Checksum: 0x4f15 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n USN: uuid:cefaaf8f-a56a-412f-8725-8bb35a07c314::urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n EXT:\r\n SERVER: TBS/R2 UPnP/1.0 MiniUPnPd/1.2\r\n LOCATION: http://192.168.2.1:52606/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 314 0.015698000 121.174.70.149 [CENSORED] SSDP 352 HTTP/1.1 200 OK Frame 314: 352 bytes on wire (2816 bits), 352 bytes captured (2816 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.616798000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.616798000 seconds [Time delta from previous captured frame: 0.000034000 seconds] [Time delta from previous displayed frame: 0.000034000 seconds] [Time since reference or first frame: 0.015698000 seconds] Frame Number: 314 Frame Length: 352 bytes (2816 bits) Capture Length: 352 bytes (2816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 121.174.70.149 (121.174.70.149), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x28 (DSCP 0x0a: Assured Forwarding 11; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 10.. = Differentiated Services Codepoint: Assured Forwarding 11 (0x0a) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 338 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x48a9 [correct] [Good: True] [Bad: False] Source: 121.174.70.149 (121.174.70.149) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 318 Checksum: 0xd0db [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:3091/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 315 0.015740000 98.202.123.100 [CENSORED] SSDP 354 HTTP/1.1 200 OK Frame 315: 354 bytes on wire (2832 bits), 354 bytes captured (2832 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.616840000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.616840000 seconds [Time delta from previous captured frame: 0.000042000 seconds] [Time delta from previous displayed frame: 0.000042000 seconds] [Time since reference or first frame: 0.015740000 seconds] Frame Number: 315 Frame Length: 354 bytes (2832 bits) Capture Length: 354 bytes (2832 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 98.202.123.100 (98.202.123.100), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 340 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 248 Protocol: UDP (17) Header checksum: 0x27e4 [correct] [Good: True] [Bad: False] Source: 98.202.123.100 (98.202.123.100) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 320 Checksum: 0x1771 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-wifialliance-org:service:WFAWLANConfig:1\r\n USN: uuid:6199c08e-1dd2-11b2-b842-e584c37a2a5c::urn:schemas-wifialliance-org:service:WFAWLANConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 316 0.016258000 98.202.123.100 [CENSORED] SSDP 289 HTTP/1.1 200 OK Frame 316: 289 bytes on wire (2312 bits), 289 bytes captured (2312 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.617358000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.617358000 seconds [Time delta from previous captured frame: 0.000518000 seconds] [Time delta from previous displayed frame: 0.000518000 seconds] [Time since reference or first frame: 0.016258000 seconds] Frame Number: 316 Frame Length: 289 bytes (2312 bits) Capture Length: 289 bytes (2312 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 98.202.123.100 (98.202.123.100), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 275 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 248 Protocol: UDP (17) Header checksum: 0x2825 [correct] [Good: True] [Bad: False] Source: 98.202.123.100 (98.202.123.100) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 255 Checksum: 0xa3b1 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: uuid:618ae032-1dd2-11b2-9da7-d4bd8cf9b5fb\r\n USN: uuid:618ae032-1dd2-11b2-9da7-d4bd8cf9b5fb\r\n \r\n No. Time Source Destination Protocol Length Info 317 0.016336000 49.64.5.182 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 317: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.617436000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.617436000 seconds [Time delta from previous captured frame: 0.000078000 seconds] [Time delta from previous displayed frame: 0.000078000 seconds] [Time since reference or first frame: 0.016336000 seconds] Frame Number: 317 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 49.64.5.182 (49.64.5.182), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0x726a (29290) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x9ede [correct] [Good: True] [Bad: False] Source: 49.64.5.182 (49.64.5.182) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0xba8c [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 318 0.016375000 49.64.5.182 [CENSORED] SSDP 332 HTTP/1.1 200 OK Frame 318: 332 bytes on wire (2656 bits), 332 bytes captured (2656 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.617475000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.617475000 seconds [Time delta from previous captured frame: 0.000039000 seconds] [Time delta from previous displayed frame: 0.000039000 seconds] [Time since reference or first frame: 0.016375000 seconds] Frame Number: 318 Frame Length: 332 bytes (2656 bits) Capture Length: 332 bytes (2656 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 49.64.5.182 (49.64.5.182), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 318 Identification: 0x726b (29291) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x9ec7 [correct] [Good: True] [Bad: False] Source: 49.64.5.182 (49.64.5.182) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 298 Checksum: 0xf6ae [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000::urn:schemas-upnp-org:device:WANDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 319 0.016411000 49.64.5.182 [CENSORED] SSDP 364 HTTP/1.1 200 OK Frame 319: 364 bytes on wire (2912 bits), 364 bytes captured (2912 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.617511000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.617511000 seconds [Time delta from previous captured frame: 0.000036000 seconds] [Time delta from previous displayed frame: 0.000036000 seconds] [Time since reference or first frame: 0.016411000 seconds] Frame Number: 319 Frame Length: 364 bytes (2912 bits) Capture Length: 364 bytes (2912 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 49.64.5.182 (49.64.5.182), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 350 Identification: 0x726c (29292) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x9ea6 [correct] [Good: True] [Bad: False] Source: 49.64.5.182 (49.64.5.182) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 330 Checksum: 0x6ee7 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 320 0.016441000 31.19.157.187 [CENSORED] SSDP 344 HTTP/1.1 200 OK Frame 320: 344 bytes on wire (2752 bits), 344 bytes captured (2752 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.617541000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.617541000 seconds [Time delta from previous captured frame: 0.000030000 seconds] [Time delta from previous displayed frame: 0.000030000 seconds] [Time since reference or first frame: 0.016441000 seconds] Frame Number: 320 Frame Length: 344 bytes (2752 bits) Capture Length: 344 bytes (2752 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 31.19.157.187 (31.19.157.187), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 330 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x462e [correct] [Good: True] [Bad: False] Source: 31.19.157.187 (31.19.157.187) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 310 Checksum: 0xac62 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n USN: uuid:0389e8b0-1dd2-11b2-9701-90cd366b719d::urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n \r\n No. Time Source Destination Protocol Length Info 321 0.016465000 112.248.27.79 [CENSORED] SSDP 284 HTTP/1.1 200 OK Frame 321: 284 bytes on wire (2272 bits), 284 bytes captured (2272 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.617565000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.617565000 seconds [Time delta from previous captured frame: 0.000024000 seconds] [Time delta from previous displayed frame: 0.000024000 seconds] [Time since reference or first frame: 0.016465000 seconds] Frame Number: 321 Frame Length: 284 bytes (2272 bits) Capture Length: 284 bytes (2272 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 112.248.27.79 (112.248.27.79), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 270 Identification: 0x599d (22941) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x6274 [correct] [Good: True] [Bad: False] Source: 112.248.27.79 (112.248.27.79) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 250 Checksum: 0xf95d [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: upnp:rootdevice\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 322 0.016508000 112.248.27.79 [CENSORED] SSDP 348 HTTP/1.1 200 OK Frame 322: 348 bytes on wire (2784 bits), 348 bytes captured (2784 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.617608000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.617608000 seconds [Time delta from previous captured frame: 0.000043000 seconds] [Time delta from previous displayed frame: 0.000043000 seconds] [Time since reference or first frame: 0.016508000 seconds] Frame Number: 322 Frame Length: 348 bytes (2784 bits) Capture Length: 348 bytes (2784 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 112.248.27.79 (112.248.27.79), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 334 Identification: 0x599e (22942) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x6233 [correct] [Good: True] [Bad: False] Source: 112.248.27.79 (112.248.27.79) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 314 Checksum: 0x3318 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n \r\n No. Time Source Destination Protocol Length Info 323 0.016535000 60.219.197.210 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 323: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.617635000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.617635000 seconds [Time delta from previous captured frame: 0.000027000 seconds] [Time delta from previous displayed frame: 0.000027000 seconds] [Time since reference or first frame: 0.016535000 seconds] Frame Number: 323 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 60.219.197.210 (60.219.197.210), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0xfc82 (64642) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x48fe [correct] [Good: True] [Bad: False] Source: 60.219.197.210 (60.219.197.210) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0xc71b [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 324 0.016563000 60.219.197.210 [CENSORED] SSDP 284 HTTP/1.1 200 OK Frame 324: 284 bytes on wire (2272 bits), 284 bytes captured (2272 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.617663000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.617663000 seconds [Time delta from previous captured frame: 0.000028000 seconds] [Time delta from previous displayed frame: 0.000028000 seconds] [Time since reference or first frame: 0.016563000 seconds] Frame Number: 324 Frame Length: 284 bytes (2272 bits) Capture Length: 284 bytes (2272 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 60.219.197.210 (60.219.197.210), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 270 Identification: 0xfc84 (64644) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x4916 [correct] [Good: True] [Bad: False] Source: 60.219.197.210 (60.219.197.210) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 250 Checksum: 0x82f7 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: upnp:rootdevice\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 325 0.016602000 60.219.197.210 [CENSORED] SSDP 348 HTTP/1.1 200 OK Frame 325: 348 bytes on wire (2784 bits), 348 bytes captured (2784 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.617702000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.617702000 seconds [Time delta from previous captured frame: 0.000039000 seconds] [Time delta from previous displayed frame: 0.000039000 seconds] [Time since reference or first frame: 0.016602000 seconds] Frame Number: 325 Frame Length: 348 bytes (2784 bits) Capture Length: 348 bytes (2784 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 60.219.197.210 (60.219.197.210), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 334 Identification: 0xfc85 (64645) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x48d5 [correct] [Good: True] [Bad: False] Source: 60.219.197.210 (60.219.197.210) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 314 Checksum: 0xbcb1 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n \r\n No. Time Source Destination Protocol Length Info 326 0.016640000 60.219.197.210 [CENSORED] SSDP 364 HTTP/1.1 200 OK Frame 326: 364 bytes on wire (2912 bits), 364 bytes captured (2912 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.617740000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.617740000 seconds [Time delta from previous captured frame: 0.000038000 seconds] [Time delta from previous displayed frame: 0.000038000 seconds] [Time since reference or first frame: 0.016640000 seconds] Frame Number: 326 Frame Length: 364 bytes (2912 bits) Capture Length: 364 bytes (2912 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 60.219.197.210 (60.219.197.210), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 350 Identification: 0xfc88 (64648) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x48d2 [correct] [Good: True] [Bad: False] Source: 60.219.197.210 (60.219.197.210) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 330 Checksum: 0xa32f [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 327 0.016671000 60.219.197.210 [CENSORED] SSDP 362 HTTP/1.1 200 OK Frame 327: 362 bytes on wire (2896 bits), 362 bytes captured (2896 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.617771000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.617771000 seconds [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.016671000 seconds] Frame Number: 327 Frame Length: 362 bytes (2896 bits) Capture Length: 362 bytes (2896 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 60.219.197.210 (60.219.197.210), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 348 Identification: 0xfc8a (64650) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x48d2 [correct] [Good: True] [Bad: False] Source: 60.219.197.210 (60.219.197.210) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 328 Checksum: 0x2b42 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 328 0.016705000 60.219.197.210 [CENSORED] SSDP 368 HTTP/1.1 200 OK Frame 328: 368 bytes on wire (2944 bits), 368 bytes captured (2944 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.617805000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.617805000 seconds [Time delta from previous captured frame: 0.000034000 seconds] [Time delta from previous displayed frame: 0.000034000 seconds] [Time since reference or first frame: 0.016705000 seconds] Frame Number: 328 Frame Length: 368 bytes (2944 bits) Capture Length: 368 bytes (2944 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 60.219.197.210 (60.219.197.210), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 354 Identification: 0xfc8b (64651) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x48cb [correct] [Good: True] [Bad: False] Source: 60.219.197.210 (60.219.197.210) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 334 Checksum: 0xe5f0 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 329 0.016739000 76.75.93.246 [CENSORED] SSDP 365 HTTP/1.1 200 OK Frame 329: 365 bytes on wire (2920 bits), 365 bytes captured (2920 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.617839000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.617839000 seconds [Time delta from previous captured frame: 0.000034000 seconds] [Time delta from previous displayed frame: 0.000034000 seconds] [Time since reference or first frame: 0.016739000 seconds] Frame Number: 329 Frame Length: 365 bytes (2920 bits) Capture Length: 365 bytes (2920 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 76.75.93.246 (76.75.93.246), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 351 Identification: 0x7474 (29812) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0xe451 [correct] [Good: True] [Bad: False] Source: 76.75.93.246 (76.75.93.246) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 331 Checksum: 0x5f79 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:\r\n USN: uuid:add430de-1dd1-11b2-aacf-ddb439e7fbe3::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:\r\n \r\n No. Time Source Destination Protocol Length Info 330 0.016768000 60.219.197.210 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 330: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.617868000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.617868000 seconds [Time delta from previous captured frame: 0.000029000 seconds] [Time delta from previous displayed frame: 0.000029000 seconds] [Time since reference or first frame: 0.016768000 seconds] Frame Number: 330 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 60.219.197.210 (60.219.197.210), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0xfc8c (64652) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x48c6 [correct] [Good: True] [Bad: False] Source: 60.219.197.210 (60.219.197.210) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0x14d3 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANIPConnection:1\r\n \r\n No. Time Source Destination Protocol Length Info 331 0.016795000 123.143.5.185 [CENSORED] SSDP 320 HTTP/1.1 200 OK Frame 331: 320 bytes on wire (2560 bits), 320 bytes captured (2560 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.617895000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.617895000 seconds [Time delta from previous captured frame: 0.000027000 seconds] [Time delta from previous displayed frame: 0.000027000 seconds] [Time since reference or first frame: 0.016795000 seconds] Frame Number: 331 Frame Length: 320 bytes (2560 bits) Capture Length: 320 bytes (2560 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 123.143.5.185 (123.143.5.185), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 306 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x87ec [correct] [Good: True] [Bad: False] Source: 123.143.5.185 (123.143.5.185) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 286 Checksum: 0x9d93 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:WANDevice:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:device:WANDevice:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:3834/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 332 0.016833000 123.143.5.185 [CENSORED] SSDP 352 HTTP/1.1 200 OK Frame 332: 352 bytes on wire (2816 bits), 352 bytes captured (2816 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.617933000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.617933000 seconds [Time delta from previous captured frame: 0.000038000 seconds] [Time delta from previous displayed frame: 0.000038000 seconds] [Time since reference or first frame: 0.016833000 seconds] Frame Number: 332 Frame Length: 352 bytes (2816 bits) Capture Length: 352 bytes (2816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 123.143.5.185 (123.143.5.185), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 338 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x87cc [correct] [Good: True] [Bad: False] Source: 123.143.5.185 (123.143.5.185) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 318 Checksum: 0x15cc [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:3834/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 333 0.016864000 112.163.48.85 [CENSORED] SSDP 345 HTTP/1.1 200 OK Frame 333: 345 bytes on wire (2760 bits), 345 bytes captured (2760 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.617964000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.617964000 seconds [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.016864000 seconds] Frame Number: 333 Frame Length: 345 bytes (2760 bits) Capture Length: 345 bytes (2760 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 112.163.48.85 (112.163.48.85), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x28 (DSCP 0x0a: Assured Forwarding 11; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 10.. = Differentiated Services Codepoint: Assured Forwarding 11 (0x0a) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 331 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 250 Protocol: UDP (17) Header checksum: 0x62fb [correct] [Good: True] [Bad: False] Source: 112.163.48.85 (112.163.48.85) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 311 Checksum: 0xbac8 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:37357/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 334 0.016896000 112.163.48.85 [CENSORED] SSDP 321 HTTP/1.1 200 OK Frame 334: 321 bytes on wire (2568 bits), 321 bytes captured (2568 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.617996000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.617996000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.016896000 seconds] Frame Number: 334 Frame Length: 321 bytes (2568 bits) Capture Length: 321 bytes (2568 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 112.163.48.85 (112.163.48.85), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x28 (DSCP 0x0a: Assured Forwarding 11; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 10.. = Differentiated Services Codepoint: Assured Forwarding 11 (0x0a) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 307 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 250 Protocol: UDP (17) Header checksum: 0x6313 [correct] [Good: True] [Bad: False] Source: 112.163.48.85 (112.163.48.85) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 287 Checksum: 0xf532 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:WANDevice:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:device:WANDevice:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:37357/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 335 0.016929000 49.64.5.182 [CENSORED] SSDP 330 HTTP/1.1 200 OK Frame 335: 330 bytes on wire (2640 bits), 330 bytes captured (2640 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.618029000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.618029000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.016929000 seconds] Frame Number: 335 Frame Length: 330 bytes (2640 bits) Capture Length: 330 bytes (2640 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 49.64.5.182 (49.64.5.182), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 316 Identification: 0x726d (29293) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x9ec7 [correct] [Good: True] [Bad: False] Source: 49.64.5.182 (49.64.5.182) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 296 Checksum: 0xf08d [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 336 0.016964000 49.64.5.182 [CENSORED] SSDP 362 HTTP/1.1 200 OK Frame 336: 362 bytes on wire (2896 bits), 362 bytes captured (2896 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.618064000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.618064000 seconds [Time delta from previous captured frame: 0.000035000 seconds] [Time delta from previous displayed frame: 0.000035000 seconds] [Time since reference or first frame: 0.016964000 seconds] Frame Number: 336 Frame Length: 362 bytes (2896 bits) Capture Length: 362 bytes (2896 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 49.64.5.182 (49.64.5.182), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 348 Identification: 0x726e (29294) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x9ea6 [correct] [Good: True] [Bad: False] Source: 49.64.5.182 (49.64.5.182) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 328 Checksum: 0xf6f9 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 337 0.016999000 49.64.5.182 [CENSORED] SSDP 368 HTTP/1.1 200 OK Frame 337: 368 bytes on wire (2944 bits), 368 bytes captured (2944 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.618099000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.618099000 seconds [Time delta from previous captured frame: 0.000035000 seconds] [Time delta from previous displayed frame: 0.000035000 seconds] [Time since reference or first frame: 0.016999000 seconds] Frame Number: 337 Frame Length: 368 bytes (2944 bits) Capture Length: 368 bytes (2944 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 49.64.5.182 (49.64.5.182), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 354 Identification: 0x726f (29295) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x9e9f [correct] [Good: True] [Bad: False] Source: 49.64.5.182 (49.64.5.182) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 334 Checksum: 0xb1a8 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 338 0.017029000 182.247.32.224 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 338: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.618129000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.618129000 seconds [Time delta from previous captured frame: 0.000030000 seconds] [Time delta from previous displayed frame: 0.000030000 seconds] [Time since reference or first frame: 0.017029000 seconds] Frame Number: 338 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 182.247.32.224 (182.247.32.224), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0xfa08 (64008) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x7730 [correct] [Good: True] [Bad: False] Source: 182.247.32.224 (182.247.32.224) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0x3ecf [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 339 0.017060000 74.89.236.8 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 339: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.618160000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.618160000 seconds [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.017060000 seconds] Frame Number: 339 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 74.89.236.8 (74.89.236.8), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0xe505 (58629) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (17) Header checksum: 0xe9af [correct] [Good: True] [Bad: False] Source: 74.89.236.8 (74.89.236.8) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0x047a [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANPPPConnection:\r\n USN: uuid:add7faa2-1dd1-11b2-8f10-a10345103669::urn:schemas-upnp-org:service:WANPPPConnection:\r\n \r\n No. Time Source Destination Protocol Length Info 340 0.017095000 1.60.138.111 [CENSORED] SSDP 368 HTTP/1.1 200 OK Frame 340: 368 bytes on wire (2944 bits), 368 bytes captured (2944 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.618195000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.618195000 seconds [Time delta from previous captured frame: 0.000035000 seconds] [Time delta from previous displayed frame: 0.000035000 seconds] [Time since reference or first frame: 0.017095000 seconds] Frame Number: 340 Frame Length: 368 bytes (2944 bits) Capture Length: 368 bytes (2944 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 1.60.138.111 (1.60.138.111), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 354 Identification: 0xf543 (62787) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xc715 [correct] [Good: True] [Bad: False] Source: 1.60.138.111 (1.60.138.111) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 334 Checksum: 0x5cf3 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 341 0.017124000 177.192.183.189 [CENSORED] SSDP 347 HTTP/1.1 200 OK Frame 341: 347 bytes on wire (2776 bits), 347 bytes captured (2776 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.618224000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.618224000 seconds [Time delta from previous captured frame: 0.000029000 seconds] [Time delta from previous displayed frame: 0.000029000 seconds] [Time since reference or first frame: 0.017124000 seconds] Frame Number: 341 Frame Length: 347 bytes (2776 bits) Capture Length: 347 bytes (2776 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 177.192.183.189 (177.192.183.189), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 333 Identification: 0x0254 (596) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 55 Protocol: UDP (17) Header checksum: 0x5b48 [correct] [Good: True] [Bad: False] Source: 177.192.183.189 (177.192.183.189) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 313 Checksum: 0x313e [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:\r\n USN: uuid:2a80da60-1dd2-11b2-9d7b-da68412ab99f::urn:schemas-upnp-org:service:WANIPConnection:\r\n \r\n No. Time Source Destination Protocol Length Info 342 0.017149000 113.105.206.65 [CENSORED] SSDP 284 HTTP/1.1 200 OK Frame 342: 284 bytes on wire (2272 bits), 284 bytes captured (2272 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.618249000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.618249000 seconds [Time delta from previous captured frame: 0.000025000 seconds] [Time delta from previous displayed frame: 0.000025000 seconds] [Time since reference or first frame: 0.017149000 seconds] Frame Number: 342 Frame Length: 284 bytes (2272 bits) Capture Length: 284 bytes (2272 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 113.105.206.65 (113.105.206.65), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 270 Identification: 0xdbce (56270) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x2ddf [correct] [Good: True] [Bad: False] Source: 113.105.206.65 (113.105.206.65) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 250 Checksum: 0xd0ad [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: upnp:rootdevice\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{722696eb-73c2-4d55-ae59-ad48e0a6b7aa}0810743F7C48::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 343 0.017187000 177.192.183.189 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 343: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.618287000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.618287000 seconds [Time delta from previous captured frame: 0.000038000 seconds] [Time delta from previous displayed frame: 0.000038000 seconds] [Time since reference or first frame: 0.017187000 seconds] Frame Number: 343 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 177.192.183.189 (177.192.183.189), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0x0255 (597) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 55 Protocol: UDP (17) Header checksum: 0x5b45 [correct] [Good: True] [Bad: False] Source: 177.192.183.189 (177.192.183.189) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0x75af [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:\r\n USN: uuid:2a787fc8-1dd2-11b2-b7d3-c52d675e7a70::urn:schemas-upnp-org:service:Layer3Forwarding:\r\n \r\n No. Time Source Destination Protocol Length Info 344 0.017219000 113.105.206.65 [CENSORED] SSDP 348 HTTP/1.1 200 OK Frame 344: 348 bytes on wire (2784 bits), 348 bytes captured (2784 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.618319000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.618319000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.017219000 seconds] Frame Number: 344 Frame Length: 348 bytes (2784 bits) Capture Length: 348 bytes (2784 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 113.105.206.65 (113.105.206.65), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 334 Identification: 0xdbcf (56271) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x2d9e [correct] [Good: True] [Bad: False] Source: 113.105.206.65 (113.105.206.65) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 314 Checksum: 0x0a68 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{722696eb-73c2-4d55-ae59-ad48e0a6b7aa}0810743F7C48::urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n \r\n No. Time Source Destination Protocol Length Info 345 0.017246000 113.105.206.65 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 345: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.618346000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.618346000 seconds [Time delta from previous captured frame: 0.000027000 seconds] [Time delta from previous displayed frame: 0.000027000 seconds] [Time since reference or first frame: 0.017246000 seconds] Frame Number: 345 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 113.105.206.65 (113.105.206.65), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0xdbd0 (56272) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x2dc3 [correct] [Good: True] [Bad: False] Source: 113.105.206.65 (113.105.206.65) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0x2a3b [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WAN{30ea3150-5ad3-49e8-808b-6c4111437217}0810743F7C48\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{30ea3150-5ad3-49e8-808b-6c4111437217}0810743F7C48\r\n \r\n No. Time Source Destination Protocol Length Info 346 0.017282000 113.105.206.65 [CENSORED] SSDP 332 HTTP/1.1 200 OK Frame 346: 332 bytes on wire (2656 bits), 332 bytes captured (2656 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.618382000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.618382000 seconds [Time delta from previous captured frame: 0.000036000 seconds] [Time delta from previous displayed frame: 0.000036000 seconds] [Time since reference or first frame: 0.017282000 seconds] Frame Number: 346 Frame Length: 332 bytes (2656 bits) Capture Length: 332 bytes (2656 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 113.105.206.65 (113.105.206.65), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 318 Identification: 0xdbd1 (56273) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x2dac [correct] [Good: True] [Bad: False] Source: 113.105.206.65 (113.105.206.65) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 298 Checksum: 0x1fb6 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{30ea3150-5ad3-49e8-808b-6c4111437217}0810743F7C48::urn:schemas-upnp-org:device:WANDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 347 0.017316000 113.105.206.65 [CENSORED] SSDP 364 HTTP/1.1 200 OK Frame 347: 364 bytes on wire (2912 bits), 364 bytes captured (2912 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.618416000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.618416000 seconds [Time delta from previous captured frame: 0.000034000 seconds] [Time delta from previous displayed frame: 0.000034000 seconds] [Time since reference or first frame: 0.017316000 seconds] Frame Number: 347 Frame Length: 364 bytes (2912 bits) Capture Length: 364 bytes (2912 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 113.105.206.65 (113.105.206.65), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 350 Identification: 0xdbd2 (56274) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x2d8b [correct] [Good: True] [Bad: False] Source: 113.105.206.65 (113.105.206.65) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 330 Checksum: 0x97ee [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{30ea3150-5ad3-49e8-808b-6c4111437217}0810743F7C48::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 348 0.017347000 113.105.206.65 [CENSORED] SSDP 330 HTTP/1.1 200 OK Frame 348: 330 bytes on wire (2640 bits), 330 bytes captured (2640 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.618447000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.618447000 seconds [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.017347000 seconds] Frame Number: 348 Frame Length: 330 bytes (2640 bits) Capture Length: 330 bytes (2640 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 113.105.206.65 (113.105.206.65), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 316 Identification: 0xdbd3 (56275) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x2dac [correct] [Good: True] [Bad: False] Source: 113.105.206.65 (113.105.206.65) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 296 Checksum: 0x67a2 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WANConnection{459d4d41-92ed-42d5-8518-96c297823cec}0810743F7C48\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{459d4d41-92ed-42d5-8518-96c297823cec}0810743F7C48\r\n \r\n No. Time Source Destination Protocol Length Info 349 0.017380000 94.215.236.9 [CENSORED] SSDP 352 HTTP/1.1 200 OK Frame 349: 352 bytes on wire (2816 bits), 352 bytes captured (2816 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.618480000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.618480000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.017380000 seconds] Frame Number: 349 Frame Length: 352 bytes (2816 bits) Capture Length: 352 bytes (2816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 94.215.236.9 (94.215.236.9), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 338 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 248 Protocol: UDP (17) Header checksum: 0xbb33 [correct] [Good: True] [Bad: False] Source: 94.215.236.9 (94.215.236.9) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 318 Checksum: 0x4039 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.8.1:4066/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 350 0.017410000 31.19.157.187 [CENSORED] SSDP 332 HTTP/1.1 200 OK Frame 350: 332 bytes on wire (2656 bits), 332 bytes captured (2656 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.618510000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.618510000 seconds [Time delta from previous captured frame: 0.000030000 seconds] [Time delta from previous displayed frame: 0.000030000 seconds] [Time since reference or first frame: 0.017410000 seconds] Frame Number: 350 Frame Length: 332 bytes (2656 bits) Capture Length: 332 bytes (2656 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 31.19.157.187 (31.19.157.187), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 318 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x463a [correct] [Good: True] [Bad: False] Source: 31.19.157.187 (31.19.157.187) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 298 Checksum: 0xdb29 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: uuid:03936d36-1dd2-11b2-880c-b6c040b8ef03\r\n USN: uuid:03936d36-1dd2-11b2-880c-b6c040b8ef03::uuid:03936d36-1dd2-11b2-880c-b6c040b8ef03\r\n \r\n No. Time Source Destination Protocol Length Info 351 0.017445000 49.64.5.182 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 351: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.618545000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.618545000 seconds [Time delta from previous captured frame: 0.000035000 seconds] [Time delta from previous displayed frame: 0.000035000 seconds] [Time since reference or first frame: 0.017445000 seconds] Frame Number: 351 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 49.64.5.182 (49.64.5.182), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0x7272 (29298) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x9ea8 [correct] [Good: True] [Bad: False] Source: 49.64.5.182 (49.64.5.182) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0xdfb0 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 352 0.017474000 94.215.236.9 [CENSORED] SSDP 334 HTTP/1.1 200 OK Frame 352: 334 bytes on wire (2672 bits), 334 bytes captured (2672 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.618574000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.618574000 seconds [Time delta from previous captured frame: 0.000029000 seconds] [Time delta from previous displayed frame: 0.000029000 seconds] [Time since reference or first frame: 0.017474000 seconds] Frame Number: 352 Frame Length: 334 bytes (2672 bits) Capture Length: 334 bytes (2672 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 94.215.236.9 (94.215.236.9), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 320 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 248 Protocol: UDP (17) Header checksum: 0xbb45 [correct] [Good: True] [Bad: False] Source: 94.215.236.9 (94.215.236.9) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 300 Checksum: 0x6a88 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:service:WANIPConnection:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.8.1:4066/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 353 0.017509000 66.215.159.138 [CENSORED] SSDP 359 HTTP/1.1 200 OK Frame 353: 359 bytes on wire (2872 bits), 359 bytes captured (2872 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.618609000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.618609000 seconds [Time delta from previous captured frame: 0.000035000 seconds] [Time delta from previous displayed frame: 0.000035000 seconds] [Time since reference or first frame: 0.017509000 seconds] Frame Number: 353 Frame Length: 359 bytes (2872 bits) Capture Length: 359 bytes (2872 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 66.215.159.138 (66.215.159.138), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 345 Identification: 0xe0fd (57597) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x45ae [correct] [Good: True] [Bad: False] Source: 66.215.159.138 (66.215.159.138) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 325 Checksum: 0x4db6 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.2.254:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n USN: uuid:a8935356-1dd1-11b2-bc8b-bc7118cf51e1::urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 354 0.017539000 66.215.159.138 [CENSORED] SSDP 335 HTTP/1.1 200 OK Frame 354: 335 bytes on wire (2680 bits), 335 bytes captured (2680 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.618639000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.618639000 seconds [Time delta from previous captured frame: 0.000030000 seconds] [Time delta from previous displayed frame: 0.000030000 seconds] [Time since reference or first frame: 0.017539000 seconds] Frame Number: 354 Frame Length: 335 bytes (2680 bits) Capture Length: 335 bytes (2680 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 66.215.159.138 (66.215.159.138), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 321 Identification: 0xe0fe (57598) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x45c5 [correct] [Good: True] [Bad: False] Source: 66.215.159.138 (66.215.159.138) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 301 Checksum: 0xae4a [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.2.254:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:WANDevice:\r\n USN: uuid:a8970802-1dd1-11b2-bf3f-f91444937fd5::urn:schemas-upnp-org:device:WANDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 355 0.017576000 66.215.159.138 [CENSORED] SSDP 367 HTTP/1.1 200 OK Frame 355: 367 bytes on wire (2936 bits), 367 bytes captured (2936 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.618676000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.618676000 seconds [Time delta from previous captured frame: 0.000037000 seconds] [Time delta from previous displayed frame: 0.000037000 seconds] [Time since reference or first frame: 0.017576000 seconds] Frame Number: 355 Frame Length: 367 bytes (2936 bits) Capture Length: 367 bytes (2936 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 66.215.159.138 (66.215.159.138), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 353 Identification: 0xe0ff (57599) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x45a4 [correct] [Good: True] [Bad: False] Source: 66.215.159.138 (66.215.159.138) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 333 Checksum: 0xa207 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.2.254:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:\r\n USN: uuid:a8970802-1dd1-11b2-bf3f-f91444937fd5::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:\r\n \r\n No. Time Source Destination Protocol Length Info 356 0.017607000 66.215.159.138 [CENSORED] SSDP 355 HTTP/1.1 200 OK Frame 356: 355 bytes on wire (2840 bits), 355 bytes captured (2840 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.618707000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.618707000 seconds [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.017607000 seconds] Frame Number: 356 Frame Length: 355 bytes (2840 bits) Capture Length: 355 bytes (2840 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 66.215.159.138 (66.215.159.138), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 341 Identification: 0xe100 (57600) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x45af [correct] [Good: True] [Bad: False] Source: 66.215.159.138 (66.215.159.138) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 321 Checksum: 0x3271 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.2.254:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:\r\n USN: uuid:a8a9faca-1dd1-11b2-a3e0-c5deb50293d5::urn:schemas-upnp-org:device:WANConnectionDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 357 0.017637000 66.215.159.138 [CENSORED] SSDP 351 HTTP/1.1 200 OK Frame 357: 351 bytes on wire (2808 bits), 351 bytes captured (2808 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.618737000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.618737000 seconds [Time delta from previous captured frame: 0.000030000 seconds] [Time delta from previous displayed frame: 0.000030000 seconds] [Time since reference or first frame: 0.017637000 seconds] Frame Number: 357 Frame Length: 351 bytes (2808 bits) Capture Length: 351 bytes (2808 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 66.215.159.138 (66.215.159.138), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 337 Identification: 0xe101 (57601) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x45b2 [correct] [Good: True] [Bad: False] Source: 66.215.159.138 (66.215.159.138) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 317 Checksum: 0x8ddd [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.2.254:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANPPPConnection:\r\n USN: uuid:a8a9faca-1dd1-11b2-a3e0-c5deb50293d5::urn:schemas-upnp-org:service:WANPPPConnection:\r\n \r\n No. Time Source Destination Protocol Length Info 358 0.017664000 60.219.197.210 [CENSORED] SSDP 330 HTTP/1.1 200 OK Frame 358: 330 bytes on wire (2640 bits), 330 bytes captured (2640 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.618764000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.618764000 seconds [Time delta from previous captured frame: 0.000027000 seconds] [Time delta from previous displayed frame: 0.000027000 seconds] [Time since reference or first frame: 0.017664000 seconds] Frame Number: 358 Frame Length: 330 bytes (2640 bits) Capture Length: 330 bytes (2640 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 60.219.197.210 (60.219.197.210), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 316 Identification: 0xfc94 (64660) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x48d8 [correct] [Good: True] [Bad: False] Source: 60.219.197.210 (60.219.197.210) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 296 Checksum: 0x24d6 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 359 0.017701000 113.105.206.65 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 359: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.618801000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.618801000 seconds [Time delta from previous captured frame: 0.000037000 seconds] [Time delta from previous displayed frame: 0.000037000 seconds] [Time since reference or first frame: 0.017701000 seconds] Frame Number: 359 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 113.105.206.65 (113.105.206.65), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0xdbd6 (56278) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x2d8f [correct] [Good: True] [Bad: False] Source: 113.105.206.65 (113.105.206.65) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0x97ba [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{459d4d41-92ed-42d5-8518-96c297823cec}0810743F7C48::urn:schemas-upnp-org:service:WANIPConnection:1\r\n \r\n No. Time Source Destination Protocol Length Info 360 0.017728000 113.105.206.65 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 360: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.618828000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.618828000 seconds [Time delta from previous captured frame: 0.000027000 seconds] [Time delta from previous displayed frame: 0.000027000 seconds] [Time since reference or first frame: 0.017728000 seconds] Frame Number: 360 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 113.105.206.65 (113.105.206.65), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0xdbd7 (56279) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x2dbc [correct] [Good: True] [Bad: False] Source: 113.105.206.65 (113.105.206.65) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0xf133 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:IGD{722696eb-73c2-4d55-ae59-ad48e0a6b7aa}0810743F7C48\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{722696eb-73c2-4d55-ae59-ad48e0a6b7aa}0810743F7C48\r\n \r\n No. Time Source Destination Protocol Length Info 361 0.017765000 98.213.81.212 [CENSORED] SSDP 353 HTTP/1.1 200 OK Frame 361: 353 bytes on wire (2824 bits), 353 bytes captured (2824 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.618865000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.618865000 seconds [Time delta from previous captured frame: 0.000037000 seconds] [Time delta from previous displayed frame: 0.000037000 seconds] [Time since reference or first frame: 0.017765000 seconds] Frame Number: 361 Frame Length: 353 bytes (2824 bits) Capture Length: 353 bytes (2824 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 98.213.81.212 (98.213.81.212), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 339 Identification: 0xb836 (47158) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x9633 [correct] [Good: True] [Bad: False] Source: 98.213.81.212 (98.213.81.212) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 319 Checksum: 0x3faa [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:\r\n USN: uuid:cc9eb2fa-1dd1-11b2-ac55-9f715db43ef5::urn:schemas-upnp-org:device:WANConnectionDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 362 0.017798000 113.105.206.65 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 362: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.618898000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.618898000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.017798000 seconds] Frame Number: 362 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 113.105.206.65 (113.105.206.65), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0xdbd8 (56280) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x2d8d [correct] [Good: True] [Bad: False] Source: 113.105.206.65 (113.105.206.65) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0x61af [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{722696eb-73c2-4d55-ae59-ad48e0a6b7aa}0810743F7C48::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 363 0.017831000 60.219.197.210 [CENSORED] SSDP 368 HTTP/1.1 200 OK Frame 363: 368 bytes on wire (2944 bits), 368 bytes captured (2944 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.618931000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.618931000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.017831000 seconds] Frame Number: 363 Frame Length: 368 bytes (2944 bits) Capture Length: 368 bytes (2944 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 60.219.197.210 (60.219.197.210), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 354 Identification: 0xfc96 (64662) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x48b0 [correct] [Good: True] [Bad: False] Source: 60.219.197.210 (60.219.197.210) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 334 Checksum: 0xe5f0 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 364 0.017865000 39.65.18.40 [CENSORED] SSDP 368 HTTP/1.1 200 OK Frame 364: 368 bytes on wire (2944 bits), 368 bytes captured (2944 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.618965000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.618965000 seconds [Time delta from previous captured frame: 0.000034000 seconds] [Time delta from previous displayed frame: 0.000034000 seconds] [Time since reference or first frame: 0.017865000 seconds] Frame Number: 364 Frame Length: 368 bytes (2944 bits) Capture Length: 368 bytes (2944 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 39.65.18.40 (39.65.18.40), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 354 Identification: 0x351c (13596) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xd97f [correct] [Good: True] [Bad: False] Source: 39.65.18.40 (39.65.18.40) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 334 Checksum: 0xaf35 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 365 0.017896000 112.229.165.222 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 365: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.618996000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.618996000 seconds [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.017896000 seconds] Frame Number: 365 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 112.229.165.222 (112.229.165.222), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0x9359 (37721) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x9de3 [correct] [Good: True] [Bad: False] Source: 112.229.165.222 (112.229.165.222) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0xffe2 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 366 0.017931000 112.229.165.222 [CENSORED] SSDP 364 HTTP/1.1 200 OK Frame 366: 364 bytes on wire (2912 bits), 364 bytes captured (2912 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.619031000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.619031000 seconds [Time delta from previous captured frame: 0.000035000 seconds] [Time delta from previous displayed frame: 0.000035000 seconds] [Time since reference or first frame: 0.017931000 seconds] Frame Number: 366 Frame Length: 364 bytes (2912 bits) Capture Length: 364 bytes (2912 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 112.229.165.222 (112.229.165.222), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 350 Identification: 0x935e (37726) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x9dd6 [correct] [Good: True] [Bad: False] Source: 112.229.165.222 (112.229.165.222) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 330 Checksum: 0x8f19 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 367 0.017955000 60.215.212.197 [CENSORED] SSDP 284 HTTP/1.1 200 OK Frame 367: 284 bytes on wire (2272 bits), 284 bytes captured (2272 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.619055000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.619055000 seconds [Time delta from previous captured frame: 0.000024000 seconds] [Time delta from previous displayed frame: 0.000024000 seconds] [Time since reference or first frame: 0.017955000 seconds] Frame Number: 367 Frame Length: 284 bytes (2272 bits) Capture Length: 284 bytes (2272 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 60.215.212.197 (60.215.212.197), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 270 Identification: 0xdf50 (57168) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x576b [correct] [Good: True] [Bad: False] Source: 60.215.212.197 (60.215.212.197) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 250 Checksum: 0x7408 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: upnp:rootdevice\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 368 0.017985000 112.248.27.79 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 368: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.619085000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.619085000 seconds [Time delta from previous captured frame: 0.000030000 seconds] [Time delta from previous displayed frame: 0.000030000 seconds] [Time since reference or first frame: 0.017985000 seconds] Frame Number: 368 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 112.248.27.79 (112.248.27.79), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0x59aa (22954) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x624d [correct] [Good: True] [Bad: False] Source: 112.248.27.79 (112.248.27.79) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0x653b [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 369 0.018019000 27.214.24.139 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 369: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.619119000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.619119000 seconds [Time delta from previous captured frame: 0.000034000 seconds] [Time delta from previous displayed frame: 0.000034000 seconds] [Time since reference or first frame: 0.018019000 seconds] Frame Number: 369 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 27.214.24.139 (27.214.24.139), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0x2047 (8263) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xf386 [correct] [Good: True] [Bad: False] Source: 27.214.24.139 (27.214.24.139) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0x9568 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 370 0.018057000 27.214.24.139 [CENSORED] SSDP 348 HTTP/1.1 200 OK Frame 370: 348 bytes on wire (2784 bits), 348 bytes captured (2784 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.619157000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.619157000 seconds [Time delta from previous captured frame: 0.000038000 seconds] [Time delta from previous displayed frame: 0.000038000 seconds] [Time since reference or first frame: 0.018057000 seconds] Frame Number: 370 Frame Length: 348 bytes (2784 bits) Capture Length: 348 bytes (2784 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 27.214.24.139 (27.214.24.139), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 334 Identification: 0x204a (8266) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xf35d [correct] [Good: True] [Bad: False] Source: 27.214.24.139 (27.214.24.139) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 314 Checksum: 0x8afe [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n \r\n No. Time Source Destination Protocol Length Info 371 0.018084000 27.214.24.139 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 371: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.619184000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.619184000 seconds [Time delta from previous captured frame: 0.000027000 seconds] [Time delta from previous displayed frame: 0.000027000 seconds] [Time since reference or first frame: 0.018084000 seconds] Frame Number: 371 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 27.214.24.139 (27.214.24.139), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0x204b (8267) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xf382 [correct] [Good: True] [Bad: False] Source: 27.214.24.139 (27.214.24.139) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0xbd21 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 372 0.018125000 221.207.207.229 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 372: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.619225000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.619225000 seconds [Time delta from previous captured frame: 0.000041000 seconds] [Time delta from previous displayed frame: 0.000041000 seconds] [Time since reference or first frame: 0.018125000 seconds] Frame Number: 372 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 221.207.207.229 (221.207.207.229), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x01 (DSCP 0x00: Default; ECN: 0x01: ECT(1) (ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..01 = Explicit Congestion Notification: ECT(1) (ECN-Capable Transport) (0x01) Total Length: 342 Identification: 0x29a7 (10663) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x70b3 [correct] [Good: True] [Bad: False] Source: 221.207.207.229 (221.207.207.229) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0x68f1 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 373 0.018154000 27.214.24.139 [CENSORED] SSDP 332 HTTP/1.1 200 OK Frame 373: 332 bytes on wire (2656 bits), 332 bytes captured (2656 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.619254000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.619254000 seconds [Time delta from previous captured frame: 0.000029000 seconds] [Time delta from previous displayed frame: 0.000029000 seconds] [Time since reference or first frame: 0.018154000 seconds] Frame Number: 373 Frame Length: 332 bytes (2656 bits) Capture Length: 332 bytes (2656 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 27.214.24.139 (27.214.24.139), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 318 Identification: 0x204c (8268) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xf36b [correct] [Good: True] [Bad: False] Source: 27.214.24.139 (27.214.24.139) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 298 Checksum: 0xf943 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000::urn:schemas-upnp-org:device:WANDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 374 0.018181000 221.207.207.229 [CENSORED] SSDP 284 HTTP/1.1 200 OK Frame 374: 284 bytes on wire (2272 bits), 284 bytes captured (2272 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.619281000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.619281000 seconds [Time delta from previous captured frame: 0.000027000 seconds] [Time delta from previous displayed frame: 0.000027000 seconds] [Time since reference or first frame: 0.018181000 seconds] Frame Number: 374 Frame Length: 284 bytes (2272 bits) Capture Length: 284 bytes (2272 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 221.207.207.229 (221.207.207.229), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x01 (DSCP 0x00: Default; ECN: 0x01: ECT(1) (ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..01 = Explicit Congestion Notification: ECT(1) (ECN-Capable Transport) (0x01) Total Length: 270 Identification: 0x29a8 (10664) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x70fa [correct] [Good: True] [Bad: False] Source: 221.207.207.229 (221.207.207.229) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 250 Checksum: 0xd7ef [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: upnp:rootdevice\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 375 0.018227000 27.214.24.139 [CENSORED] SSDP 364 HTTP/1.1 200 OK Frame 375: 364 bytes on wire (2912 bits), 364 bytes captured (2912 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.619327000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.619327000 seconds [Time delta from previous captured frame: 0.000046000 seconds] [Time delta from previous displayed frame: 0.000046000 seconds] [Time since reference or first frame: 0.018227000 seconds] Frame Number: 375 Frame Length: 364 bytes (2912 bits) Capture Length: 364 bytes (2912 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 27.214.24.139 (27.214.24.139), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 350 Identification: 0x204d (8269) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xf35a [correct] [Good: True] [Bad: False] Source: 27.214.24.139 (27.214.24.139) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 330 Checksum: 0x717c [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 376 0.018815000 42.94.68.57 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 376: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.619915000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.619915000 seconds [Time delta from previous captured frame: 0.000588000 seconds] [Time delta from previous displayed frame: 0.000588000 seconds] [Time since reference or first frame: 0.018815000 seconds] Frame Number: 376 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 42.94.68.57 (42.94.68.57), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0x6a88 (27272) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x6f1f [correct] [Good: True] [Bad: False] Source: 42.94.68.57 (42.94.68.57) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0x82eb [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 377 0.018845000 175.171.139.53 [CENSORED] SSDP 284 HTTP/1.1 200 OK Frame 377: 284 bytes on wire (2272 bits), 284 bytes captured (2272 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.619945000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.619945000 seconds [Time delta from previous captured frame: 0.000030000 seconds] [Time delta from previous displayed frame: 0.000030000 seconds] [Time since reference or first frame: 0.018845000 seconds] Frame Number: 377 Frame Length: 284 bytes (2272 bits) Capture Length: 284 bytes (2272 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 175.171.139.53 (175.171.139.53), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 270 Identification: 0x6178 (24952) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xabff [correct] [Good: True] [Bad: False] Source: 175.171.139.53 (175.171.139.53) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 250 Checksum: 0x4ac4 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: upnp:rootdevice\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 378 0.018918000 175.171.139.53 [CENSORED] SSDP 332 HTTP/1.1 200 OK Frame 378: 332 bytes on wire (2656 bits), 332 bytes captured (2656 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.620018000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.620018000 seconds [Time delta from previous captured frame: 0.000073000 seconds] [Time delta from previous displayed frame: 0.000073000 seconds] [Time since reference or first frame: 0.018918000 seconds] Frame Number: 378 Frame Length: 332 bytes (2656 bits) Capture Length: 332 bytes (2656 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 175.171.139.53 (175.171.139.53), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 318 Identification: 0x617b (24955) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xabcc [correct] [Good: True] [Bad: False] Source: 175.171.139.53 (175.171.139.53) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 298 Checksum: 0xf2c3 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000::urn:schemas-upnp-org:device:WANDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 379 0.021256000 49.64.5.182 [CENSORED] SSDP 364 HTTP/1.1 200 OK Frame 379: 364 bytes on wire (2912 bits), 364 bytes captured (2912 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.622356000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.622356000 seconds [Time delta from previous captured frame: 0.002338000 seconds] [Time delta from previous displayed frame: 0.002338000 seconds] [Time since reference or first frame: 0.021256000 seconds] Frame Number: 379 Frame Length: 364 bytes (2912 bits) Capture Length: 364 bytes (2912 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 49.64.5.182 (49.64.5.182), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 350 Identification: 0x7277 (29303) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x9e9b [correct] [Good: True] [Bad: False] Source: 49.64.5.182 (49.64.5.182) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 330 Checksum: 0x6ee7 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 380 0.021283000 49.64.5.182 [CENSORED] SSDP 330 HTTP/1.1 200 OK Frame 380: 330 bytes on wire (2640 bits), 330 bytes captured (2640 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.622383000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.622383000 seconds [Time delta from previous captured frame: 0.000027000 seconds] [Time delta from previous displayed frame: 0.000027000 seconds] [Time since reference or first frame: 0.021283000 seconds] Frame Number: 380 Frame Length: 330 bytes (2640 bits) Capture Length: 330 bytes (2640 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 49.64.5.182 (49.64.5.182), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 316 Identification: 0x7278 (29304) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x9ebc [correct] [Good: True] [Bad: False] Source: 49.64.5.182 (49.64.5.182) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 296 Checksum: 0xf08d [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 381 0.021319000 175.171.139.53 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 381: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.622419000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.622419000 seconds [Time delta from previous captured frame: 0.000036000 seconds] [Time delta from previous displayed frame: 0.000036000 seconds] [Time since reference or first frame: 0.021319000 seconds] Frame Number: 381 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 175.171.139.53 (175.171.139.53), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0x618b (24971) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xaba4 [correct] [Good: True] [Bad: False] Source: 175.171.139.53 (175.171.139.53) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0xdc9f [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANIPConnection:1\r\n \r\n No. Time Source Destination Protocol Length Info 382 0.021353000 74.197.157.207 [CENSORED] SSDP 359 HTTP/1.1 200 OK Frame 382: 359 bytes on wire (2872 bits), 359 bytes captured (2872 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.622453000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.622453000 seconds [Time delta from previous captured frame: 0.000034000 seconds] [Time delta from previous displayed frame: 0.000034000 seconds] [Time since reference or first frame: 0.021353000 seconds] Frame Number: 382 Frame Length: 359 bytes (2872 bits) Capture Length: 359 bytes (2872 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 74.197.157.207 (74.197.157.207), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 345 Identification: 0xe33f (58175) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x3739 [correct] [Good: True] [Bad: False] Source: 74.197.157.207 (74.197.157.207) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 325 Checksum: 0x73d6 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-wifialliance-org:service:WFAWLANConfig:\r\n USN: uuid:2a855a5e-1dd2-11b2-a043-f966469e095d::urn:schemas-wifialliance-org:service:WFAWLANConfig:\r\n \r\n No. Time Source Destination Protocol Length Info 383 0.021378000 73.54.213.15 [CENSORED] SSDP 287 HTTP/1.1 200 OK Frame 383: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.622478000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.622478000 seconds [Time delta from previous captured frame: 0.000025000 seconds] [Time delta from previous displayed frame: 0.000025000 seconds] [Time since reference or first frame: 0.021378000 seconds] Frame Number: 383 Frame Length: 287 bytes (2296 bits) Capture Length: 287 bytes (2296 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 73.54.213.15 (73.54.213.15), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 273 Identification: 0x909e (37022) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 253 Protocol: UDP (17) Header checksum: 0x5271 [correct] [Good: True] [Bad: False] Source: 73.54.213.15 (73.54.213.15) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 253 Checksum: 0x66f8 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: upnp:rootdevice\r\n USN: uuid:add10fee-1dd1-11b2-b114-a5421899f780::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 384 0.021420000 73.54.213.15 [CENSORED] SSDP 357 HTTP/1.1 200 OK Frame 384: 357 bytes on wire (2856 bits), 357 bytes captured (2856 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.622520000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.622520000 seconds [Time delta from previous captured frame: 0.000042000 seconds] [Time delta from previous displayed frame: 0.000042000 seconds] [Time since reference or first frame: 0.021420000 seconds] Frame Number: 384 Frame Length: 357 bytes (2856 bits) Capture Length: 357 bytes (2856 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 73.54.213.15 (73.54.213.15), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 343 Identification: 0x909f (37023) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 253 Protocol: UDP (17) Header checksum: 0x522a [correct] [Good: True] [Bad: False] Source: 73.54.213.15 (73.54.213.15) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 323 Checksum: 0x193f [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n USN: uuid:add10fee-1dd1-11b2-b114-a5421899f780::urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 385 0.021502000 71.14.108.86 [CENSORED] SSDP 287 HTTP/1.1 200 OK Frame 385: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.622602000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.622602000 seconds [Time delta from previous captured frame: 0.000082000 seconds] [Time delta from previous displayed frame: 0.000082000 seconds] [Time since reference or first frame: 0.021502000 seconds] Frame Number: 385 Frame Length: 287 bytes (2296 bits) Capture Length: 287 bytes (2296 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 71.14.108.86 (71.14.108.86), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 273 Identification: 0xf4c2 (62658) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 247 Protocol: UDP (17) Header checksum: 0x5f2e [correct] [Good: True] [Bad: False] Source: 71.14.108.86 (71.14.108.86) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 253 Checksum: 0x7060 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: upnp:rootdevice\r\n USN: uuid:add0d1aa-1dd1-11b2-a3c3-babf90eb3484::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 386 0.021545000 71.14.108.86 [CENSORED] SSDP 357 HTTP/1.1 200 OK Frame 386: 357 bytes on wire (2856 bits), 357 bytes captured (2856 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.622645000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.622645000 seconds [Time delta from previous captured frame: 0.000043000 seconds] [Time delta from previous displayed frame: 0.000043000 seconds] [Time since reference or first frame: 0.021545000 seconds] Frame Number: 386 Frame Length: 357 bytes (2856 bits) Capture Length: 357 bytes (2856 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 71.14.108.86 (71.14.108.86), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 343 Identification: 0xf4c3 (62659) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 247 Protocol: UDP (17) Header checksum: 0x5ee7 [correct] [Good: True] [Bad: False] Source: 71.14.108.86 (71.14.108.86) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 323 Checksum: 0x0abf [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n USN: uuid:add0d1aa-1dd1-11b2-a3c3-babf90eb3484::urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 387 0.021595000 71.14.108.86 [CENSORED] SSDP 365 HTTP/1.1 200 OK Frame 387: 365 bytes on wire (2920 bits), 365 bytes captured (2920 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.622695000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.622695000 seconds [Time delta from previous captured frame: 0.000050000 seconds] [Time delta from previous displayed frame: 0.000050000 seconds] [Time since reference or first frame: 0.021595000 seconds] Frame Number: 387 Frame Length: 365 bytes (2920 bits) Capture Length: 365 bytes (2920 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 71.14.108.86 (71.14.108.86), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 351 Identification: 0xf4c5 (62661) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 247 Protocol: UDP (17) Header checksum: 0x5edd [correct] [Good: True] [Bad: False] Source: 71.14.108.86 (71.14.108.86) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 331 Checksum: 0xe569 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:\r\n USN: uuid:add480f2-1dd1-11b2-b590-f65055138e88::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:\r\n \r\n No. Time Source Destination Protocol Length Info 388 0.021639000 1.25.155.134 [CENSORED] SSDP 330 HTTP/1.1 200 OK Frame 388: 330 bytes on wire (2640 bits), 330 bytes captured (2640 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.622739000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.622739000 seconds [Time delta from previous captured frame: 0.000044000 seconds] [Time delta from previous displayed frame: 0.000044000 seconds] [Time since reference or first frame: 0.021639000 seconds] Frame Number: 388 Frame Length: 330 bytes (2640 bits) Capture Length: 330 bytes (2640 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 1.25.155.134 (1.25.155.134), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 316 Identification: 0x8963 (35171) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x2218 [correct] [Good: True] [Bad: False] Source: 1.25.155.134 (1.25.155.134) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 296 Checksum: 0x8ae4 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 389 0.021675000 27.214.24.139 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 389: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.622775000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.622775000 seconds [Time delta from previous captured frame: 0.000036000 seconds] [Time delta from previous displayed frame: 0.000036000 seconds] [Time since reference or first frame: 0.021675000 seconds] Frame Number: 389 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 27.214.24.139 (27.214.24.139), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0x205c (8284) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xf343 [correct] [Good: True] [Bad: False] Source: 27.214.24.139 (27.214.24.139) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0xe31f [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANIPConnection:1\r\n \r\n No. Time Source Destination Protocol Length Info 390 0.021711000 112.242.83.1 [CENSORED] SSDP 362 HTTP/1.1 200 OK Frame 390: 362 bytes on wire (2896 bits), 362 bytes captured (2896 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.622811000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.622811000 seconds [Time delta from previous captured frame: 0.000036000 seconds] [Time delta from previous displayed frame: 0.000036000 seconds] [Time since reference or first frame: 0.021711000 seconds] Frame Number: 390 Frame Length: 362 bytes (2896 bits) Capture Length: 362 bytes (2896 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 112.242.83.1 (112.242.83.1), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 348 Identification: 0x56d2 (22226) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x2d35 [correct] [Good: True] [Bad: False] Source: 112.242.83.1 (112.242.83.1) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 328 Checksum: 0x69fc [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 391 0.021743000 123.186.125.128 [CENSORED] SSDP 362 HTTP/1.1 200 OK Frame 391: 362 bytes on wire (2896 bits), 362 bytes captured (2896 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.622843000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.622843000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.021743000 seconds] Frame Number: 391 Frame Length: 362 bytes (2896 bits) Capture Length: 362 bytes (2896 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 123.186.125.128 (123.186.125.128), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 348 Identification: 0x416b (16747) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x0d55 [correct] [Good: True] [Bad: False] Source: 123.186.125.128 (123.186.125.128) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 328 Checksum: 0x34b5 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 392 0.021777000 65.189.2.164 [CENSORED] SSDP 365 HTTP/1.1 200 OK Frame 392: 365 bytes on wire (2920 bits), 365 bytes captured (2920 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.622877000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.622877000 seconds [Time delta from previous captured frame: 0.000034000 seconds] [Time delta from previous displayed frame: 0.000034000 seconds] [Time since reference or first frame: 0.021777000 seconds] Frame Number: 392 Frame Length: 365 bytes (2920 bits) Capture Length: 365 bytes (2920 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 65.189.2.164 (65.189.2.164), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 351 Identification: 0x145d (5213) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0xaa49 [correct] [Good: True] [Bad: False] Source: 65.189.2.164 (65.189.2.164) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 331 Checksum: 0x1d9b [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:\r\n USN: uuid:2a769a1e-1dd2-11b2-8a09-c95a77c44875::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:\r\n \r\n No. Time Source Destination Protocol Length Info 393 0.021809000 123.186.125.128 [CENSORED] SSDP 368 HTTP/1.1 200 OK Frame 393: 368 bytes on wire (2944 bits), 368 bytes captured (2944 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.622909000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.622909000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.021809000 seconds] Frame Number: 393 Frame Length: 368 bytes (2944 bits) Capture Length: 368 bytes (2944 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 123.186.125.128 (123.186.125.128), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 354 Identification: 0x416c (16748) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x0d4e [correct] [Good: True] [Bad: False] Source: 123.186.125.128 (123.186.125.128) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 334 Checksum: 0xef63 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 394 0.021839000 123.186.125.128 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 394: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.622939000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.622939000 seconds [Time delta from previous captured frame: 0.000030000 seconds] [Time delta from previous displayed frame: 0.000030000 seconds] [Time since reference or first frame: 0.021839000 seconds] Frame Number: 394 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 123.186.125.128 (123.186.125.128), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0x416d (16749) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x0d59 [correct] [Good: True] [Bad: False] Source: 123.186.125.128 (123.186.125.128) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0x1e46 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANIPConnection:1\r\n \r\n No. Time Source Destination Protocol Length Info 395 0.021872000 72.129.132.81 [CENSORED] SSDP 365 HTTP/1.1 200 OK Frame 395: 365 bytes on wire (2920 bits), 365 bytes captured (2920 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.622972000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.622972000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.021872000 seconds] Frame Number: 395 Frame Length: 365 bytes (2920 bits) Capture Length: 365 bytes (2920 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 72.129.132.81 (72.129.132.81), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 351 Identification: 0xba6e (47726) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x7bc6 [correct] [Good: True] [Bad: False] Source: 72.129.132.81 (72.129.132.81) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 331 Checksum: 0xa53d [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:\r\n USN: uuid:22222222-2222-2222-2222-222222222222::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:\r\n \r\n No. Time Source Destination Protocol Length Info 396 0.021903000 221.207.207.229 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 396: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.623003000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.623003000 seconds [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.021903000 seconds] Frame Number: 396 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 221.207.207.229 (221.207.207.229), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0x29bb (10683) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x70a0 [correct] [Good: True] [Bad: False] Source: 221.207.207.229 (221.207.207.229) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0x69cb [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANIPConnection:1\r\n \r\n No. Time Source Destination Protocol Length Info 397 0.021932000 65.26.245.65 [CENSORED] SSDP 333 HTTP/1.1 200 OK Frame 397: 333 bytes on wire (2664 bits), 333 bytes captured (2664 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.623032000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.623032000 seconds [Time delta from previous captured frame: 0.000029000 seconds] [Time delta from previous displayed frame: 0.000029000 seconds] [Time since reference or first frame: 0.021932000 seconds] Frame Number: 397 Frame Length: 333 bytes (2664 bits) Capture Length: 333 bytes (2664 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 65.26.245.65 (65.26.245.65), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 319 Identification: 0xc9fd (51709) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x02ce [correct] [Good: True] [Bad: False] Source: 65.26.245.65 (65.26.245.65) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 299 Checksum: 0x47f7 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:WANDevice:\r\n USN: uuid:22222222-2222-2222-2222-222222222222::urn:schemas-upnp-org:device:WANDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 398 0.021970000 65.26.245.65 [CENSORED] SSDP 365 HTTP/1.1 200 OK Frame 398: 365 bytes on wire (2920 bits), 365 bytes captured (2920 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.623070000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.623070000 seconds [Time delta from previous captured frame: 0.000038000 seconds] [Time delta from previous displayed frame: 0.000038000 seconds] [Time since reference or first frame: 0.021970000 seconds] Frame Number: 398 Frame Length: 365 bytes (2920 bits) Capture Length: 365 bytes (2920 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 65.26.245.65 (65.26.245.65), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 351 Identification: 0xc9fe (51710) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x02ad [correct] [Good: True] [Bad: False] Source: 65.26.245.65 (65.26.245.65) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 331 Checksum: 0x3bb4 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:\r\n USN: uuid:22222222-2222-2222-2222-222222222222::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:\r\n \r\n No. Time Source Destination Protocol Length Info 399 0.021991000 175.203.154.184 [CENSORED] SSDP 272 HTTP/1.1 200 OK Frame 399: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.623091000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.623091000 seconds [Time delta from previous captured frame: 0.000021000 seconds] [Time delta from previous displayed frame: 0.000021000 seconds] [Time since reference or first frame: 0.021991000 seconds] Frame Number: 399 Frame Length: 272 bytes (2176 bits) Capture Length: 272 bytes (2176 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 175.203.154.184 (175.203.154.184), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x28 (DSCP 0x0a: Assured Forwarding 11; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 10.. = Differentiated Services Codepoint: Assured Forwarding 11 (0x0a) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 258 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 250 Protocol: UDP (17) Header checksum: 0xb9b8 [correct] [Good: True] [Bad: False] Source: 175.203.154.184 (175.203.154.184) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 238 Checksum: 0x04ea [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: upnp:rootdevice\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::upnp:rootdevice\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:4965/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 400 0.022032000 175.203.154.184 [CENSORED] SSDP 344 HTTP/1.1 200 OK Frame 400: 344 bytes on wire (2752 bits), 344 bytes captured (2752 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.623132000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.623132000 seconds [Time delta from previous captured frame: 0.000041000 seconds] [Time delta from previous displayed frame: 0.000041000 seconds] [Time since reference or first frame: 0.022032000 seconds] Frame Number: 400 Frame Length: 344 bytes (2752 bits) Capture Length: 344 bytes (2752 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 175.203.154.184 (175.203.154.184), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x28 (DSCP 0x0a: Assured Forwarding 11; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 10.. = Differentiated Services Codepoint: Assured Forwarding 11 (0x0a) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 330 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 250 Protocol: UDP (17) Header checksum: 0xb970 [correct] [Good: True] [Bad: False] Source: 175.203.154.184 (175.203.154.184) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 310 Checksum: 0x95eb [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:4965/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 401 0.022055000 24.122.61.210 [CENSORED] SSDP 262 HTTP/1.1 200 OK Frame 401: 262 bytes on wire (2096 bits), 262 bytes captured (2096 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.623155000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.623155000 seconds [Time delta from previous captured frame: 0.000023000 seconds] [Time delta from previous displayed frame: 0.000023000 seconds] [Time since reference or first frame: 0.022055000 seconds] Frame Number: 401 Frame Length: 262 bytes (2096 bits) Capture Length: 262 bytes (2096 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 24.122.61.210 (24.122.61.210), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 248 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0xad22 [correct] [Good: True] [Bad: False] Source: 24.122.61.210 (24.122.61.210) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 228 Checksum: 0xcd30 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65530/rootDesc.xml\r\n Server: UPnP/1.0 MiniUPnPd/1.3\r\n ST: upnp:rootdevice\r\n USN: uuid:61732892-1dd2-11b2-b28d-d720c476bfb1::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 402 0.022094000 175.203.154.184 [CENSORED] SSDP 340 HTTP/1.1 200 OK Frame 402: 340 bytes on wire (2720 bits), 340 bytes captured (2720 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.623194000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.623194000 seconds [Time delta from previous captured frame: 0.000039000 seconds] [Time delta from previous displayed frame: 0.000039000 seconds] [Time since reference or first frame: 0.022094000 seconds] Frame Number: 402 Frame Length: 340 bytes (2720 bits) Capture Length: 340 bytes (2720 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 175.203.154.184 (175.203.154.184), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x28 (DSCP 0x0a: Assured Forwarding 11; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 10.. = Differentiated Services Codepoint: Assured Forwarding 11 (0x0a) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 326 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 250 Protocol: UDP (17) Header checksum: 0xb974 [correct] [Good: True] [Bad: False] Source: 175.203.154.184 (175.203.154.184) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 306 Checksum: 0xbc19 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:4965/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 403 0.022118000 5.107.135.0 [CENSORED] SSDP 280 HTTP/1.1 200 OK Frame 403: 280 bytes on wire (2240 bits), 280 bytes captured (2240 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.623218000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.623218000 seconds [Time delta from previous captured frame: 0.000024000 seconds] [Time delta from previous displayed frame: 0.000024000 seconds] [Time since reference or first frame: 0.022118000 seconds] Frame Number: 403 Frame Length: 280 bytes (2240 bits) Capture Length: 280 bytes (2240 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 5.107.135.0 (5.107.135.0), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 266 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x76f1 [correct] [Good: True] [Bad: False] Source: 5.107.135.0 (5.107.135.0) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 246 Checksum: 0x3edd [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:40901/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: upnp:rootdevice\r\n USN: uuid:f53f926e-1dd1-11b2-a9b4-8f76e609d4f0::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 404 0.022156000 175.203.154.184 [CENSORED] SSDP 320 HTTP/1.1 200 OK Frame 404: 320 bytes on wire (2560 bits), 320 bytes captured (2560 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.623256000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.623256000 seconds [Time delta from previous captured frame: 0.000038000 seconds] [Time delta from previous displayed frame: 0.000038000 seconds] [Time since reference or first frame: 0.022156000 seconds] Frame Number: 404 Frame Length: 320 bytes (2560 bits) Capture Length: 320 bytes (2560 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 175.203.154.184 (175.203.154.184), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x28 (DSCP 0x0a: Assured Forwarding 11; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 10.. = Differentiated Services Codepoint: Assured Forwarding 11 (0x0a) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 306 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 250 Protocol: UDP (17) Header checksum: 0xb988 [correct] [Good: True] [Bad: False] Source: 175.203.154.184 (175.203.154.184) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 286 Checksum: 0xd055 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:WANDevice:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:device:WANDevice:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:4965/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 405 0.024077000 98.213.81.212 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 405: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.625177000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.625177000 seconds [Time delta from previous captured frame: 0.001921000 seconds] [Time delta from previous displayed frame: 0.001921000 seconds] [Time since reference or first frame: 0.024077000 seconds] Frame Number: 405 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 98.213.81.212 (98.213.81.212), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0xb837 (47159) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x9636 [correct] [Good: True] [Bad: False] Source: 98.213.81.212 (98.213.81.212) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0x9b16 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANPPPConnection:\r\n USN: uuid:cc9eb2fa-1dd1-11b2-ac55-9f715db43ef5::urn:schemas-upnp-org:service:WANPPPConnection:\r\n \r\n No. Time Source Destination Protocol Length Info 406 0.024095000 182.247.32.224 [CENSORED] SSDP 284 HTTP/1.1 200 OK Frame 406: 284 bytes on wire (2272 bits), 284 bytes captured (2272 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.625195000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.625195000 seconds [Time delta from previous captured frame: 0.000018000 seconds] [Time delta from previous displayed frame: 0.000018000 seconds] [Time since reference or first frame: 0.024095000 seconds] Frame Number: 406 Frame Length: 284 bytes (2272 bits) Capture Length: 284 bytes (2272 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 182.247.32.224 (182.247.32.224), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 270 Identification: 0xfa09 (64009) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x7767 [correct] [Good: True] [Bad: False] Source: 182.247.32.224 (182.247.32.224) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 250 Checksum: 0xadcd [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: upnp:rootdevice\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 407 0.024138000 98.213.81.212 [CENSORED] SSDP 347 HTTP/1.1 200 OK Frame 407: 347 bytes on wire (2776 bits), 347 bytes captured (2776 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.625238000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.625238000 seconds [Time delta from previous captured frame: 0.000043000 seconds] [Time delta from previous displayed frame: 0.000043000 seconds] [Time since reference or first frame: 0.024138000 seconds] Frame Number: 407 Frame Length: 347 bytes (2776 bits) Capture Length: 347 bytes (2776 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 98.213.81.212 (98.213.81.212), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 333 Identification: 0xb838 (47160) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x9637 [correct] [Good: True] [Bad: False] Source: 98.213.81.212 (98.213.81.212) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 313 Checksum: 0xafb4 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:\r\n USN: uuid:cc9eb2fa-1dd1-11b2-ac55-9f715db43ef5::urn:schemas-upnp-org:service:WANIPConnection:\r\n \r\n No. Time Source Destination Protocol Length Info 408 0.024171000 98.213.81.212 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 408: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.625271000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.625271000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.024171000 seconds] Frame Number: 408 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 98.213.81.212 (98.213.81.212), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0xb839 (47161) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x9634 [correct] [Good: True] [Bad: False] Source: 98.213.81.212 (98.213.81.212) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0x97a5 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:\r\n USN: uuid:cc963dc8-1dd1-11b2-ba00-fb76aaf011c4::urn:schemas-upnp-org:service:Layer3Forwarding:\r\n \r\n No. Time Source Destination Protocol Length Info 409 0.024203000 98.213.81.212 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 409: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.625303000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.625303000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.024203000 seconds] Frame Number: 409 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 98.213.81.212 (98.213.81.212), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0xb83a (47162) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x9633 [correct] [Good: True] [Bad: False] Source: 98.213.81.212 (98.213.81.212) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0x8791 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-wifialliance-org:device:WFADevice:\r\n USN: uuid:cca2e4f6-1dd1-11b2-bec9-c0c18c08e700::urn:schemas-wifialliance-org:device:WFADevice:\r\n \r\n No. Time Source Destination Protocol Length Info 410 0.024232000 123.186.125.128 [CENSORED] SSDP 330 HTTP/1.1 200 OK Frame 410: 330 bytes on wire (2640 bits), 330 bytes captured (2640 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.625332000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.625332000 seconds [Time delta from previous captured frame: 0.000029000 seconds] [Time delta from previous displayed frame: 0.000029000 seconds] [Time since reference or first frame: 0.024232000 seconds] Frame Number: 410 Frame Length: 330 bytes (2640 bits) Capture Length: 330 bytes (2640 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 123.186.125.128 (123.186.125.128), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 316 Identification: 0x4175 (16757) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x0d6b [correct] [Good: True] [Bad: False] Source: 123.186.125.128 (123.186.125.128) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 296 Checksum: 0x2e49 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 411 0.024267000 123.186.125.128 [CENSORED] SSDP 362 HTTP/1.1 200 OK Frame 411: 362 bytes on wire (2896 bits), 362 bytes captured (2896 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.625367000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.625367000 seconds [Time delta from previous captured frame: 0.000035000 seconds] [Time delta from previous displayed frame: 0.000035000 seconds] [Time since reference or first frame: 0.024267000 seconds] Frame Number: 411 Frame Length: 362 bytes (2896 bits) Capture Length: 362 bytes (2896 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 123.186.125.128 (123.186.125.128), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 348 Identification: 0x4176 (16758) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x0d4a [correct] [Good: True] [Bad: False] Source: 123.186.125.128 (123.186.125.128) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 328 Checksum: 0x34b5 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 412 0.024302000 123.186.125.128 [CENSORED] SSDP 368 HTTP/1.1 200 OK Frame 412: 368 bytes on wire (2944 bits), 368 bytes captured (2944 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.625402000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.625402000 seconds [Time delta from previous captured frame: 0.000035000 seconds] [Time delta from previous displayed frame: 0.000035000 seconds] [Time since reference or first frame: 0.024302000 seconds] Frame Number: 412 Frame Length: 368 bytes (2944 bits) Capture Length: 368 bytes (2944 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 123.186.125.128 (123.186.125.128), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 354 Identification: 0x4177 (16759) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x0d43 [correct] [Good: True] [Bad: False] Source: 123.186.125.128 (123.186.125.128) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 334 Checksum: 0xef63 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 413 0.024335000 98.254.110.254 [CENSORED] SSDP 365 HTTP/1.1 200 OK Frame 413: 365 bytes on wire (2920 bits), 365 bytes captured (2920 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.625435000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.625435000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.024335000 seconds] Frame Number: 413 Frame Length: 365 bytes (2920 bits) Capture Length: 365 bytes (2920 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 98.254.110.254 (98.254.110.254), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 351 Identification: 0x2119 (8473) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 253 Protocol: UDP (17) Header checksum: 0x0df2 [correct] [Good: True] [Bad: False] Source: 98.254.110.254 (98.254.110.254) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 331 Checksum: 0x68d7 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:\r\n USN: uuid:2a7d0854-1dd2-11b2-a854-c4d23af427fe::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:\r\n \r\n No. Time Source Destination Protocol Length Info 414 0.024365000 177.192.183.189 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 414: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.625465000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.625465000 seconds [Time delta from previous captured frame: 0.000030000 seconds] [Time delta from previous displayed frame: 0.000030000 seconds] [Time since reference or first frame: 0.024365000 seconds] Frame Number: 414 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 177.192.183.189 (177.192.183.189), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0x0256 (598) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 55 Protocol: UDP (17) Header checksum: 0x5b44 [correct] [Good: True] [Bad: False] Source: 177.192.183.189 (177.192.183.189) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0xf9e4 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-wifialliance-org:device:WFADevice:\r\n USN: uuid:2a850220-1dd2-11b2-a08f-ed9915370433::urn:schemas-wifialliance-org:device:WFADevice:\r\n \r\n No. Time Source Destination Protocol Length Info 415 0.024398000 177.192.183.189 [CENSORED] SSDP 359 HTTP/1.1 200 OK Frame 415: 359 bytes on wire (2872 bits), 359 bytes captured (2872 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.625498000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.625498000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.024398000 seconds] Frame Number: 415 Frame Length: 359 bytes (2872 bits) Capture Length: 359 bytes (2872 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 177.192.183.189 (177.192.183.189), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 345 Identification: 0x0257 (599) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 55 Protocol: UDP (17) Header checksum: 0x5b39 [correct] [Good: True] [Bad: False] Source: 177.192.183.189 (177.192.183.189) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 325 Checksum: 0xd183 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-wifialliance-org:service:WFAWLANConfig:\r\n USN: uuid:2a850220-1dd2-11b2-a08f-ed9915370433::urn:schemas-wifialliance-org:service:WFAWLANConfig:\r\n \r\n No. Time Source Destination Protocol Length Info 416 0.024433000 98.254.110.254 [CENSORED] SSDP 353 HTTP/1.1 200 OK Frame 416: 353 bytes on wire (2824 bits), 353 bytes captured (2824 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.625533000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.625533000 seconds [Time delta from previous captured frame: 0.000035000 seconds] [Time delta from previous displayed frame: 0.000035000 seconds] [Time since reference or first frame: 0.024433000 seconds] Frame Number: 416 Frame Length: 353 bytes (2824 bits) Capture Length: 353 bytes (2824 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 98.254.110.254 (98.254.110.254), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 339 Identification: 0x211a (8474) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 253 Protocol: UDP (17) Header checksum: 0x0dfd [correct] [Good: True] [Bad: False] Source: 98.254.110.254 (98.254.110.254) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 319 Checksum: 0x7ec2 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:\r\n USN: uuid:2a81356e-1dd2-11b2-a81e-e7a7b81b374a::urn:schemas-upnp-org:device:WANConnectionDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 417 0.024463000 98.254.110.254 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 417: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.625563000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.625563000 seconds [Time delta from previous captured frame: 0.000030000 seconds] [Time delta from previous displayed frame: 0.000030000 seconds] [Time since reference or first frame: 0.024463000 seconds] Frame Number: 417 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 98.254.110.254 (98.254.110.254), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0x211b (8475) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 253 Protocol: UDP (17) Header checksum: 0x0e00 [correct] [Good: True] [Bad: False] Source: 98.254.110.254 (98.254.110.254) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0xda2e [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANPPPConnection:\r\n USN: uuid:2a81356e-1dd2-11b2-a81e-e7a7b81b374a::urn:schemas-upnp-org:service:WANPPPConnection:\r\n \r\n No. Time Source Destination Protocol Length Info 418 0.024494000 183.141.157.46 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 418: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.625594000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.625594000 seconds [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.024494000 seconds] Frame Number: 418 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 183.141.157.46 (183.141.157.46), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0x41fa (16890) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xb14a [correct] [Good: True] [Bad: False] Source: 183.141.157.46 (183.141.157.46) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0xc2c4 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANIPConnection:1\r\n \r\n No. Time Source Destination Protocol Length Info 419 0.024543000 67.188.223.92 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 419: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.625643000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.625643000 seconds [Time delta from previous captured frame: 0.000049000 seconds] [Time delta from previous displayed frame: 0.000049000 seconds] [Time since reference or first frame: 0.024543000 seconds] Frame Number: 419 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 67.188.223.92 (67.188.223.92), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0x3bfa (15354) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0xaa04 [correct] [Good: True] [Bad: False] Source: 67.188.223.92 (67.188.223.92) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0x680a [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:\r\n USN: uuid:11111111-1111-1111-1111-111111111111::urn:schemas-upnp-org:service:Layer3Forwarding:\r\n \r\n No. Time Source Destination Protocol Length Info 420 0.024576000 67.188.223.92 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 420: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.625676000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.625676000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.024576000 seconds] Frame Number: 420 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 67.188.223.92 (67.188.223.92), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0x3bfb (15355) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0xaa03 [correct] [Good: True] [Bad: False] Source: 67.188.223.92 (67.188.223.92) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0xfad8 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-wifialliance-org:device:WFADevice:\r\n USN: uuid:565aa949-67c1-4c0e-aa8f-f349e6f59311::urn:schemas-wifialliance-org:device:WFADevice:\r\n \r\n No. Time Source Destination Protocol Length Info 421 0.024608000 5.107.135.0 [CENSORED] SSDP 344 HTTP/1.1 200 OK Frame 421: 344 bytes on wire (2752 bits), 344 bytes captured (2752 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.625708000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.625708000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.024608000 seconds] Frame Number: 421 Frame Length: 344 bytes (2752 bits) Capture Length: 344 bytes (2752 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 5.107.135.0 (5.107.135.0), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 330 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x76b1 [correct] [Good: True] [Bad: False] Source: 5.107.135.0 (5.107.135.0) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 310 Checksum: 0xe8e6 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:40901/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-wifialliance-org:device:WFADevice:1\r\n USN: uuid:f54c9716-1dd1-11b2-bb66-eaf7321cd96b::urn:schemas-wifialliance-org:device:WFADevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 422 0.024640000 5.107.135.0 [CENSORED] SSDP 354 HTTP/1.1 200 OK Frame 422: 354 bytes on wire (2832 bits), 354 bytes captured (2832 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.625740000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.625740000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.024640000 seconds] Frame Number: 422 Frame Length: 354 bytes (2832 bits) Capture Length: 354 bytes (2832 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 5.107.135.0 (5.107.135.0), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 340 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x76a7 [correct] [Good: True] [Bad: False] Source: 5.107.135.0 (5.107.135.0) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 320 Checksum: 0x192d [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:40901/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-wifialliance-org:service:WFAWLANConfig:1\r\n USN: uuid:f54c9716-1dd1-11b2-bb66-eaf7321cd96b::urn:schemas-wifialliance-org:service:WFAWLANConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 423 0.024674000 183.194.33.232 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 423: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.625774000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.625774000 seconds [Time delta from previous captured frame: 0.000034000 seconds] [Time delta from previous displayed frame: 0.000034000 seconds] [Time since reference or first frame: 0.024674000 seconds] Frame Number: 423 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 183.194.33.232 (183.194.33.232), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0x5811 (22545) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x1755 [correct] [Good: True] [Bad: False] Source: 183.194.33.232 (183.194.33.232) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0x3dd6 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANIPConnection:1\r\n \r\n No. Time Source Destination Protocol Length Info 424 0.024700000 5.107.135.0 [CENSORED] SSDP 289 HTTP/1.1 200 OK Frame 424: 289 bytes on wire (2312 bits), 289 bytes captured (2312 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.625800000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.625800000 seconds [Time delta from previous captured frame: 0.000026000 seconds] [Time delta from previous displayed frame: 0.000026000 seconds] [Time since reference or first frame: 0.024700000 seconds] Frame Number: 424 Frame Length: 289 bytes (2312 bits) Capture Length: 289 bytes (2312 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 5.107.135.0 (5.107.135.0), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 275 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x76e8 [correct] [Good: True] [Bad: False] Source: 5.107.135.0 (5.107.135.0) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 255 Checksum: 0xe292 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:40901/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: uuid:f53f926e-1dd1-11b2-a9b4-8f76e609d4f0\r\n USN: uuid:f53f926e-1dd1-11b2-a9b4-8f76e609d4f0\r\n \r\n No. Time Source Destination Protocol Length Info 425 0.024727000 5.107.135.0 [CENSORED] SSDP 289 HTTP/1.1 200 OK Frame 425: 289 bytes on wire (2312 bits), 289 bytes captured (2312 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.625827000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.625827000 seconds [Time delta from previous captured frame: 0.000027000 seconds] [Time delta from previous displayed frame: 0.000027000 seconds] [Time since reference or first frame: 0.024727000 seconds] Frame Number: 425 Frame Length: 289 bytes (2312 bits) Capture Length: 289 bytes (2312 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 5.107.135.0 (5.107.135.0), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 275 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x76e8 [correct] [Good: True] [Bad: False] Source: 5.107.135.0 (5.107.135.0) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 255 Checksum: 0x9539 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:40901/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: uuid:f5463826-1dd1-11b2-9530-c4235aa80d1b\r\n USN: uuid:f5463826-1dd1-11b2-9530-c4235aa80d1b\r\n \r\n No. Time Source Destination Protocol Length Info 426 0.024763000 183.194.33.232 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 426: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.625863000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.625863000 seconds [Time delta from previous captured frame: 0.000036000 seconds] [Time delta from previous displayed frame: 0.000036000 seconds] [Time since reference or first frame: 0.024763000 seconds] Frame Number: 426 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 183.194.33.232 (183.194.33.232), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0x5812 (22546) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x1782 [correct] [Good: True] [Bad: False] Source: 183.194.33.232 (183.194.33.232) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0xf01e [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 427 0.024817000 182.216.229.201 [CENSORED] SSDP 352 HTTP/1.1 200 OK Frame 427: 352 bytes on wire (2816 bits), 352 bytes captured (2816 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.625917000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.625917000 seconds [Time delta from previous captured frame: 0.000054000 seconds] [Time delta from previous displayed frame: 0.000054000 seconds] [Time since reference or first frame: 0.024817000 seconds] Frame Number: 427 Frame Length: 352 bytes (2816 bits) Capture Length: 352 bytes (2816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 182.216.229.201 (182.216.229.201), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 338 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x6c72 [correct] [Good: True] [Bad: False] Source: 182.216.229.201 (182.216.229.201) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 318 Checksum: 0xfc70 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:4409/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 428 0.024848000 182.216.229.201 [CENSORED] SSDP 334 HTTP/1.1 200 OK Frame 428: 334 bytes on wire (2672 bits), 334 bytes captured (2672 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.625948000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.625948000 seconds [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.024848000 seconds] Frame Number: 428 Frame Length: 334 bytes (2672 bits) Capture Length: 334 bytes (2672 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 182.216.229.201 (182.216.229.201), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 320 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x6c84 [correct] [Good: True] [Bad: False] Source: 182.216.229.201 (182.216.229.201) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 300 Checksum: 0x26c0 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:service:WANIPConnection:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:4409/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 429 0.024882000 182.216.229.201 [CENSORED] SSDP 336 HTTP/1.1 200 OK Frame 429: 336 bytes on wire (2688 bits), 336 bytes captured (2688 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.625982000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.625982000 seconds [Time delta from previous captured frame: 0.000034000 seconds] [Time delta from previous displayed frame: 0.000034000 seconds] [Time since reference or first frame: 0.024882000 seconds] Frame Number: 429 Frame Length: 336 bytes (2688 bits) Capture Length: 336 bytes (2688 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 182.216.229.201 (182.216.229.201), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 322 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x6c82 [correct] [Good: True] [Bad: False] Source: 182.216.229.201 (182.216.229.201) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 302 Checksum: 0x4fe4 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANPPPConnection:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:service:WANPPPConnection:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:4409/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 430 0.024907000 67.8.85.141 [CENSORED] SSDP 289 HTTP/1.1 200 OK Frame 430: 289 bytes on wire (2312 bits), 289 bytes captured (2312 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.626007000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.626007000 seconds [Time delta from previous captured frame: 0.000025000 seconds] [Time delta from previous displayed frame: 0.000025000 seconds] [Time since reference or first frame: 0.024907000 seconds] Frame Number: 430 Frame Length: 289 bytes (2312 bits) Capture Length: 289 bytes (2312 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 67.8.85.141 (67.8.85.141), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 275 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 247 Protocol: UDP (17) Header checksum: 0x6ebe [correct] [Good: True] [Bad: False] Source: 67.8.85.141 (67.8.85.141) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 255 Checksum: 0x9c8b [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: uuid:6122d438-1dd2-11b2-9730-ebbeb31c4296\r\n USN: uuid:6122d438-1dd2-11b2-9730-ebbeb31c4296\r\n \r\n No. Time Source Destination Protocol Length Info 431 0.024941000 67.8.85.141 [CENSORED] SSDP 289 HTTP/1.1 200 OK Frame 431: 289 bytes on wire (2312 bits), 289 bytes captured (2312 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.626041000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.626041000 seconds [Time delta from previous captured frame: 0.000034000 seconds] [Time delta from previous displayed frame: 0.000034000 seconds] [Time since reference or first frame: 0.024941000 seconds] Frame Number: 431 Frame Length: 289 bytes (2312 bits) Capture Length: 289 bytes (2312 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 67.8.85.141 (67.8.85.141), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 275 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 247 Protocol: UDP (17) Header checksum: 0x6ebe [correct] [Good: True] [Bad: False] Source: 67.8.85.141 (67.8.85.141) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 255 Checksum: 0x51b1 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: uuid:613181ae-1dd2-11b2-bc04-8be5a8e981fb\r\n USN: uuid:613181ae-1dd2-11b2-bc04-8be5a8e981fb\r\n \r\n No. Time Source Destination Protocol Length Info 432 0.024987000 175.171.139.53 [CENSORED] SSDP 364 HTTP/1.1 200 OK Frame 432: 364 bytes on wire (2912 bits), 364 bytes captured (2912 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.626087000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.626087000 seconds [Time delta from previous captured frame: 0.000046000 seconds] [Time delta from previous displayed frame: 0.000046000 seconds] [Time since reference or first frame: 0.024987000 seconds] Frame Number: 432 Frame Length: 364 bytes (2912 bits) Capture Length: 364 bytes (2912 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 175.171.139.53 (175.171.139.53), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 350 Identification: 0x619d (24989) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xab8a [correct] [Good: True] [Bad: False] Source: 175.171.139.53 (175.171.139.53) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 330 Checksum: 0x6afc [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 433 0.025015000 75.84.26.218 [CENSORED] SSDP 333 HTTP/1.1 200 OK Frame 433: 333 bytes on wire (2664 bits), 333 bytes captured (2664 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.626115000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.626115000 seconds [Time delta from previous captured frame: 0.000028000 seconds] [Time delta from previous displayed frame: 0.000028000 seconds] [Time since reference or first frame: 0.025015000 seconds] Frame Number: 433 Frame Length: 333 bytes (2664 bits) Capture Length: 333 bytes (2664 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 75.84.26.218 (75.84.26.218), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 319 Identification: 0x0f5d (3933) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 248 Protocol: UDP (17) Header checksum: 0x909c [correct] [Good: True] [Bad: False] Source: 75.84.26.218 (75.84.26.218) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 299 Checksum: 0x1825 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:WANDevice:\r\n USN: uuid:22222222-2222-2222-2222-222222222222::urn:schemas-upnp-org:device:WANDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 434 0.025074000 139.212.26.197 [CENSORED] SSDP 332 HTTP/1.1 200 OK Frame 434: 332 bytes on wire (2656 bits), 332 bytes captured (2656 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.626174000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.626174000 seconds [Time delta from previous captured frame: 0.000059000 seconds] [Time delta from previous displayed frame: 0.000059000 seconds] [Time since reference or first frame: 0.025074000 seconds] Frame Number: 434 Frame Length: 332 bytes (2656 bits) Capture Length: 332 bytes (2656 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 139.212.26.197 (139.212.26.197), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 318 Identification: 0xd6c5 (54981) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xcac9 [correct] [Good: True] [Bad: False] Source: 139.212.26.197 (139.212.26.197) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 298 Checksum: 0x870b [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000::urn:schemas-upnp-org:device:WANDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 435 0.025131000 5.107.135.0 [CENSORED] SSDP 332 HTTP/1.1 200 OK Frame 435: 332 bytes on wire (2656 bits), 332 bytes captured (2656 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.626231000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.626231000 seconds [Time delta from previous captured frame: 0.000057000 seconds] [Time delta from previous displayed frame: 0.000057000 seconds] [Time since reference or first frame: 0.025131000 seconds] Frame Number: 435 Frame Length: 332 bytes (2656 bits) Capture Length: 332 bytes (2656 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 5.107.135.0 (5.107.135.0), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 318 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x76bd [correct] [Good: True] [Bad: False] Source: 5.107.135.0 (5.107.135.0) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 298 Checksum: 0xd9ef [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:40901/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: uuid:f54c9716-1dd1-11b2-bb66-eaf7321cd96b\r\n USN: uuid:f54c9716-1dd1-11b2-bb66-eaf7321cd96b::uuid:f54c9716-1dd1-11b2-bb66-eaf7321cd96b\r\n \r\n No. Time Source Destination Protocol Length Info 436 0.025168000 183.194.33.232 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 436: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.626268000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.626268000 seconds [Time delta from previous captured frame: 0.000037000 seconds] [Time delta from previous displayed frame: 0.000037000 seconds] [Time since reference or first frame: 0.025168000 seconds] Frame Number: 436 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 183.194.33.232 (183.194.33.232), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0x581c (22556) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x174a [correct] [Good: True] [Bad: False] Source: 183.194.33.232 (183.194.33.232) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0x3dd6 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANIPConnection:1\r\n \r\n No. Time Source Destination Protocol Length Info 437 0.025198000 119.206.13.119 [CENSORED] SSDP 344 HTTP/1.1 200 OK Frame 437: 344 bytes on wire (2752 bits), 344 bytes captured (2752 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.626298000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.626298000 seconds [Time delta from previous captured frame: 0.000030000 seconds] [Time delta from previous displayed frame: 0.000030000 seconds] [Time since reference or first frame: 0.025198000 seconds] Frame Number: 437 Frame Length: 344 bytes (2752 bits) Capture Length: 344 bytes (2752 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 119.206.13.119 (119.206.13.119), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x28 (DSCP 0x0a: Assured Forwarding 11; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 10.. = Differentiated Services Codepoint: Assured Forwarding 11 (0x0a) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 330 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 250 Protocol: UDP (17) Header checksum: 0x7eaf [correct] [Good: True] [Bad: False] Source: 119.206.13.119 (119.206.13.119) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 310 Checksum: 0x5a34 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:3183/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 438 0.025231000 175.203.154.184 [CENSORED] SSDP 352 HTTP/1.1 200 OK Frame 438: 352 bytes on wire (2816 bits), 352 bytes captured (2816 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.626331000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.626331000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.025231000 seconds] Frame Number: 438 Frame Length: 352 bytes (2816 bits) Capture Length: 352 bytes (2816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 175.203.154.184 (175.203.154.184), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x28 (DSCP 0x0a: Assured Forwarding 11; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 10.. = Differentiated Services Codepoint: Assured Forwarding 11 (0x0a) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 338 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 250 Protocol: UDP (17) Header checksum: 0xb968 [correct] [Good: True] [Bad: False] Source: 175.203.154.184 (175.203.154.184) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 318 Checksum: 0x488e [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:4965/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 439 0.025262000 175.203.154.184 [CENSORED] SSDP 334 HTTP/1.1 200 OK Frame 439: 334 bytes on wire (2672 bits), 334 bytes captured (2672 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.626362000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.626362000 seconds [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.025262000 seconds] Frame Number: 439 Frame Length: 334 bytes (2672 bits) Capture Length: 334 bytes (2672 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 175.203.154.184 (175.203.154.184), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x28 (DSCP 0x0a: Assured Forwarding 11; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 10.. = Differentiated Services Codepoint: Assured Forwarding 11 (0x0a) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 320 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 250 Protocol: UDP (17) Header checksum: 0xb97a [correct] [Good: True] [Bad: False] Source: 175.203.154.184 (175.203.154.184) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 300 Checksum: 0x72dd [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:service:WANIPConnection:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:4965/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 440 0.025294000 175.203.154.184 [CENSORED] SSDP 336 HTTP/1.1 200 OK Frame 440: 336 bytes on wire (2688 bits), 336 bytes captured (2688 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.626394000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.626394000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.025294000 seconds] Frame Number: 440 Frame Length: 336 bytes (2688 bits) Capture Length: 336 bytes (2688 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 175.203.154.184 (175.203.154.184), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x28 (DSCP 0x0a: Assured Forwarding 11; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 10.. = Differentiated Services Codepoint: Assured Forwarding 11 (0x0a) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 322 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 250 Protocol: UDP (17) Header checksum: 0xb978 [correct] [Good: True] [Bad: False] Source: 175.203.154.184 (175.203.154.184) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 302 Checksum: 0x9c01 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANPPPConnection:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:service:WANPPPConnection:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:4965/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 441 0.025317000 178.117.227.89 [CENSORED] SSDP 272 HTTP/1.1 200 OK Frame 441: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.626417000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.626417000 seconds [Time delta from previous captured frame: 0.000023000 seconds] [Time delta from previous displayed frame: 0.000023000 seconds] [Time since reference or first frame: 0.025317000 seconds] Frame Number: 441 Frame Length: 272 bytes (2176 bits) Capture Length: 272 bytes (2176 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 178.117.227.89 (178.117.227.89), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 258 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 250 Protocol: UDP (17) Header checksum: 0x6e95 [correct] [Good: True] [Bad: False] Source: 178.117.227.89 (178.117.227.89) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 238 Checksum: 0x307f [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=1800\r\n ST: upnp:rootdevice\r\n USN: uuid:12345678-0000-0000-0000-00000000abcd::upnp:rootdevice\r\n EXT:\r\n Server: WNDR4300 UPnP/1.0 miniupnpd/1.0\r\n Location: http://192.168.0.51:5555/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 442 0.025350000 178.117.227.89 [CENSORED] SSDP 281 HTTP/1.1 200 OK Frame 442: 281 bytes on wire (2248 bits), 281 bytes captured (2248 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.626450000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.626450000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.025350000 seconds] Frame Number: 442 Frame Length: 281 bytes (2248 bits) Capture Length: 281 bytes (2248 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 178.117.227.89 (178.117.227.89), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 267 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 250 Protocol: UDP (17) Header checksum: 0x6e8c [correct] [Good: True] [Bad: False] Source: 178.117.227.89 (178.117.227.89) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 247 Checksum: 0x885b [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=1800\r\n ST: uuid:12345678-0000-0000-0000-00000000abcd\r\n USN: uuid:12345678-0000-0000-0000-00000000abcd\r\n EXT:\r\n Server: WNDR4300 UPnP/1.0 miniupnpd/1.0\r\n Location: http://192.168.0.51:5555/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 443 0.025393000 178.117.227.89 [CENSORED] SSDP 344 HTTP/1.1 200 OK Frame 443: 344 bytes on wire (2752 bits), 344 bytes captured (2752 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.626493000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.626493000 seconds [Time delta from previous captured frame: 0.000043000 seconds] [Time delta from previous displayed frame: 0.000043000 seconds] [Time since reference or first frame: 0.025393000 seconds] Frame Number: 443 Frame Length: 344 bytes (2752 bits) Capture Length: 344 bytes (2752 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 178.117.227.89 (178.117.227.89), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 330 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 250 Protocol: UDP (17) Header checksum: 0x6e4d [correct] [Good: True] [Bad: False] Source: 178.117.227.89 (178.117.227.89) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 310 Checksum: 0xc180 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=1800\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n USN: uuid:12345678-0000-0000-0000-00000000abcd::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n EXT:\r\n Server: WNDR4300 UPnP/1.0 miniupnpd/1.0\r\n Location: http://192.168.0.51:5555/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 444 0.025423000 178.117.227.89 [CENSORED] SSDP 336 HTTP/1.1 200 OK Frame 444: 336 bytes on wire (2688 bits), 336 bytes captured (2688 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.626523000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.626523000 seconds [Time delta from previous captured frame: 0.000030000 seconds] [Time delta from previous displayed frame: 0.000030000 seconds] [Time since reference or first frame: 0.025423000 seconds] Frame Number: 444 Frame Length: 336 bytes (2688 bits) Capture Length: 336 bytes (2688 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 178.117.227.89 (178.117.227.89), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 322 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 250 Protocol: UDP (17) Header checksum: 0x6e55 [correct] [Good: True] [Bad: False] Source: 178.117.227.89 (178.117.227.89) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 302 Checksum: 0x6a39 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=1800\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n USN: uuid:12345678-0000-0000-0000-00000000abcd::urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n EXT:\r\n Server: WNDR4300 UPnP/1.0 miniupnpd/1.0\r\n Location: http://192.168.0.51:5555/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 445 0.025447000 178.117.227.89 [CENSORED] SSDP 281 HTTP/1.1 200 OK Frame 445: 281 bytes on wire (2248 bits), 281 bytes captured (2248 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.626547000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.626547000 seconds [Time delta from previous captured frame: 0.000024000 seconds] [Time delta from previous displayed frame: 0.000024000 seconds] [Time since reference or first frame: 0.025447000 seconds] Frame Number: 445 Frame Length: 281 bytes (2248 bits) Capture Length: 281 bytes (2248 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 178.117.227.89 (178.117.227.89), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 267 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 250 Protocol: UDP (17) Header checksum: 0x6e8c [correct] [Good: True] [Bad: False] Source: 178.117.227.89 (178.117.227.89) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 247 Checksum: 0x865b [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=1800\r\n ST: uuid:12345678-0000-0000-0000-00000000abce\r\n USN: uuid:12345678-0000-0000-0000-00000000abce\r\n EXT:\r\n Server: WNDR4300 UPnP/1.0 miniupnpd/1.0\r\n Location: http://192.168.0.51:5555/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 446 0.025481000 172.250.81.187 [CENSORED] SSDP 277 HTTP/1.1 200 OK Frame 446: 277 bytes on wire (2216 bits), 277 bytes captured (2216 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.626581000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.626581000 seconds [Time delta from previous captured frame: 0.000034000 seconds] [Time delta from previous displayed frame: 0.000034000 seconds] [Time since reference or first frame: 0.025481000 seconds] Frame Number: 446 Frame Length: 277 bytes (2216 bits) Capture Length: 277 bytes (2216 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 172.250.81.187 (172.250.81.187), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 263 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 248 Protocol: UDP (17) Header checksum: 0x07aa [correct] [Good: True] [Bad: False] Source: 172.250.81.187 (172.250.81.187) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 243 Checksum: 0xc68e [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://10.0.0.1:65535/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: upnp:rootdevice\r\n USN: uuid:7d7afc06-1dd2-11b2-bd74-d45da9bf24fd::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 447 0.025519000 101.27.187.0 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 447: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.626619000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.626619000 seconds [Time delta from previous captured frame: 0.000038000 seconds] [Time delta from previous displayed frame: 0.000038000 seconds] [Time since reference or first frame: 0.025519000 seconds] Frame Number: 447 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 101.27.187.0 (101.27.187.0), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x01 (DSCP 0x00: Default; ECN: 0x01: ECT(1) (ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..01 = Explicit Congestion Notification: ECT(1) (ECN-Capable Transport) (0x01) Total Length: 296 Identification: 0xd9f4 (55796) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x4e2d [correct] [Good: True] [Bad: False] Source: 101.27.187.0 (101.27.187.0) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0xd166 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 448 0.025555000 101.27.187.0 [CENSORED] SSDP 332 HTTP/1.1 200 OK Frame 448: 332 bytes on wire (2656 bits), 332 bytes captured (2656 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.626655000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.626655000 seconds [Time delta from previous captured frame: 0.000036000 seconds] [Time delta from previous displayed frame: 0.000036000 seconds] [Time since reference or first frame: 0.025555000 seconds] Frame Number: 448 Frame Length: 332 bytes (2656 bits) Capture Length: 332 bytes (2656 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 101.27.187.0 (101.27.187.0), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x01 (DSCP 0x00: Default; ECN: 0x01: ECT(1) (ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..01 = Explicit Congestion Notification: ECT(1) (ECN-Capable Transport) (0x01) Total Length: 318 Identification: 0xd9f5 (55797) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x4e16 [correct] [Good: True] [Bad: False] Source: 101.27.187.0 (101.27.187.0) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 298 Checksum: 0x0d89 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000::urn:schemas-upnp-org:device:WANDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 449 0.025587000 101.27.187.0 [CENSORED] SSDP 330 HTTP/1.1 200 OK Frame 449: 330 bytes on wire (2640 bits), 330 bytes captured (2640 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.626687000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.626687000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.025587000 seconds] Frame Number: 449 Frame Length: 330 bytes (2640 bits) Capture Length: 330 bytes (2640 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 101.27.187.0 (101.27.187.0), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x01 (DSCP 0x00: Default; ECN: 0x01: ECT(1) (ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..01 = Explicit Congestion Notification: ECT(1) (ECN-Capable Transport) (0x01) Total Length: 316 Identification: 0xd9f7 (55799) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x4e16 [correct] [Good: True] [Bad: False] Source: 101.27.187.0 (101.27.187.0) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 296 Checksum: 0x0768 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 450 0.025625000 101.27.187.0 [CENSORED] SSDP 362 HTTP/1.1 200 OK Frame 450: 362 bytes on wire (2896 bits), 362 bytes captured (2896 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.626725000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.626725000 seconds [Time delta from previous captured frame: 0.000038000 seconds] [Time delta from previous displayed frame: 0.000038000 seconds] [Time since reference or first frame: 0.025625000 seconds] Frame Number: 450 Frame Length: 362 bytes (2896 bits) Capture Length: 362 bytes (2896 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 101.27.187.0 (101.27.187.0), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x01 (DSCP 0x00: Default; ECN: 0x01: ECT(1) (ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..01 = Explicit Congestion Notification: ECT(1) (ECN-Capable Transport) (0x01) Total Length: 348 Identification: 0xd9f8 (55800) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x4df5 [correct] [Good: True] [Bad: False] Source: 101.27.187.0 (101.27.187.0) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 328 Checksum: 0x0dd4 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 451 0.025657000 69.248.248.60 [CENSORED] SSDP 359 HTTP/1.1 200 OK Frame 451: 359 bytes on wire (2872 bits), 359 bytes captured (2872 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.626757000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.626757000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.025657000 seconds] Frame Number: 451 Frame Length: 359 bytes (2872 bits) Capture Length: 359 bytes (2872 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 69.248.248.60 (69.248.248.60), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 345 Identification: 0x59c6 (22982) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (17) Header checksum: 0x6d12 [correct] [Good: True] [Bad: False] Source: 69.248.248.60 (69.248.248.60) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 325 Checksum: 0x6baa [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-wifialliance-org:service:WFAWLANConfig:\r\n USN: uuid:ccb2105c-1dd1-11b2-a40e-e6f7610d3612::urn:schemas-wifialliance-org:service:WFAWLANConfig:\r\n \r\n No. Time Source Destination Protocol Length Info 452 0.025692000 101.27.187.0 [CENSORED] SSDP 368 HTTP/1.1 200 OK Frame 452: 368 bytes on wire (2944 bits), 368 bytes captured (2944 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.626792000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.626792000 seconds [Time delta from previous captured frame: 0.000035000 seconds] [Time delta from previous displayed frame: 0.000035000 seconds] [Time since reference or first frame: 0.025692000 seconds] Frame Number: 452 Frame Length: 368 bytes (2944 bits) Capture Length: 368 bytes (2944 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 101.27.187.0 (101.27.187.0), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x01 (DSCP 0x00: Default; ECN: 0x01: ECT(1) (ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..01 = Explicit Congestion Notification: ECT(1) (ECN-Capable Transport) (0x01) Total Length: 354 Identification: 0xd9f9 (55801) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x4dee [correct] [Good: True] [Bad: False] Source: 101.27.187.0 (101.27.187.0) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 334 Checksum: 0xc882 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 453 0.025718000 36.249.196.5 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 453: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.626818000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.626818000 seconds [Time delta from previous captured frame: 0.000026000 seconds] [Time delta from previous displayed frame: 0.000026000 seconds] [Time since reference or first frame: 0.025718000 seconds] Frame Number: 453 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 36.249.196.5 (36.249.196.5), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0xe655 (58965) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x78ea [correct] [Good: True] [Bad: False] Source: 36.249.196.5 (36.249.196.5) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0x0884 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 454 0.027915000 183.163.38.224 [CENSORED] SSDP 348 HTTP/1.1 200 OK Frame 454: 348 bytes on wire (2784 bits), 348 bytes captured (2784 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.629015000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.629015000 seconds [Time delta from previous captured frame: 0.002197000 seconds] [Time delta from previous displayed frame: 0.002197000 seconds] [Time since reference or first frame: 0.027915000 seconds] Frame Number: 454 Frame Length: 348 bytes (2784 bits) Capture Length: 348 bytes (2784 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 183.163.38.224 (183.163.38.224), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 334 Identification: 0xaf24 (44836) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0xbb70 [correct] [Good: True] [Bad: False] Source: 183.163.38.224 (183.163.38.224) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 314 Checksum: 0xe0db [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n \r\n No. Time Source Destination Protocol Length Info 455 0.027941000 122.138.117.208 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 455: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.629041000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.629041000 seconds [Time delta from previous captured frame: 0.000026000 seconds] [Time delta from previous displayed frame: 0.000026000 seconds] [Time since reference or first frame: 0.027941000 seconds] Frame Number: 455 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 122.138.117.208 (122.138.117.208), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0x4ef5 (20213) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x08ef [correct] [Good: True] [Bad: False] Source: 122.138.117.208 (122.138.117.208) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0xd96e [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 456 0.027972000 106.44.209.217 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 456: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.629072000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.629072000 seconds [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.027972000 seconds] Frame Number: 456 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 106.44.209.217 (106.44.209.217), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0x56db (22235) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xb55d [correct] [Good: True] [Bad: False] Source: 106.44.209.217 (106.44.209.217) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0xb57c [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 457 0.028002000 104.34.137.70 [CENSORED] SSDP 287 HTTP/1.1 200 OK Frame 457: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.629102000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.629102000 seconds [Time delta from previous captured frame: 0.000030000 seconds] [Time delta from previous displayed frame: 0.000030000 seconds] [Time since reference or first frame: 0.028002000 seconds] Frame Number: 457 Frame Length: 287 bytes (2296 bits) Capture Length: 287 bytes (2296 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 104.34.137.70 (104.34.137.70), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 273 Identification: 0x5d97 (23959) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 248 Protocol: UDP (17) Header checksum: 0xb755 [correct] [Good: True] [Bad: False] Source: 104.34.137.70 (104.34.137.70) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 253 Checksum: 0x60fa [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: upnp:rootdevice\r\n USN: uuid:2a7887e8-1dd2-11b2-82fc-efb513c8d041::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 458 0.028045000 104.34.137.70 [CENSORED] SSDP 357 HTTP/1.1 200 OK Frame 458: 357 bytes on wire (2856 bits), 357 bytes captured (2856 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.629145000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.629145000 seconds [Time delta from previous captured frame: 0.000043000 seconds] [Time delta from previous displayed frame: 0.000043000 seconds] [Time since reference or first frame: 0.028045000 seconds] Frame Number: 458 Frame Length: 357 bytes (2856 bits) Capture Length: 357 bytes (2856 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 104.34.137.70 (104.34.137.70), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 343 Identification: 0x5d98 (23960) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 248 Protocol: UDP (17) Header checksum: 0xb70e [correct] [Good: True] [Bad: False] Source: 104.34.137.70 (104.34.137.70) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 323 Checksum: 0x6ae9 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n USN: uuid:2a7887e8-1dd2-11b2-82fc-efb513c8d041::urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 459 0.028074000 104.34.137.70 [CENSORED] SSDP 333 HTTP/1.1 200 OK Frame 459: 333 bytes on wire (2664 bits), 333 bytes captured (2664 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.629174000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.629174000 seconds [Time delta from previous captured frame: 0.000029000 seconds] [Time delta from previous displayed frame: 0.000029000 seconds] [Time since reference or first frame: 0.028074000 seconds] Frame Number: 459 Frame Length: 333 bytes (2664 bits) Capture Length: 333 bytes (2664 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 104.34.137.70 (104.34.137.70), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 319 Identification: 0x5d99 (23961) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 248 Protocol: UDP (17) Header checksum: 0xb725 [correct] [Good: True] [Bad: False] Source: 104.34.137.70 (104.34.137.70) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 299 Checksum: 0xfc88 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:WANDevice:\r\n USN: uuid:2a7cbb42-1dd2-11b2-af7a-bb8d440aa725::urn:schemas-upnp-org:device:WANDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 460 0.028109000 113.238.251.118 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 460: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.629209000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.629209000 seconds [Time delta from previous captured frame: 0.000035000 seconds] [Time delta from previous displayed frame: 0.000035000 seconds] [Time since reference or first frame: 0.028109000 seconds] Frame Number: 460 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 113.238.251.118 (113.238.251.118), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0x30b7 (12471) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xa9f4 [correct] [Good: True] [Bad: False] Source: 113.238.251.118 (113.238.251.118) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0xaa1b [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANIPConnection:1\r\n \r\n No. Time Source Destination Protocol Length Info 461 0.028133000 72.178.201.62 [CENSORED] SSDP 272 HTTP/1.1 200 OK Frame 461: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.629233000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.629233000 seconds [Time delta from previous captured frame: 0.000024000 seconds] [Time delta from previous displayed frame: 0.000024000 seconds] [Time since reference or first frame: 0.028133000 seconds] Frame Number: 461 Frame Length: 272 bytes (2176 bits) Capture Length: 272 bytes (2176 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 72.178.201.62 (72.178.201.62), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 258 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 248 Protocol: UDP (17) Header checksum: 0xf473 [correct] [Good: True] [Bad: False] Source: 72.178.201.62 (72.178.201.62) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 238 Checksum: 0xcce2 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: upnp:rootdevice\r\n USN: uuid:18de43f8-677c-4d3a-8920-88DC960E11B2::upnp:rootdevice\r\n EXT:\r\n SERVER: Fedora/10 UPnP/1.0 MiniUPnPd/1.4\r\n LOCATION: http://192.168.0.1:33091/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 462 0.028163000 75.132.170.217 [CENSORED] SSDP 280 HTTP/1.1 200 OK Frame 462: 280 bytes on wire (2240 bits), 280 bytes captured (2240 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.629263000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.629263000 seconds [Time delta from previous captured frame: 0.000030000 seconds] [Time delta from previous displayed frame: 0.000030000 seconds] [Time since reference or first frame: 0.028163000 seconds] Frame Number: 462 Frame Length: 280 bytes (2240 bits) Capture Length: 280 bytes (2240 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 75.132.170.217 (75.132.170.217), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 266 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x0cff [correct] [Good: True] [Bad: False] Source: 75.132.170.217 (75.132.170.217) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 246 Checksum: 0x35ea [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65530/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: upnp:rootdevice\r\n USN: uuid:61264fe2-1dd2-11b2-88f5-b57c88b376c0::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 463 0.028208000 182.247.32.224 [CENSORED] SSDP 348 HTTP/1.1 200 OK Frame 463: 348 bytes on wire (2784 bits), 348 bytes captured (2784 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.629308000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.629308000 seconds [Time delta from previous captured frame: 0.000045000 seconds] [Time delta from previous displayed frame: 0.000045000 seconds] [Time since reference or first frame: 0.028208000 seconds] Frame Number: 463 Frame Length: 348 bytes (2784 bits) Capture Length: 348 bytes (2784 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 182.247.32.224 (182.247.32.224), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 334 Identification: 0xfa0a (64010) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x7726 [correct] [Good: True] [Bad: False] Source: 182.247.32.224 (182.247.32.224) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 314 Checksum: 0xe787 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n \r\n No. Time Source Destination Protocol Length Info 464 0.028795000 42.102.194.176 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 464: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.629895000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.629895000 seconds [Time delta from previous captured frame: 0.000587000 seconds] [Time delta from previous displayed frame: 0.000587000 seconds] [Time since reference or first frame: 0.028795000 seconds] Frame Number: 464 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 42.102.194.176 (42.102.194.176), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0xcbb3 (52147) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x8f64 [correct] [Good: True] [Bad: False] Source: 42.102.194.176 (42.102.194.176) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0xdcb2 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 465 0.028832000 121.159.110.111 [CENSORED] SSDP 345 HTTP/1.1 200 OK Frame 465: 345 bytes on wire (2760 bits), 345 bytes captured (2760 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.629932000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.629932000 seconds [Time delta from previous captured frame: 0.000037000 seconds] [Time delta from previous displayed frame: 0.000037000 seconds] [Time since reference or first frame: 0.028832000 seconds] Frame Number: 465 Frame Length: 345 bytes (2760 bits) Capture Length: 345 bytes (2760 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 121.159.110.111 (121.159.110.111), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x28 (DSCP 0x0a: Assured Forwarding 11; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 10.. = Differentiated Services Codepoint: Assured Forwarding 11 (0x0a) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 331 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 250 Protocol: UDP (17) Header checksum: 0x1be5 [correct] [Good: True] [Bad: False] Source: 121.159.110.111 (121.159.110.111) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 311 Checksum: 0x73b4 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:36941/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 466 0.028879000 221.216.139.40 [CENSORED] SSDP 272 HTTP/1.1 200 OK Frame 466: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.629979000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.629979000 seconds [Time delta from previous captured frame: 0.000047000 seconds] [Time delta from previous displayed frame: 0.000047000 seconds] [Time since reference or first frame: 0.028879000 seconds] Frame Number: 466 Frame Length: 272 bytes (2176 bits) Capture Length: 272 bytes (2176 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 221.216.139.40 (221.216.139.40), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 258 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x9f63 [correct] [Good: True] [Bad: False] Source: 221.216.139.40 (221.216.139.40) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 238 Checksum: 0xe576 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: upnp:rootdevice\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::upnp:rootdevice\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:3183/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 467 0.028913000 183.193.119.144 [CENSORED] SSDP 284 HTTP/1.1 200 OK Frame 467: 284 bytes on wire (2272 bits), 284 bytes captured (2272 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.630013000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.630013000 seconds [Time delta from previous captured frame: 0.000034000 seconds] [Time delta from previous displayed frame: 0.000034000 seconds] [Time since reference or first frame: 0.028913000 seconds] Frame Number: 467 Frame Length: 284 bytes (2272 bits) Capture Length: 284 bytes (2272 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 183.193.119.144 (183.193.119.144), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 270 Identification: 0xc758 (51032) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x52ae [correct] [Good: True] [Bad: False] Source: 183.193.119.144 (183.193.119.144) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 250 Checksum: 0x5653 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: upnp:rootdevice\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 468 0.028957000 221.216.139.40 [CENSORED] SSDP 344 HTTP/1.1 200 OK Frame 468: 344 bytes on wire (2752 bits), 344 bytes captured (2752 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.630057000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.630057000 seconds [Time delta from previous captured frame: 0.000044000 seconds] [Time delta from previous displayed frame: 0.000044000 seconds] [Time since reference or first frame: 0.028957000 seconds] Frame Number: 468 Frame Length: 344 bytes (2752 bits) Capture Length: 344 bytes (2752 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 221.216.139.40 (221.216.139.40), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 330 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x9f1b [correct] [Good: True] [Bad: False] Source: 221.216.139.40 (221.216.139.40) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 310 Checksum: 0x7678 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:3183/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 469 0.028985000 221.216.139.40 [CENSORED] SSDP 320 HTTP/1.1 200 OK Frame 469: 320 bytes on wire (2560 bits), 320 bytes captured (2560 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.630085000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.630085000 seconds [Time delta from previous captured frame: 0.000028000 seconds] [Time delta from previous displayed frame: 0.000028000 seconds] [Time since reference or first frame: 0.028985000 seconds] Frame Number: 469 Frame Length: 320 bytes (2560 bits) Capture Length: 320 bytes (2560 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 221.216.139.40 (221.216.139.40), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 306 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x9f33 [correct] [Good: True] [Bad: False] Source: 221.216.139.40 (221.216.139.40) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 286 Checksum: 0xb0e2 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:WANDevice:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:device:WANDevice:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:3183/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 470 0.029023000 71.198.34.78 [CENSORED] SSDP 344 HTTP/1.1 200 OK Frame 470: 344 bytes on wire (2752 bits), 344 bytes captured (2752 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.630123000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.630123000 seconds [Time delta from previous captured frame: 0.000038000 seconds] [Time delta from previous displayed frame: 0.000038000 seconds] [Time since reference or first frame: 0.029023000 seconds] Frame Number: 470 Frame Length: 344 bytes (2752 bits) Capture Length: 344 bytes (2752 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 71.198.34.78 (71.198.34.78), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 330 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x9e08 [correct] [Good: True] [Bad: False] Source: 71.198.34.78 (71.198.34.78) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 310 Checksum: 0xdb9d [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65530/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-wifialliance-org:device:WFADevice:1\r\n USN: uuid:1f8c0e4c-1dd2-11b2-8314-d55e5542cfc7::urn:schemas-wifialliance-org:device:WFADevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 471 0.029055000 71.198.34.78 [CENSORED] SSDP 354 HTTP/1.1 200 OK Frame 471: 354 bytes on wire (2832 bits), 354 bytes captured (2832 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.630155000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.630155000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.029055000 seconds] Frame Number: 471 Frame Length: 354 bytes (2832 bits) Capture Length: 354 bytes (2832 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 71.198.34.78 (71.198.34.78), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 340 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x9dfe [correct] [Good: True] [Bad: False] Source: 71.198.34.78 (71.198.34.78) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 320 Checksum: 0xa649 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65530/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-wifialliance-org:service:WFAWLANConfig:1\r\n USN: uuid:1f8c0e4c-1dd2-11b2-8314-d55e5542cfc7::urn:schemas-wifialliance-org:service:WFAWLANConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 472 0.029087000 174.52.77.173 [CENSORED] SSDP 344 HTTP/1.1 200 OK Frame 472: 344 bytes on wire (2752 bits), 344 bytes captured (2752 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.630187000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.630187000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.029087000 seconds] Frame Number: 472 Frame Length: 344 bytes (2752 bits) Capture Length: 344 bytes (2752 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 174.52.77.173 (174.52.77.173), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 330 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (17) Header checksum: 0x093b [correct] [Good: True] [Bad: False] Source: 174.52.77.173 (174.52.77.173) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 310 Checksum: 0x21e4 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-upnp-org:service:WANPPPConnection:1\r\n USN: uuid:61604714-1dd2-11b2-981f-b72669215f54::urn:schemas-upnp-org:service:WANPPPConnection:1\r\n \r\n No. Time Source Destination Protocol Length Info 473 0.029112000 71.198.34.78 [CENSORED] SSDP 289 HTTP/1.1 200 OK Frame 473: 289 bytes on wire (2312 bits), 289 bytes captured (2312 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.630212000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.630212000 seconds [Time delta from previous captured frame: 0.000025000 seconds] [Time delta from previous displayed frame: 0.000025000 seconds] [Time since reference or first frame: 0.029112000 seconds] Frame Number: 473 Frame Length: 289 bytes (2312 bits) Capture Length: 289 bytes (2312 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 71.198.34.78 (71.198.34.78), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 275 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x9e3f [correct] [Good: True] [Bad: False] Source: 71.198.34.78 (71.198.34.78) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 255 Checksum: 0x0e6c [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65530/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: uuid:1f882af2-1dd2-11b2-a1f7-b64aa3138844\r\n USN: uuid:1f882af2-1dd2-11b2-a1f7-b64aa3138844\r\n \r\n No. Time Source Destination Protocol Length Info 474 0.029170000 71.198.34.78 [CENSORED] SSDP 332 HTTP/1.1 200 OK Frame 474: 332 bytes on wire (2656 bits), 332 bytes captured (2656 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.630270000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.630270000 seconds [Time delta from previous captured frame: 0.000058000 seconds] [Time delta from previous displayed frame: 0.000058000 seconds] [Time since reference or first frame: 0.029170000 seconds] Frame Number: 474 Frame Length: 332 bytes (2656 bits) Capture Length: 332 bytes (2656 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 71.198.34.78 (71.198.34.78), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 318 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x9e14 [correct] [Good: True] [Bad: False] Source: 71.198.34.78 (71.198.34.78) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 298 Checksum: 0x01dc [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65530/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: uuid:1f8c0e4c-1dd2-11b2-8314-d55e5542cfc7\r\n USN: uuid:1f8c0e4c-1dd2-11b2-8314-d55e5542cfc7::uuid:1f8c0e4c-1dd2-11b2-8314-d55e5542cfc7\r\n \r\n No. Time Source Destination Protocol Length Info 475 0.029204000 50.27.9.105 [CENSORED] SSDP 342 HTTP/1.1 200 OK Frame 475: 342 bytes on wire (2736 bits), 342 bytes captured (2736 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.630304000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.630304000 seconds [Time delta from previous captured frame: 0.000034000 seconds] [Time delta from previous displayed frame: 0.000034000 seconds] [Time since reference or first frame: 0.029204000 seconds] Frame Number: 475 Frame Length: 342 bytes (2736 bits) Capture Length: 342 bytes (2736 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 50.27.9.105 (50.27.9.105), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 328 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0xc79a [correct] [Good: True] [Bad: False] Source: 50.27.9.105 (50.27.9.105) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 308 Checksum: 0xbe98 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n USN: uuid:69b5c2dd-5b69-42e0-9d2a-0a595b1b01d0::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n EXT:\r\n SERVER: ASUSTeK UPnP/1.0 MiniUPnPd/1.4\r\n LOCATION: http://192.168.1.1:58683/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 476 0.031270000 24.43.39.198 [CENSORED] SSDP 350 HTTP/1.1 200 OK Frame 476: 350 bytes on wire (2800 bits), 350 bytes captured (2800 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.632370000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.632370000 seconds [Time delta from previous captured frame: 0.002066000 seconds] [Time delta from previous displayed frame: 0.002066000 seconds] [Time since reference or first frame: 0.031270000 seconds] Frame Number: 476 Frame Length: 350 bytes (2800 bits) Capture Length: 350 bytes (2800 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 24.43.39.198 (24.43.39.198), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 336 Identification: 0x17f9 (6137) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 248 Protocol: UDP (17) Header checksum: 0xae2c [correct] [Good: True] [Bad: False] Source: 24.43.39.198 (24.43.39.198) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 316 Checksum: 0x494d [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.1.99:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:\r\n USN: uuid:4675e646-1dd2-11b2-8ca9-d85f43ad0fc3::urn:schemas-upnp-org:service:Layer3Forwarding:\r\n \r\n No. Time Source Destination Protocol Length Info 477 0.031334000 65.31.92.103 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 477: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.632434000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.632434000 seconds [Time delta from previous captured frame: 0.000064000 seconds] [Time delta from previous displayed frame: 0.000064000 seconds] [Time since reference or first frame: 0.031334000 seconds] Frame Number: 477 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 65.31.92.103 (65.31.92.103), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0x50fb (20731) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x1496 [correct] [Good: True] [Bad: False] Source: 65.31.92.103 (65.31.92.103) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0xd289 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:\r\n USN: uuid:77e2cf9e-1dd2-11b2-adae-b1e37771b8a7::urn:schemas-upnp-org:service:Layer3Forwarding:\r\n \r\n No. Time Source Destination Protocol Length Info 478 0.031390000 98.224.22.79 [CENSORED] SSDP 328 HTTP/1.1 200 OK Frame 478: 328 bytes on wire (2624 bits), 328 bytes captured (2624 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.632490000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.632490000 seconds [Time delta from previous captured frame: 0.000056000 seconds] [Time delta from previous displayed frame: 0.000056000 seconds] [Time since reference or first frame: 0.031390000 seconds] Frame Number: 478 Frame Length: 328 bytes (2624 bits) Capture Length: 328 bytes (2624 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 98.224.22.79 (98.224.22.79), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 314 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x8efd [correct] [Good: True] [Bad: False] Source: 98.224.22.79 (98.224.22.79) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 294 Checksum: 0x26e5 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65530/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-upnp-org:device:WANDevice:1\r\n USN: uuid:25849f40-1dd2-11b2-b7bf-8a177dc31428::urn:schemas-upnp-org:device:WANDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 479 0.031427000 118.75.22.116 [CENSORED] SSDP 348 HTTP/1.1 200 OK Frame 479: 348 bytes on wire (2784 bits), 348 bytes captured (2784 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.632527000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.632527000 seconds [Time delta from previous captured frame: 0.000037000 seconds] [Time delta from previous displayed frame: 0.000037000 seconds] [Time since reference or first frame: 0.031427000 seconds] Frame Number: 479 Frame Length: 348 bytes (2784 bits) Capture Length: 348 bytes (2784 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 118.75.22.116 (118.75.22.116), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 334 Identification: 0xdd77 (56695) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xddd1 [correct] [Good: True] [Bad: False] Source: 118.75.22.116 (118.75.22.116) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 314 Checksum: 0x32a0 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n \r\n No. Time Source Destination Protocol Length Info 480 0.031463000 98.224.22.79 [CENSORED] SSDP 360 HTTP/1.1 200 OK Frame 480: 360 bytes on wire (2880 bits), 360 bytes captured (2880 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.632563000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.632563000 seconds [Time delta from previous captured frame: 0.000036000 seconds] [Time delta from previous displayed frame: 0.000036000 seconds] [Time since reference or first frame: 0.031463000 seconds] Frame Number: 480 Frame Length: 360 bytes (2880 bits) Capture Length: 360 bytes (2880 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 98.224.22.79 (98.224.22.79), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 346 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x8edd [correct] [Good: True] [Bad: False] Source: 98.224.22.79 (98.224.22.79) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 326 Checksum: 0x9f1d [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65530/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n USN: uuid:25849f40-1dd2-11b2-b7bf-8a177dc31428::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 481 0.031498000 24.13.218.67 [CENSORED] SSDP 352 HTTP/1.1 200 OK Frame 481: 352 bytes on wire (2816 bits), 352 bytes captured (2816 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.632598000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.632598000 seconds [Time delta from previous captured frame: 0.000035000 seconds] [Time delta from previous displayed frame: 0.000035000 seconds] [Time since reference or first frame: 0.031498000 seconds] Frame Number: 481 Frame Length: 352 bytes (2816 bits) Capture Length: 352 bytes (2816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 24.13.218.67 (24.13.218.67), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 338 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x10c4 [correct] [Good: True] [Bad: False] Source: 24.13.218.67 (24.13.218.67) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 318 Checksum: 0xaaff [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n USN: uuid:6154e36a-1dd2-11b2-82ca-f34a0be69130::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 482 0.031531000 24.13.218.67 [CENSORED] SSDP 348 HTTP/1.1 200 OK Frame 482: 348 bytes on wire (2784 bits), 348 bytes captured (2784 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.632631000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.632631000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.031531000 seconds] Frame Number: 482 Frame Length: 348 bytes (2784 bits) Capture Length: 348 bytes (2784 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 24.13.218.67 (24.13.218.67), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 334 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x10c8 [correct] [Good: True] [Bad: False] Source: 24.13.218.67 (24.13.218.67) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 314 Checksum: 0xc8fc [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n USN: uuid:615dc106-1dd2-11b2-812e-96dbc7db9b40::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 483 0.031565000 24.13.218.67 [CENSORED] SSDP 328 HTTP/1.1 200 OK Frame 483: 328 bytes on wire (2624 bits), 328 bytes captured (2624 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.632665000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.632665000 seconds [Time delta from previous captured frame: 0.000034000 seconds] [Time delta from previous displayed frame: 0.000034000 seconds] [Time since reference or first frame: 0.031565000 seconds] Frame Number: 483 Frame Length: 328 bytes (2624 bits) Capture Length: 328 bytes (2624 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 24.13.218.67 (24.13.218.67), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 314 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x10dc [correct] [Good: True] [Bad: False] Source: 24.13.218.67 (24.13.218.67) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 294 Checksum: 0x5bdd [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-upnp-org:device:WANDevice:1\r\n USN: uuid:6155d270-1dd2-11b2-9b1c-a85eb2f927f9::urn:schemas-upnp-org:device:WANDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 484 0.031600000 171.104.96.11 [CENSORED] SSDP 336 HTTP/1.1 200 OK Frame 484: 336 bytes on wire (2688 bits), 336 bytes captured (2688 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.632700000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.632700000 seconds [Time delta from previous captured frame: 0.000035000 seconds] [Time delta from previous displayed frame: 0.000035000 seconds] [Time since reference or first frame: 0.031600000 seconds] Frame Number: 484 Frame Length: 336 bytes (2688 bits) Capture Length: 336 bytes (2688 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 171.104.96.11 (171.104.96.11), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 322 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0xfdb0 [correct] [Good: True] [Bad: False] Source: 171.104.96.11 (171.104.96.11) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 302 Checksum: 0x7cbe [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:3183/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 485 0.031639000 118.75.22.116 [CENSORED] SSDP 364 HTTP/1.1 200 OK Frame 485: 364 bytes on wire (2912 bits), 364 bytes captured (2912 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.632739000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.632739000 seconds [Time delta from previous captured frame: 0.000039000 seconds] [Time delta from previous displayed frame: 0.000039000 seconds] [Time since reference or first frame: 0.031639000 seconds] Frame Number: 485 Frame Length: 364 bytes (2912 bits) Capture Length: 364 bytes (2912 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 118.75.22.116 (118.75.22.116), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 350 Identification: 0xdd7a (56698) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xddbe [correct] [Good: True] [Bad: False] Source: 118.75.22.116 (118.75.22.116) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 330 Checksum: 0x191e [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 486 0.031671000 24.13.218.67 [CENSORED] SSDP 360 HTTP/1.1 200 OK Frame 486: 360 bytes on wire (2880 bits), 360 bytes captured (2880 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.632771000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.632771000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.031671000 seconds] Frame Number: 486 Frame Length: 360 bytes (2880 bits) Capture Length: 360 bytes (2880 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 24.13.218.67 (24.13.218.67), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 346 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x10bc [correct] [Good: True] [Bad: False] Source: 24.13.218.67 (24.13.218.67) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 326 Checksum: 0xd415 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n USN: uuid:6155d270-1dd2-11b2-9b1c-a85eb2f927f9::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 487 0.031698000 50.168.18.193 [CENSORED] SSDP 287 HTTP/1.1 200 OK Frame 487: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.632798000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.632798000 seconds [Time delta from previous captured frame: 0.000027000 seconds] [Time delta from previous displayed frame: 0.000027000 seconds] [Time since reference or first frame: 0.031698000 seconds] Frame Number: 487 Frame Length: 287 bytes (2296 bits) Capture Length: 287 bytes (2296 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 50.168.18.193 (50.168.18.193), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 273 Identification: 0xab2c (43820) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 242 Protocol: UDP (17) Header checksum: 0x1bc0 [correct] [Good: True] [Bad: False] Source: 50.168.18.193 (50.168.18.193) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 253 Checksum: 0xb4f0 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: upnp:rootdevice\r\n USN: uuid:11111111-1111-1111-1111-111111111111::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 488 0.031739000 50.168.18.193 [CENSORED] SSDP 357 HTTP/1.1 200 OK Frame 488: 357 bytes on wire (2856 bits), 357 bytes captured (2856 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.632839000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.632839000 seconds [Time delta from previous captured frame: 0.000041000 seconds] [Time delta from previous displayed frame: 0.000041000 seconds] [Time since reference or first frame: 0.031739000 seconds] Frame Number: 488 Frame Length: 357 bytes (2856 bits) Capture Length: 357 bytes (2856 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 50.168.18.193 (50.168.18.193), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 343 Identification: 0xab2d (43821) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 242 Protocol: UDP (17) Header checksum: 0x1b79 [correct] [Good: True] [Bad: False] Source: 50.168.18.193 (50.168.18.193) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 323 Checksum: 0x0d91 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n USN: uuid:11111111-1111-1111-1111-111111111111::urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 489 0.031766000 50.168.18.193 [CENSORED] SSDP 333 HTTP/1.1 200 OK Frame 489: 333 bytes on wire (2664 bits), 333 bytes captured (2664 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.632866000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.632866000 seconds [Time delta from previous captured frame: 0.000027000 seconds] [Time delta from previous displayed frame: 0.000027000 seconds] [Time since reference or first frame: 0.031766000 seconds] Frame Number: 489 Frame Length: 333 bytes (2664 bits) Capture Length: 333 bytes (2664 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 50.168.18.193 (50.168.18.193), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 319 Identification: 0xab2e (43822) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 242 Protocol: UDP (17) Header checksum: 0x1b90 [correct] [Good: True] [Bad: False] Source: 50.168.18.193 (50.168.18.193) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 299 Checksum: 0x38ea [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:WANDevice:\r\n USN: uuid:22222222-2222-2222-2222-222222222222::urn:schemas-upnp-org:device:WANDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 490 0.031793000 183.230.114.49 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 490: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.632893000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.632893000 seconds [Time delta from previous captured frame: 0.000027000 seconds] [Time delta from previous displayed frame: 0.000027000 seconds] [Time since reference or first frame: 0.031793000 seconds] Frame Number: 490 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 183.230.114.49 (183.230.114.49), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0xc9d3 (51667) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x5553 [correct] [Good: True] [Bad: False] Source: 183.230.114.49 (183.230.114.49) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0xc76a [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 491 0.031829000 183.230.114.49 [CENSORED] SSDP 332 HTTP/1.1 200 OK Frame 491: 332 bytes on wire (2656 bits), 332 bytes captured (2656 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.632929000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.632929000 seconds [Time delta from previous captured frame: 0.000036000 seconds] [Time delta from previous displayed frame: 0.000036000 seconds] [Time since reference or first frame: 0.031829000 seconds] Frame Number: 491 Frame Length: 332 bytes (2656 bits) Capture Length: 332 bytes (2656 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 183.230.114.49 (183.230.114.49), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 318 Identification: 0xc9d4 (51668) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x553c [correct] [Good: True] [Bad: False] Source: 183.230.114.49 (183.230.114.49) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 298 Checksum: 0x038d [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000::urn:schemas-upnp-org:device:WANDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 492 0.031868000 183.230.114.49 [CENSORED] SSDP 364 HTTP/1.1 200 OK Frame 492: 364 bytes on wire (2912 bits), 364 bytes captured (2912 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.632968000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.632968000 seconds [Time delta from previous captured frame: 0.000039000 seconds] [Time delta from previous displayed frame: 0.000039000 seconds] [Time since reference or first frame: 0.031868000 seconds] Frame Number: 492 Frame Length: 364 bytes (2912 bits) Capture Length: 364 bytes (2912 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 183.230.114.49 (183.230.114.49), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 350 Identification: 0xc9d5 (51669) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x551b [correct] [Good: True] [Bad: False] Source: 183.230.114.49 (183.230.114.49) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 330 Checksum: 0x7bc5 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 493 0.031897000 183.230.114.49 [CENSORED] SSDP 330 HTTP/1.1 200 OK Frame 493: 330 bytes on wire (2640 bits), 330 bytes captured (2640 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.632997000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.632997000 seconds [Time delta from previous captured frame: 0.000029000 seconds] [Time delta from previous displayed frame: 0.000029000 seconds] [Time since reference or first frame: 0.031897000 seconds] Frame Number: 493 Frame Length: 330 bytes (2640 bits) Capture Length: 330 bytes (2640 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 183.230.114.49 (183.230.114.49), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 316 Identification: 0xc9d6 (51670) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x553c [correct] [Good: True] [Bad: False] Source: 183.230.114.49 (183.230.114.49) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 296 Checksum: 0xfd6b [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 494 0.031934000 183.230.114.49 [CENSORED] SSDP 362 HTTP/1.1 200 OK Frame 494: 362 bytes on wire (2896 bits), 362 bytes captured (2896 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.633034000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.633034000 seconds [Time delta from previous captured frame: 0.000037000 seconds] [Time delta from previous displayed frame: 0.000037000 seconds] [Time since reference or first frame: 0.031934000 seconds] Frame Number: 494 Frame Length: 362 bytes (2896 bits) Capture Length: 362 bytes (2896 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 183.230.114.49 (183.230.114.49), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 348 Identification: 0xc9d7 (51671) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x551b [correct] [Good: True] [Bad: False] Source: 183.230.114.49 (183.230.114.49) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 328 Checksum: 0x03d8 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 495 0.031968000 183.163.38.224 [CENSORED] SSDP 362 HTTP/1.1 200 OK Frame 495: 362 bytes on wire (2896 bits), 362 bytes captured (2896 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.633068000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.633068000 seconds [Time delta from previous captured frame: 0.000034000 seconds] [Time delta from previous displayed frame: 0.000034000 seconds] [Time since reference or first frame: 0.031968000 seconds] Frame Number: 495 Frame Length: 362 bytes (2896 bits) Capture Length: 362 bytes (2896 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 183.163.38.224 (183.163.38.224), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 348 Identification: 0xaf29 (44841) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0xbb5d [correct] [Good: True] [Bad: False] Source: 183.163.38.224 (183.163.38.224) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 328 Checksum: 0x4f6c [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 496 0.032001000 183.230.114.49 [CENSORED] SSDP 368 HTTP/1.1 200 OK Frame 496: 368 bytes on wire (2944 bits), 368 bytes captured (2944 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.633101000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.633101000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.032001000 seconds] Frame Number: 496 Frame Length: 368 bytes (2944 bits) Capture Length: 368 bytes (2944 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 183.230.114.49 (183.230.114.49), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 354 Identification: 0xc9d8 (51672) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x5514 [correct] [Good: True] [Bad: False] Source: 183.230.114.49 (183.230.114.49) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 334 Checksum: 0xbe86 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 497 0.032029000 27.227.85.71 [CENSORED] SSDP 332 HTTP/1.1 200 OK Frame 497: 332 bytes on wire (2656 bits), 332 bytes captured (2656 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.633129000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.633129000 seconds [Time delta from previous captured frame: 0.000028000 seconds] [Time delta from previous displayed frame: 0.000028000 seconds] [Time since reference or first frame: 0.032029000 seconds] Frame Number: 497 Frame Length: 332 bytes (2656 bits) Capture Length: 332 bytes (2656 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 27.227.85.71 (27.227.85.71), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 318 Identification: 0xbf12 (48914) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x17ec [correct] [Good: True] [Bad: False] Source: 27.227.85.71 (27.227.85.71) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 298 Checksum: 0xbc7a [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000::urn:schemas-upnp-org:device:WANDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 498 0.032067000 27.227.85.71 [CENSORED] SSDP 364 HTTP/1.1 200 OK Frame 498: 364 bytes on wire (2912 bits), 364 bytes captured (2912 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.633167000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.633167000 seconds [Time delta from previous captured frame: 0.000038000 seconds] [Time delta from previous displayed frame: 0.000038000 seconds] [Time since reference or first frame: 0.032067000 seconds] Frame Number: 498 Frame Length: 364 bytes (2912 bits) Capture Length: 364 bytes (2912 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 27.227.85.71 (27.227.85.71), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 350 Identification: 0xbf13 (48915) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x17cb [correct] [Good: True] [Bad: False] Source: 27.227.85.71 (27.227.85.71) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 330 Checksum: 0x34b3 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 499 0.032095000 27.226.168.21 [CENSORED] SSDP 330 HTTP/1.1 200 OK Frame 499: 330 bytes on wire (2640 bits), 330 bytes captured (2640 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.633195000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.633195000 seconds [Time delta from previous captured frame: 0.000028000 seconds] [Time delta from previous displayed frame: 0.000028000 seconds] [Time since reference or first frame: 0.032095000 seconds] Frame Number: 499 Frame Length: 330 bytes (2640 bits) Capture Length: 330 bytes (2640 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 27.226.168.21 (27.226.168.21), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 316 Identification: 0x2a38 (10808) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x59fb [correct] [Good: True] [Bad: False] Source: 27.226.168.21 (27.226.168.21) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 296 Checksum: 0x638c [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 500 0.032131000 27.226.168.21 [CENSORED] SSDP 362 HTTP/1.1 200 OK Frame 500: 362 bytes on wire (2896 bits), 362 bytes captured (2896 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.633231000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.633231000 seconds [Time delta from previous captured frame: 0.000036000 seconds] [Time delta from previous displayed frame: 0.000036000 seconds] [Time since reference or first frame: 0.032131000 seconds] Frame Number: 500 Frame Length: 362 bytes (2896 bits) Capture Length: 362 bytes (2896 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 27.226.168.21 (27.226.168.21), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 348 Identification: 0x2a39 (10809) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x59da [correct] [Good: True] [Bad: False] Source: 27.226.168.21 (27.226.168.21) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 328 Checksum: 0x69f8 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 501 0.032168000 27.226.168.21 [CENSORED] SSDP 368 HTTP/1.1 200 OK Frame 501: 368 bytes on wire (2944 bits), 368 bytes captured (2944 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.633268000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.633268000 seconds [Time delta from previous captured frame: 0.000037000 seconds] [Time delta from previous displayed frame: 0.000037000 seconds] [Time since reference or first frame: 0.032168000 seconds] Frame Number: 501 Frame Length: 368 bytes (2944 bits) Capture Length: 368 bytes (2944 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 27.226.168.21 (27.226.168.21), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 354 Identification: 0x2a3a (10810) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x59d3 [correct] [Good: True] [Bad: False] Source: 27.226.168.21 (27.226.168.21) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 334 Checksum: 0x24a7 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 502 0.032198000 27.226.168.21 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 502: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.633298000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.633298000 seconds [Time delta from previous captured frame: 0.000030000 seconds] [Time delta from previous displayed frame: 0.000030000 seconds] [Time since reference or first frame: 0.032198000 seconds] Frame Number: 502 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 27.226.168.21 (27.226.168.21), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0x2a3b (10811) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x59de [correct] [Good: True] [Bad: False] Source: 27.226.168.21 (27.226.168.21) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0x5389 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANIPConnection:1\r\n \r\n No. Time Source Destination Protocol Length Info 503 0.032225000 183.141.157.46 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 503: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.633325000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.633325000 seconds [Time delta from previous captured frame: 0.000027000 seconds] [Time delta from previous displayed frame: 0.000027000 seconds] [Time since reference or first frame: 0.032225000 seconds] Frame Number: 503 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 183.141.157.46 (183.141.157.46), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0x4211 (16913) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xb161 [correct] [Good: True] [Bad: False] Source: 183.141.157.46 (183.141.157.46) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0x750d [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 504 0.032261000 181.136.134.126 [CENSORED] SSDP 317 HTTP/1.1 200 OK Frame 504: 317 bytes on wire (2536 bits), 317 bytes captured (2536 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.633361000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.633361000 seconds [Time delta from previous captured frame: 0.000036000 seconds] [Time delta from previous displayed frame: 0.000036000 seconds] [Time since reference or first frame: 0.032261000 seconds] Frame Number: 504 Frame Length: 317 bytes (2536 bits) Capture Length: 317 bytes (2536 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 181.136.134.126 (181.136.134.126), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 303 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0xc710 [correct] [Good: True] [Bad: False] Source: 181.136.134.126 (181.136.134.126) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 283 Checksum: 0x3b2b [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n DATE: Sun, 23 Nov 2014 17:41:54 GMT\r\n EXT:\r\n LOCATION: http://192.168.0.1:2869/Desc.xml\r\n SERVER: OS/0.0 UPnP/1.0 UPnP-Device-Host/1.0\r\n ST: uuid:f1bcf3c2-9299-11e2-9e96-0800200c9a66\r\n USN: uuid:f1bcf3c2-9299-11e2-9e96-0800200c9a66\r\n \r\n No. Time Source Destination Protocol Length Info 505 0.032294000 27.220.9.105 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 505: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.633394000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.633394000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.032294000 seconds] Frame Number: 505 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 27.220.9.105 (27.220.9.105), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0x9e9b (40603) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x844e [correct] [Good: True] [Bad: False] Source: 27.220.9.105 (27.220.9.105) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0xcc3d [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 506 0.032326000 27.220.9.105 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 506: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.633426000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.633426000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.032326000 seconds] Frame Number: 506 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 27.220.9.105 (27.220.9.105), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0x9ea2 (40610) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x8457 [correct] [Good: True] [Bad: False] Source: 27.220.9.105 (27.220.9.105) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0xa484 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 507 0.032362000 113.195.18.167 [CENSORED] SSDP 330 HTTP/1.1 200 OK Frame 507: 330 bytes on wire (2640 bits), 330 bytes captured (2640 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.633462000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.633462000 seconds [Time delta from previous captured frame: 0.000036000 seconds] [Time delta from previous displayed frame: 0.000036000 seconds] [Time since reference or first frame: 0.032362000 seconds] Frame Number: 507 Frame Length: 330 bytes (2640 bits) Capture Length: 330 bytes (2640 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 113.195.18.167 (113.195.18.167), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 316 Identification: 0xf069 (61545) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xd346 [correct] [Good: True] [Bad: False] Source: 113.195.18.167 (113.195.18.167) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 296 Checksum: 0xa319 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 508 0.032398000 106.44.209.217 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 508: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.633498000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.633498000 seconds [Time delta from previous captured frame: 0.000036000 seconds] [Time delta from previous displayed frame: 0.000036000 seconds] [Time since reference or first frame: 0.032398000 seconds] Frame Number: 508 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 106.44.209.217 (106.44.209.217), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0x56e1 (22241) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xb529 [correct] [Good: True] [Bad: False] Source: 106.44.209.217 (106.44.209.217) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0xdb7a [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANIPConnection:1\r\n \r\n No. Time Source Destination Protocol Length Info 509 0.032431000 42.102.194.176 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 509: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.633531000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.633531000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.032431000 seconds] Frame Number: 509 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 42.102.194.176 (42.102.194.176), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0xcbc8 (52168) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x8f21 [correct] [Good: True] [Bad: False] Source: 42.102.194.176 (42.102.194.176) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0x2a6a [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANIPConnection:1\r\n \r\n No. Time Source Destination Protocol Length Info 510 0.032460000 118.180.59.13 [CENSORED] SSDP 330 HTTP/1.1 200 OK Frame 510: 330 bytes on wire (2640 bits), 330 bytes captured (2640 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.633560000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.633560000 seconds [Time delta from previous captured frame: 0.000029000 seconds] [Time delta from previous displayed frame: 0.000029000 seconds] [Time since reference or first frame: 0.032460000 seconds] Frame Number: 510 Frame Length: 330 bytes (2640 bits) Capture Length: 330 bytes (2640 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 118.180.59.13 (118.180.59.13), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 316 Identification: 0x8f3e (36670) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 242 Protocol: UDP (17) Header checksum: 0x0b2b [correct] [Good: True] [Bad: False] Source: 118.180.59.13 (118.180.59.13) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 296 Checksum: 0x75c2 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 511 0.032485000 183.141.157.46 [CENSORED] SSDP 284 HTTP/1.1 200 OK Frame 511: 284 bytes on wire (2272 bits), 284 bytes captured (2272 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.633585000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.633585000 seconds [Time delta from previous captured frame: 0.000025000 seconds] [Time delta from previous displayed frame: 0.000025000 seconds] [Time since reference or first frame: 0.032485000 seconds] Frame Number: 511 Frame Length: 284 bytes (2272 bits) Capture Length: 284 bytes (2272 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 183.141.157.46 (183.141.157.46), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 270 Identification: 0x4213 (16915) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xb179 [correct] [Good: True] [Bad: False] Source: 183.141.157.46 (183.141.157.46) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 250 Checksum: 0x30e9 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: upnp:rootdevice\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 512 0.032530000 190.53.141.234 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 512: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.633630000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.633630000 seconds [Time delta from previous captured frame: 0.000045000 seconds] [Time delta from previous displayed frame: 0.000045000 seconds] [Time since reference or first frame: 0.032530000 seconds] Frame Number: 512 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 190.53.141.234 (190.53.141.234), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0x57f6 (22518) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 247 Protocol: UDP (17) Header checksum: 0x6301 [correct] [Good: True] [Bad: False] Source: 190.53.141.234 (190.53.141.234) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0x554d [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:\r\n USN: uuid:add121e6-1dd1-11b2-8817-ec71e7df7268::urn:schemas-upnp-org:service:Layer3Forwarding:\r\n \r\n No. Time Source Destination Protocol Length Info 513 0.032583000 183.163.38.224 [CENSORED] SSDP 368 HTTP/1.1 200 OK Frame 513: 368 bytes on wire (2944 bits), 368 bytes captured (2944 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.633683000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.633683000 seconds [Time delta from previous captured frame: 0.000053000 seconds] [Time delta from previous displayed frame: 0.000053000 seconds] [Time since reference or first frame: 0.032583000 seconds] Frame Number: 513 Frame Length: 368 bytes (2944 bits) Capture Length: 368 bytes (2944 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 183.163.38.224 (183.163.38.224), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 354 Identification: 0xaf2a (44842) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0xbb56 [correct] [Good: True] [Bad: False] Source: 183.163.38.224 (183.163.38.224) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 334 Checksum: 0x0a1b [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 514 0.032609000 114.98.128.240 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 514: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.633709000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.633709000 seconds [Time delta from previous captured frame: 0.000026000 seconds] [Time delta from previous displayed frame: 0.000026000 seconds] [Time since reference or first frame: 0.032609000 seconds] Frame Number: 514 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 114.98.128.240 (114.98.128.240), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0xa2e8 (41704) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xb203 [correct] [Good: True] [Bad: False] Source: 114.98.128.240 (114.98.128.240) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0xd676 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 515 0.032657000 114.98.128.240 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 515: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.633757000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.633757000 seconds [Time delta from previous captured frame: 0.000048000 seconds] [Time delta from previous displayed frame: 0.000048000 seconds] [Time since reference or first frame: 0.032657000 seconds] Frame Number: 515 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 114.98.128.240 (114.98.128.240), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0xa2ec (41708) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xb1ff [correct] [Good: True] [Bad: False] Source: 114.98.128.240 (114.98.128.240) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0xfe2f [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 516 0.032695000 114.98.128.240 [CENSORED] SSDP 332 HTTP/1.1 200 OK Frame 516: 332 bytes on wire (2656 bits), 332 bytes captured (2656 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.633795000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.633795000 seconds [Time delta from previous captured frame: 0.000038000 seconds] [Time delta from previous displayed frame: 0.000038000 seconds] [Time since reference or first frame: 0.032695000 seconds] Frame Number: 516 Frame Length: 332 bytes (2656 bits) Capture Length: 332 bytes (2656 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 114.98.128.240 (114.98.128.240), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 318 Identification: 0xa2ed (41709) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xb1e8 [correct] [Good: True] [Bad: False] Source: 114.98.128.240 (114.98.128.240) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 298 Checksum: 0x3a52 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000::urn:schemas-upnp-org:device:WANDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 517 0.032735000 114.98.128.240 [CENSORED] SSDP 364 HTTP/1.1 200 OK Frame 517: 364 bytes on wire (2912 bits), 364 bytes captured (2912 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.633835000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.633835000 seconds [Time delta from previous captured frame: 0.000040000 seconds] [Time delta from previous displayed frame: 0.000040000 seconds] [Time since reference or first frame: 0.032735000 seconds] Frame Number: 517 Frame Length: 364 bytes (2912 bits) Capture Length: 364 bytes (2912 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 114.98.128.240 (114.98.128.240), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 350 Identification: 0xa2ee (41710) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xb1c7 [correct] [Good: True] [Bad: False] Source: 114.98.128.240 (114.98.128.240) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 330 Checksum: 0xb28a [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 518 0.032762000 114.98.128.240 [CENSORED] SSDP 330 HTTP/1.1 200 OK Frame 518: 330 bytes on wire (2640 bits), 330 bytes captured (2640 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.633862000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.633862000 seconds [Time delta from previous captured frame: 0.000027000 seconds] [Time delta from previous displayed frame: 0.000027000 seconds] [Time since reference or first frame: 0.032762000 seconds] Frame Number: 518 Frame Length: 330 bytes (2640 bits) Capture Length: 330 bytes (2640 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 114.98.128.240 (114.98.128.240), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 316 Identification: 0xa2ef (41711) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xb1e8 [correct] [Good: True] [Bad: False] Source: 114.98.128.240 (114.98.128.240) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 296 Checksum: 0x3431 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 519 0.032799000 118.75.22.116 [CENSORED] SSDP 368 HTTP/1.1 200 OK Frame 519: 368 bytes on wire (2944 bits), 368 bytes captured (2944 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.633899000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.633899000 seconds [Time delta from previous captured frame: 0.000037000 seconds] [Time delta from previous displayed frame: 0.000037000 seconds] [Time since reference or first frame: 0.032799000 seconds] Frame Number: 519 Frame Length: 368 bytes (2944 bits) Capture Length: 368 bytes (2944 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 118.75.22.116 (118.75.22.116), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 354 Identification: 0xdd88 (56712) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xddac [correct] [Good: True] [Bad: False] Source: 118.75.22.116 (118.75.22.116) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 334 Checksum: 0x5bdf [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 520 0.032830000 118.75.22.116 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 520: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.633930000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.633930000 seconds [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.032830000 seconds] Frame Number: 520 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 118.75.22.116 (118.75.22.116), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0xdd89 (56713) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xddb7 [correct] [Good: True] [Bad: False] Source: 118.75.22.116 (118.75.22.116) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0x8ac1 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANIPConnection:1\r\n \r\n No. Time Source Destination Protocol Length Info 521 0.032858000 67.181.133.142 [CENSORED] SSDP 326 HTTP/1.1 200 OK Frame 521: 326 bytes on wire (2608 bits), 326 bytes captured (2608 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.633958000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.633958000 seconds [Time delta from previous captured frame: 0.000028000 seconds] [Time delta from previous displayed frame: 0.000028000 seconds] [Time since reference or first frame: 0.032858000 seconds] Frame Number: 521 Frame Length: 326 bytes (2608 bits) Capture Length: 326 bytes (2608 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 67.181.133.142 (67.181.133.142), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 312 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x3eeb [correct] [Good: True] [Bad: False] Source: 67.181.133.142 (67.181.133.142) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 292 Checksum: 0xf88f [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n USN: uuid:5d6106d6-1dd2-11b2-9f7c-cef1fe4faa93::urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n \r\n No. Time Source Destination Protocol Length Info 522 0.032896000 122.138.117.208 [CENSORED] SSDP 362 HTTP/1.1 200 OK Frame 522: 362 bytes on wire (2896 bits), 362 bytes captured (2896 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.633996000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.633996000 seconds [Time delta from previous captured frame: 0.000038000 seconds] [Time delta from previous displayed frame: 0.000038000 seconds] [Time since reference or first frame: 0.032896000 seconds] Frame Number: 522 Frame Length: 362 bytes (2896 bits) Capture Length: 362 bytes (2896 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 122.138.117.208 (122.138.117.208), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 348 Identification: 0x4efd (20221) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x08a3 [correct] [Good: True] [Bad: False] Source: 122.138.117.208 (122.138.117.208) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 328 Checksum: 0x3d95 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 523 0.032927000 114.98.128.240 [CENSORED] SSDP 362 HTTP/1.1 200 OK Frame 523: 362 bytes on wire (2896 bits), 362 bytes captured (2896 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.634027000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.634027000 seconds [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.032927000 seconds] Frame Number: 523 Frame Length: 362 bytes (2896 bits) Capture Length: 362 bytes (2896 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 114.98.128.240 (114.98.128.240), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 348 Identification: 0xa2f0 (41712) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xb1c7 [correct] [Good: True] [Bad: False] Source: 114.98.128.240 (114.98.128.240) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 328 Checksum: 0x3a9d [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 524 0.032961000 183.230.114.49 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 524: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.634061000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.634061000 seconds [Time delta from previous captured frame: 0.000034000 seconds] [Time delta from previous displayed frame: 0.000034000 seconds] [Time since reference or first frame: 0.032961000 seconds] Frame Number: 524 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 183.230.114.49 (183.230.114.49), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0xc9d9 (51673) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x551f [correct] [Good: True] [Bad: False] Source: 183.230.114.49 (183.230.114.49) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0xed68 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANIPConnection:1\r\n \r\n No. Time Source Destination Protocol Length Info 525 0.033006000 69.207.20.194 [CENSORED] SSDP 331 HTTP/1.1 200 OK Frame 525: 331 bytes on wire (2648 bits), 331 bytes captured (2648 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.634106000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.634106000 seconds [Time delta from previous captured frame: 0.000045000 seconds] [Time delta from previous displayed frame: 0.000045000 seconds] [Time since reference or first frame: 0.033006000 seconds] Frame Number: 525 Frame Length: 331 bytes (2648 bits) Capture Length: 331 bytes (2648 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 69.207.20.194 (69.207.20.194), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 317 Identification: 0xdac8 (56008) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0xcdcf [correct] [Good: True] [Bad: False] Source: 69.207.20.194 (69.207.20.194) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 297 Checksum: 0xc556 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n USN: uuid:c265d5d5-bd1a-43e9-987e-cf61c9d18ec5::urn:schemas-upnp-org:service:WANIPConnection:1\r\n EXT:\r\n SERVER: TBS/R2 UPnP/1.0 MiniUPnPd/1.2\r\n LOCATION: http://192.168.2.1:57986/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 526 0.033042000 69.207.20.194 [CENSORED] SSDP 333 HTTP/1.1 200 OK Frame 526: 333 bytes on wire (2664 bits), 333 bytes captured (2664 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.634142000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.634142000 seconds [Time delta from previous captured frame: 0.000036000 seconds] [Time delta from previous displayed frame: 0.000036000 seconds] [Time since reference or first frame: 0.033042000 seconds] Frame Number: 526 Frame Length: 333 bytes (2664 bits) Capture Length: 333 bytes (2664 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 69.207.20.194 (69.207.20.194), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 319 Identification: 0xdac9 (56009) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0xcdcc [correct] [Good: True] [Bad: False] Source: 69.207.20.194 (69.207.20.194) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 299 Checksum: 0x1257 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANPPPConnection:1\r\n USN: uuid:c265d5d5-bd1a-43e9-987e-cf61c9d18ec5::urn:schemas-upnp-org:service:WANPPPConnection:1\r\n EXT:\r\n SERVER: TBS/R2 UPnP/1.0 MiniUPnPd/1.2\r\n LOCATION: http://192.168.2.1:57986/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 527 0.033066000 69.204.177.116 [CENSORED] SSDP 271 HTTP/1.1 200 OK Frame 527: 271 bytes on wire (2168 bits), 271 bytes captured (2168 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.634166000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.634166000 seconds [Time delta from previous captured frame: 0.000024000 seconds] [Time delta from previous displayed frame: 0.000024000 seconds] [Time since reference or first frame: 0.033066000 seconds] Frame Number: 527 Frame Length: 271 bytes (2168 bits) Capture Length: 271 bytes (2168 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 69.204.177.116 (69.204.177.116), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 257 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x0c25 [correct] [Good: True] [Bad: False] Source: 69.204.177.116 (69.204.177.116) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 237 Checksum: 0x62f9 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: upnp:rootdevice\r\n USN: uuid:3e6a7718-1d2e-44f4-b1a9-97c86a59e419::upnp:rootdevice\r\n EXT:\r\n SERVER: ASUSTeK UPnP/1.0 MiniUPnPd/1.4\r\n LOCATION: http://192.168.1.69:35301/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 528 0.033113000 114.98.128.240 [CENSORED] SSDP 362 HTTP/1.1 200 OK Frame 528: 362 bytes on wire (2896 bits), 362 bytes captured (2896 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.634213000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.634213000 seconds [Time delta from previous captured frame: 0.000047000 seconds] [Time delta from previous displayed frame: 0.000047000 seconds] [Time since reference or first frame: 0.033113000 seconds] Frame Number: 528 Frame Length: 362 bytes (2896 bits) Capture Length: 362 bytes (2896 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 114.98.128.240 (114.98.128.240), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 348 Identification: 0xa2fb (41723) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xb1bc [correct] [Good: True] [Bad: False] Source: 114.98.128.240 (114.98.128.240) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 328 Checksum: 0x3a9d [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 529 0.033158000 172.250.81.187 [CENSORED] SSDP 341 HTTP/1.1 200 OK Frame 529: 341 bytes on wire (2728 bits), 341 bytes captured (2728 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.634258000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.634258000 seconds [Time delta from previous captured frame: 0.000045000 seconds] [Time delta from previous displayed frame: 0.000045000 seconds] [Time since reference or first frame: 0.033158000 seconds] Frame Number: 529 Frame Length: 341 bytes (2728 bits) Capture Length: 341 bytes (2728 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 172.250.81.187 (172.250.81.187), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 327 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 248 Protocol: UDP (17) Header checksum: 0x076a [correct] [Good: True] [Bad: False] Source: 172.250.81.187 (172.250.81.187) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 307 Checksum: 0x0049 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://10.0.0.1:65535/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n USN: uuid:7d7afc06-1dd2-11b2-bd74-d45da9bf24fd::urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n \r\n No. Time Source Destination Protocol Length Info 530 0.033191000 101.69.151.35 [CENSORED] SSDP 332 HTTP/1.1 200 OK Frame 530: 332 bytes on wire (2656 bits), 332 bytes captured (2656 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.634291000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.634291000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.033191000 seconds] Frame Number: 530 Frame Length: 332 bytes (2656 bits) Capture Length: 332 bytes (2656 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 101.69.151.35 (101.69.151.35), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 318 Identification: 0x319a (12698) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x1a26 [correct] [Good: True] [Bad: False] Source: 101.69.151.35 (101.69.151.35) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 298 Checksum: 0x313c [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000::urn:schemas-upnp-org:device:WANDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 531 0.033217000 172.250.81.187 [CENSORED] SSDP 286 HTTP/1.1 200 OK Frame 531: 286 bytes on wire (2288 bits), 286 bytes captured (2288 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.634317000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.634317000 seconds [Time delta from previous captured frame: 0.000026000 seconds] [Time delta from previous displayed frame: 0.000026000 seconds] [Time since reference or first frame: 0.033217000 seconds] Frame Number: 531 Frame Length: 286 bytes (2288 bits) Capture Length: 286 bytes (2288 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 172.250.81.187 (172.250.81.187), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 272 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 248 Protocol: UDP (17) Header checksum: 0x07a1 [correct] [Good: True] [Bad: False] Source: 172.250.81.187 (172.250.81.187) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 252 Checksum: 0x3fbe [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://10.0.0.1:65535/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: uuid:7d7afc06-1dd2-11b2-bd74-d45da9bf24fd\r\n USN: uuid:7d7afc06-1dd2-11b2-bd74-d45da9bf24fd\r\n \r\n No. Time Source Destination Protocol Length Info 532 0.033807000 60.184.112.149 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 532: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.634907000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.634907000 seconds [Time delta from previous captured frame: 0.000590000 seconds] [Time delta from previous displayed frame: 0.000590000 seconds] [Time since reference or first frame: 0.033807000 seconds] Frame Number: 532 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 60.184.112.149 (60.184.112.149), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x30 (DSCP 0x0c: Assured Forwarding 12; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0011 00.. = Differentiated Services Codepoint: Assured Forwarding 12 (0x0c) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0xec5d (60509) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 242 Protocol: UDP (17) Header checksum: 0xb235 [correct] [Good: True] [Bad: False] Source: 60.184.112.149 (60.184.112.149) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0x6958 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.2.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 533 0.033829000 60.184.112.149 [CENSORED] SSDP 284 HTTP/1.1 200 OK Frame 533: 284 bytes on wire (2272 bits), 284 bytes captured (2272 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.634929000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.634929000 seconds [Time delta from previous captured frame: 0.000022000 seconds] [Time delta from previous displayed frame: 0.000022000 seconds] [Time since reference or first frame: 0.033829000 seconds] Frame Number: 533 Frame Length: 284 bytes (2272 bits) Capture Length: 284 bytes (2272 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 60.184.112.149 (60.184.112.149), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x30 (DSCP 0x0c: Assured Forwarding 12; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0011 00.. = Differentiated Services Codepoint: Assured Forwarding 12 (0x0c) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 270 Identification: 0xec5e (60510) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 242 Protocol: UDP (17) Header checksum: 0xb27c [correct] [Good: True] [Bad: False] Source: 60.184.112.149 (60.184.112.149) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 250 Checksum: 0xd856 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.2.1:80/UPnP/IGD.xml\r\n ST: upnp:rootdevice\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 534 0.033873000 60.184.112.149 [CENSORED] SSDP 348 HTTP/1.1 200 OK Frame 534: 348 bytes on wire (2784 bits), 348 bytes captured (2784 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.634973000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.634973000 seconds [Time delta from previous captured frame: 0.000044000 seconds] [Time delta from previous displayed frame: 0.000044000 seconds] [Time since reference or first frame: 0.033873000 seconds] Frame Number: 534 Frame Length: 348 bytes (2784 bits) Capture Length: 348 bytes (2784 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 60.184.112.149 (60.184.112.149), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x30 (DSCP 0x0c: Assured Forwarding 12; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0011 00.. = Differentiated Services Codepoint: Assured Forwarding 12 (0x0c) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 334 Identification: 0xec5f (60511) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 242 Protocol: UDP (17) Header checksum: 0xb23b [correct] [Good: True] [Bad: False] Source: 60.184.112.149 (60.184.112.149) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 314 Checksum: 0x1211 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.2.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n \r\n No. Time Source Destination Protocol Length Info 535 0.033908000 46.43.68.46 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 535: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.635008000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.635008000 seconds [Time delta from previous captured frame: 0.000035000 seconds] [Time delta from previous displayed frame: 0.000035000 seconds] [Time since reference or first frame: 0.033908000 seconds] Frame Number: 535 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 46.43.68.46 (46.43.68.46), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0x1782 (6018) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x793c [correct] [Good: True] [Bad: False] Source: 46.43.68.46 (46.43.68.46) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0x643c [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-wifialliance-org:device:WFADevice:\r\n USN: uuid:3ff893c2-1dd2-11b2-b7af-d800a68aaf4b::urn:schemas-wifialliance-org:device:WFADevice:\r\n \r\n No. Time Source Destination Protocol Length Info 536 0.033936000 60.184.112.149 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 536: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.635036000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.635036000 seconds [Time delta from previous captured frame: 0.000028000 seconds] [Time delta from previous displayed frame: 0.000028000 seconds] [Time since reference or first frame: 0.033936000 seconds] Frame Number: 536 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 60.184.112.149 (60.184.112.149), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x30 (DSCP 0x0c: Assured Forwarding 12; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0011 00.. = Differentiated Services Codepoint: Assured Forwarding 12 (0x0c) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0xec60 (60512) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 242 Protocol: UDP (17) Header checksum: 0xb260 [correct] [Good: True] [Bad: False] Source: 60.184.112.149 (60.184.112.149) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0x4434 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.2.1:80/UPnP/IGD.xml\r\n ST: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 537 0.033972000 60.184.112.149 [CENSORED] SSDP 332 HTTP/1.1 200 OK Frame 537: 332 bytes on wire (2656 bits), 332 bytes captured (2656 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.635072000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.635072000 seconds [Time delta from previous captured frame: 0.000036000 seconds] [Time delta from previous displayed frame: 0.000036000 seconds] [Time since reference or first frame: 0.033972000 seconds] Frame Number: 537 Frame Length: 332 bytes (2656 bits) Capture Length: 332 bytes (2656 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 60.184.112.149 (60.184.112.149), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x30 (DSCP 0x0c: Assured Forwarding 12; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0011 00.. = Differentiated Services Codepoint: Assured Forwarding 12 (0x0c) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 318 Identification: 0xec61 (60513) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 242 Protocol: UDP (17) Header checksum: 0xb249 [correct] [Good: True] [Bad: False] Source: 60.184.112.149 (60.184.112.149) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 298 Checksum: 0x8056 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.2.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000::urn:schemas-upnp-org:device:WANDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 538 0.034012000 60.184.112.149 [CENSORED] SSDP 364 HTTP/1.1 200 OK Frame 538: 364 bytes on wire (2912 bits), 364 bytes captured (2912 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.635112000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.635112000 seconds [Time delta from previous captured frame: 0.000040000 seconds] [Time delta from previous displayed frame: 0.000040000 seconds] [Time since reference or first frame: 0.034012000 seconds] Frame Number: 538 Frame Length: 364 bytes (2912 bits) Capture Length: 364 bytes (2912 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 60.184.112.149 (60.184.112.149), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x30 (DSCP 0x0c: Assured Forwarding 12; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0011 00.. = Differentiated Services Codepoint: Assured Forwarding 12 (0x0c) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 350 Identification: 0xec62 (60514) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 242 Protocol: UDP (17) Header checksum: 0xb228 [correct] [Good: True] [Bad: False] Source: 60.184.112.149 (60.184.112.149) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 330 Checksum: 0xf88e [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.2.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 539 0.034043000 182.216.229.201 [CENSORED] SSDP 352 HTTP/1.1 200 OK Frame 539: 352 bytes on wire (2816 bits), 352 bytes captured (2816 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.635143000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.635143000 seconds [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.034043000 seconds] Frame Number: 539 Frame Length: 352 bytes (2816 bits) Capture Length: 352 bytes (2816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 182.216.229.201 (182.216.229.201), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 338 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x6c72 [correct] [Good: True] [Bad: False] Source: 182.216.229.201 (182.216.229.201) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 318 Checksum: 0xfc70 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:4409/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 540 0.034076000 94.215.236.9 [CENSORED] SSDP 334 HTTP/1.1 200 OK Frame 540: 334 bytes on wire (2672 bits), 334 bytes captured (2672 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.635176000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.635176000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.034076000 seconds] Frame Number: 540 Frame Length: 334 bytes (2672 bits) Capture Length: 334 bytes (2672 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 94.215.236.9 (94.215.236.9), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 320 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 248 Protocol: UDP (17) Header checksum: 0xbb45 [correct] [Good: True] [Bad: False] Source: 94.215.236.9 (94.215.236.9) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 300 Checksum: 0x6a88 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:service:WANIPConnection:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.8.1:4066/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 541 0.034100000 75.132.170.217 [CENSORED] SSDP 280 HTTP/1.1 200 OK Frame 541: 280 bytes on wire (2240 bits), 280 bytes captured (2240 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.635200000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.635200000 seconds [Time delta from previous captured frame: 0.000024000 seconds] [Time delta from previous displayed frame: 0.000024000 seconds] [Time since reference or first frame: 0.034100000 seconds] Frame Number: 541 Frame Length: 280 bytes (2240 bits) Capture Length: 280 bytes (2240 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 75.132.170.217 (75.132.170.217), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 266 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x0cff [correct] [Good: True] [Bad: False] Source: 75.132.170.217 (75.132.170.217) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 246 Checksum: 0x35ea [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65530/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: upnp:rootdevice\r\n USN: uuid:61264fe2-1dd2-11b2-88f5-b57c88b376c0::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 542 0.034144000 94.215.236.9 [CENSORED] SSDP 336 HTTP/1.1 200 OK Frame 542: 336 bytes on wire (2688 bits), 336 bytes captured (2688 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.635244000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.635244000 seconds [Time delta from previous captured frame: 0.000044000 seconds] [Time delta from previous displayed frame: 0.000044000 seconds] [Time since reference or first frame: 0.034144000 seconds] Frame Number: 542 Frame Length: 336 bytes (2688 bits) Capture Length: 336 bytes (2688 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 94.215.236.9 (94.215.236.9), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 322 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 248 Protocol: UDP (17) Header checksum: 0xbb43 [correct] [Good: True] [Bad: False] Source: 94.215.236.9 (94.215.236.9) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 302 Checksum: 0x93ac [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANPPPConnection:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:service:WANPPPConnection:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.8.1:4066/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 543 0.034177000 94.215.236.9 [CENSORED] SSDP 336 HTTP/1.1 200 OK Frame 543: 336 bytes on wire (2688 bits), 336 bytes captured (2688 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.635277000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.635277000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.034177000 seconds] Frame Number: 543 Frame Length: 336 bytes (2688 bits) Capture Length: 336 bytes (2688 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 94.215.236.9 (94.215.236.9), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 322 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 248 Protocol: UDP (17) Header checksum: 0xbb43 [correct] [Good: True] [Bad: False] Source: 94.215.236.9 (94.215.236.9) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 302 Checksum: 0x364f [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.8.1:4066/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 544 0.034212000 182.216.229.201 [CENSORED] SSDP 334 HTTP/1.1 200 OK Frame 544: 334 bytes on wire (2672 bits), 334 bytes captured (2672 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.635312000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.635312000 seconds [Time delta from previous captured frame: 0.000035000 seconds] [Time delta from previous displayed frame: 0.000035000 seconds] [Time since reference or first frame: 0.034212000 seconds] Frame Number: 544 Frame Length: 334 bytes (2672 bits) Capture Length: 334 bytes (2672 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 182.216.229.201 (182.216.229.201), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 320 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x6c84 [correct] [Good: True] [Bad: False] Source: 182.216.229.201 (182.216.229.201) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 300 Checksum: 0x26c0 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:service:WANIPConnection:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:4409/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 545 0.034242000 182.216.229.201 [CENSORED] SSDP 336 HTTP/1.1 200 OK Frame 545: 336 bytes on wire (2688 bits), 336 bytes captured (2688 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.635342000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.635342000 seconds [Time delta from previous captured frame: 0.000030000 seconds] [Time delta from previous displayed frame: 0.000030000 seconds] [Time since reference or first frame: 0.034242000 seconds] Frame Number: 545 Frame Length: 336 bytes (2688 bits) Capture Length: 336 bytes (2688 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 182.216.229.201 (182.216.229.201), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 322 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x6c82 [correct] [Good: True] [Bad: False] Source: 182.216.229.201 (182.216.229.201) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 302 Checksum: 0x4fe4 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANPPPConnection:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:service:WANPPPConnection:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:4409/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 546 0.034284000 115.222.155.36 [CENSORED] SSDP 362 HTTP/1.1 200 OK Frame 546: 362 bytes on wire (2896 bits), 362 bytes captured (2896 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.635384000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.635384000 seconds [Time delta from previous captured frame: 0.000042000 seconds] [Time delta from previous displayed frame: 0.000042000 seconds] [Time since reference or first frame: 0.034284000 seconds] Frame Number: 546 Frame Length: 362 bytes (2896 bits) Capture Length: 362 bytes (2896 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 115.222.155.36 (115.222.155.36), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 348 Identification: 0x2f1d (12061) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x09eb [correct] [Good: True] [Bad: False] Source: 115.222.155.36 (115.222.155.36) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 328 Checksum: 0x1eed [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 547 0.034318000 115.222.155.36 [CENSORED] SSDP 368 HTTP/1.1 200 OK Frame 547: 368 bytes on wire (2944 bits), 368 bytes captured (2944 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.635418000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.635418000 seconds [Time delta from previous captured frame: 0.000034000 seconds] [Time delta from previous displayed frame: 0.000034000 seconds] [Time since reference or first frame: 0.034318000 seconds] Frame Number: 547 Frame Length: 368 bytes (2944 bits) Capture Length: 368 bytes (2944 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 115.222.155.36 (115.222.155.36), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 354 Identification: 0x2f1e (12062) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x09e4 [correct] [Good: True] [Bad: False] Source: 115.222.155.36 (115.222.155.36) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 334 Checksum: 0xd99b [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 548 0.034350000 46.43.68.46 [CENSORED] SSDP 353 HTTP/1.1 200 OK Frame 548: 353 bytes on wire (2824 bits), 353 bytes captured (2824 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.635450000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.635450000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.034350000 seconds] Frame Number: 548 Frame Length: 353 bytes (2824 bits) Capture Length: 353 bytes (2824 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 46.43.68.46 (46.43.68.46), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 339 Identification: 0x1792 (6034) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x7928 [correct] [Good: True] [Bad: False] Source: 46.43.68.46 (46.43.68.46) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 319 Checksum: 0xa0d1 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:\r\n USN: uuid:3ff4ebb4-1dd2-11b2-b38a-d9965fb6ee7a::urn:schemas-upnp-org:device:WANConnectionDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 549 0.034382000 46.43.68.46 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 549: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.635482000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.635482000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.034382000 seconds] Frame Number: 549 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 46.43.68.46 (46.43.68.46), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0x1793 (6035) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x792b [correct] [Good: True] [Bad: False] Source: 46.43.68.46 (46.43.68.46) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0xfc3d [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANPPPConnection:\r\n USN: uuid:3ff4ebb4-1dd2-11b2-b38a-d9965fb6ee7a::urn:schemas-upnp-org:service:WANPPPConnection:\r\n \r\n No. Time Source Destination Protocol Length Info 550 0.034417000 46.43.68.46 [CENSORED] SSDP 347 HTTP/1.1 200 OK Frame 550: 347 bytes on wire (2776 bits), 347 bytes captured (2776 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.635517000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.635517000 seconds [Time delta from previous captured frame: 0.000035000 seconds] [Time delta from previous displayed frame: 0.000035000 seconds] [Time since reference or first frame: 0.034417000 seconds] Frame Number: 550 Frame Length: 347 bytes (2776 bits) Capture Length: 347 bytes (2776 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 46.43.68.46 (46.43.68.46), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 333 Identification: 0x1794 (6036) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x792c [correct] [Good: True] [Bad: False] Source: 46.43.68.46 (46.43.68.46) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 313 Checksum: 0xc923 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:\r\n USN: uuid:3ff4ebb4-1dd2-11b2-b38a-d9965fb6ee7a::urn:schemas-upnp-org:service:WANIPConnection:\r\n \r\n No. Time Source Destination Protocol Length Info 551 0.034451000 46.43.68.46 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 551: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.635551000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.635551000 seconds [Time delta from previous captured frame: 0.000034000 seconds] [Time delta from previous displayed frame: 0.000034000 seconds] [Time since reference or first frame: 0.034451000 seconds] Frame Number: 551 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 46.43.68.46 (46.43.68.46), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0x1795 (6037) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x7929 [correct] [Good: True] [Bad: False] Source: 46.43.68.46 (46.43.68.46) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0x76f5 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:\r\n USN: uuid:3fde6b0a-1dd2-11b2-910e-fdd227bbead1::urn:schemas-upnp-org:service:Layer3Forwarding:\r\n \r\n No. Time Source Destination Protocol Length Info 552 0.034496000 27.227.85.71 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 552: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.635596000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.635596000 seconds [Time delta from previous captured frame: 0.000045000 seconds] [Time delta from previous displayed frame: 0.000045000 seconds] [Time since reference or first frame: 0.034496000 seconds] Frame Number: 552 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 27.227.85.71 (27.227.85.71), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0xbf1c (48924) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x17f8 [correct] [Good: True] [Bad: False] Source: 27.227.85.71 (27.227.85.71) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0x8058 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 553 0.034533000 173.21.236.154 [CENSORED] SSDP 334 HTTP/1.1 200 OK Frame 553: 334 bytes on wire (2672 bits), 334 bytes captured (2672 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.635633000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.635633000 seconds [Time delta from previous captured frame: 0.000037000 seconds] [Time delta from previous displayed frame: 0.000037000 seconds] [Time since reference or first frame: 0.034533000 seconds] Frame Number: 553 Frame Length: 334 bytes (2672 bits) Capture Length: 334 bytes (2672 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 173.21.236.154 (173.21.236.154), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 320 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (17) Header checksum: 0x6b76 [correct] [Good: True] [Bad: False] Source: 173.21.236.154 (173.21.236.154) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 300 Checksum: 0x8823 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n USN: uuid:5d62e442-1dd2-11b2-92e8-c37cea2d6178::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 554 0.034568000 173.21.236.154 [CENSORED] SSDP 330 HTTP/1.1 200 OK Frame 554: 330 bytes on wire (2640 bits), 330 bytes captured (2640 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.635668000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.635668000 seconds [Time delta from previous captured frame: 0.000035000 seconds] [Time delta from previous displayed frame: 0.000035000 seconds] [Time since reference or first frame: 0.034568000 seconds] Frame Number: 554 Frame Length: 330 bytes (2640 bits) Capture Length: 330 bytes (2640 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 173.21.236.154 (173.21.236.154), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 316 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (17) Header checksum: 0x6b7a [correct] [Good: True] [Bad: False] Source: 173.21.236.154 (173.21.236.154) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 296 Checksum: 0x9d5e [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n USN: uuid:5d658666-1dd2-11b2-8bd0-b7394e1f72ca::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 555 0.034603000 72.175.181.193 [CENSORED] SSDP 347 HTTP/1.1 200 OK Frame 555: 347 bytes on wire (2776 bits), 347 bytes captured (2776 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.635703000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.635703000 seconds [Time delta from previous captured frame: 0.000035000 seconds] [Time delta from previous displayed frame: 0.000035000 seconds] [Time since reference or first frame: 0.034603000 seconds] Frame Number: 555 Frame Length: 347 bytes (2776 bits) Capture Length: 347 bytes (2776 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 72.175.181.193 (72.175.181.193), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x28 (DSCP 0x0a: Assured Forwarding 11; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 10.. = Differentiated Services Codepoint: Assured Forwarding 11 (0x0a) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 333 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x0481 [correct] [Good: True] [Bad: False] Source: 72.175.181.193 (72.175.181.193) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 313 Checksum: 0x5fc6 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n USN: uuid:5a34308c-1a2c-4546-ac5d-7663dd01dca1::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n EXT:\r\n SERVER: Ubuntu/lucid UPnP/1.0 MiniUPnPd/1.4\r\n LOCATION: http://192.168.0.1:63493/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 556 0.034636000 72.175.181.193 [CENSORED] SSDP 343 HTTP/1.1 200 OK Frame 556: 343 bytes on wire (2744 bits), 343 bytes captured (2744 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.635736000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.635736000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.034636000 seconds] Frame Number: 556 Frame Length: 343 bytes (2744 bits) Capture Length: 343 bytes (2744 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 72.175.181.193 (72.175.181.193), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x28 (DSCP 0x0a: Assured Forwarding 11; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 10.. = Differentiated Services Codepoint: Assured Forwarding 11 (0x0a) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 329 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x0485 [correct] [Good: True] [Bad: False] Source: 72.175.181.193 (72.175.181.193) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 309 Checksum: 0x85f4 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n USN: uuid:5a34308c-1a2c-4546-ac5d-7663dd01dca1::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n EXT:\r\n SERVER: Ubuntu/lucid UPnP/1.0 MiniUPnPd/1.4\r\n LOCATION: http://192.168.0.1:63493/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 557 0.034666000 42.102.194.176 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 557: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.635766000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.635766000 seconds [Time delta from previous captured frame: 0.000030000 seconds] [Time delta from previous displayed frame: 0.000030000 seconds] [Time since reference or first frame: 0.034666000 seconds] Frame Number: 557 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 42.102.194.176 (42.102.194.176), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0xcbcd (52173) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x8f4a [correct] [Good: True] [Bad: False] Source: 42.102.194.176 (42.102.194.176) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0x046c [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 558 0.034710000 24.4.18.157 [CENSORED] SSDP 365 HTTP/1.1 200 OK Frame 558: 365 bytes on wire (2920 bits), 365 bytes captured (2920 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.635810000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.635810000 seconds [Time delta from previous captured frame: 0.000044000 seconds] [Time delta from previous displayed frame: 0.000044000 seconds] [Time since reference or first frame: 0.034710000 seconds] Frame Number: 558 Frame Length: 365 bytes (2920 bits) Capture Length: 365 bytes (2920 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 24.4.18.157 (24.4.18.157), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 351 Identification: 0xcae8 (51944) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x137e [correct] [Good: True] [Bad: False] Source: 24.4.18.157 (24.4.18.157) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 331 Checksum: 0x476f [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:\r\n USN: uuid:22222222-2222-2222-2222-222222222222::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:\r\n \r\n No. Time Source Destination Protocol Length Info 559 0.034742000 24.4.18.157 [CENSORED] SSDP 353 HTTP/1.1 200 OK Frame 559: 353 bytes on wire (2824 bits), 353 bytes captured (2824 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.635842000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.635842000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.034742000 seconds] Frame Number: 559 Frame Length: 353 bytes (2824 bits) Capture Length: 353 bytes (2824 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 24.4.18.157 (24.4.18.157), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 339 Identification: 0xcae9 (51945) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x1389 [correct] [Good: True] [Bad: False] Source: 24.4.18.157 (24.4.18.157) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 319 Checksum: 0x4d48 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:\r\n USN: uuid:33333333-3333-3333-3333-333333333333::urn:schemas-upnp-org:device:WANConnectionDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 560 0.034770000 72.175.181.193 [CENSORED] SSDP 323 HTTP/1.1 200 OK Frame 560: 323 bytes on wire (2584 bits), 323 bytes captured (2584 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.635870000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.635870000 seconds [Time delta from previous captured frame: 0.000028000 seconds] [Time delta from previous displayed frame: 0.000028000 seconds] [Time since reference or first frame: 0.034770000 seconds] Frame Number: 560 Frame Length: 323 bytes (2584 bits) Capture Length: 323 bytes (2584 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 72.175.181.193 (72.175.181.193), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x28 (DSCP 0x0a: Assured Forwarding 11; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 10.. = Differentiated Services Codepoint: Assured Forwarding 11 (0x0a) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 309 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x0499 [correct] [Good: True] [Bad: False] Source: 72.175.181.193 (72.175.181.193) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 289 Checksum: 0x9a30 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:WANDevice:1\r\n USN: uuid:5a34308c-1a2c-4546-ac5d-7663dd01dca1::urn:schemas-upnp-org:device:WANDevice:1\r\n EXT:\r\n SERVER: Ubuntu/lucid UPnP/1.0 MiniUPnPd/1.4\r\n LOCATION: http://192.168.0.1:63493/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 561 0.034808000 72.175.181.193 [CENSORED] SSDP 355 HTTP/1.1 200 OK Frame 561: 355 bytes on wire (2840 bits), 355 bytes captured (2840 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.635908000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.635908000 seconds [Time delta from previous captured frame: 0.000038000 seconds] [Time delta from previous displayed frame: 0.000038000 seconds] [Time since reference or first frame: 0.034808000 seconds] Frame Number: 561 Frame Length: 355 bytes (2840 bits) Capture Length: 355 bytes (2840 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 72.175.181.193 (72.175.181.193), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x28 (DSCP 0x0a: Assured Forwarding 11; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 10.. = Differentiated Services Codepoint: Assured Forwarding 11 (0x0a) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 341 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x0479 [correct] [Good: True] [Bad: False] Source: 72.175.181.193 (72.175.181.193) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 321 Checksum: 0x1269 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n USN: uuid:5a34308c-1a2c-4546-ac5d-7663dd01dca1::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n EXT:\r\n SERVER: Ubuntu/lucid UPnP/1.0 MiniUPnPd/1.4\r\n LOCATION: http://192.168.0.1:63493/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 562 0.034841000 24.4.18.157 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 562: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.635941000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.635941000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.034841000 seconds] Frame Number: 562 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 24.4.18.157 (24.4.18.157), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0xcaea (51946) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x138c [correct] [Good: True] [Bad: False] Source: 24.4.18.157 (24.4.18.157) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0xa8b4 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANPPPConnection:\r\n USN: uuid:33333333-3333-3333-3333-333333333333::urn:schemas-upnp-org:service:WANPPPConnection:\r\n \r\n No. Time Source Destination Protocol Length Info 563 0.034874000 24.4.18.157 [CENSORED] SSDP 347 HTTP/1.1 200 OK Frame 563: 347 bytes on wire (2776 bits), 347 bytes captured (2776 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.635974000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.635974000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.034874000 seconds] Frame Number: 563 Frame Length: 347 bytes (2776 bits) Capture Length: 347 bytes (2776 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 24.4.18.157 (24.4.18.157), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 333 Identification: 0xcaeb (51947) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x138d [correct] [Good: True] [Bad: False] Source: 24.4.18.157 (24.4.18.157) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 313 Checksum: 0xcf40 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:\r\n USN: uuid:33333333-3333-3333-3333-333333333333::urn:schemas-upnp-org:service:WANIPConnection:\r\n \r\n No. Time Source Destination Protocol Length Info 564 0.034908000 74.139.31.11 [CENSORED] SSDP 346 HTTP/1.1 200 OK Frame 564: 346 bytes on wire (2768 bits), 346 bytes captured (2768 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.636008000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.636008000 seconds [Time delta from previous captured frame: 0.000034000 seconds] [Time delta from previous displayed frame: 0.000034000 seconds] [Time since reference or first frame: 0.034908000 seconds] Frame Number: 564 Frame Length: 346 bytes (2768 bits) Capture Length: 346 bytes (2768 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 74.139.31.11 (74.139.31.11), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 332 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x9984 [correct] [Good: True] [Bad: False] Source: 74.139.31.11 (74.139.31.11) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 312 Checksum: 0x7d52 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n USN: uuid:5a34308c-1a2c-4546-ac5d-7663dd01dca1::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n EXT:\r\n SERVER: Ubuntu/lucid UPnP/1.0 MiniUPnPd/1.4\r\n LOCATION: http://192.168.0.1:3266/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 565 0.034941000 74.139.31.11 [CENSORED] SSDP 342 HTTP/1.1 200 OK Frame 565: 342 bytes on wire (2736 bits), 342 bytes captured (2736 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.636041000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.636041000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.034941000 seconds] Frame Number: 565 Frame Length: 342 bytes (2736 bits) Capture Length: 342 bytes (2736 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 74.139.31.11 (74.139.31.11), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 328 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x9988 [correct] [Good: True] [Bad: False] Source: 74.139.31.11 (74.139.31.11) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 308 Checksum: 0xa380 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n USN: uuid:5a34308c-1a2c-4546-ac5d-7663dd01dca1::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n EXT:\r\n SERVER: Ubuntu/lucid UPnP/1.0 MiniUPnPd/1.4\r\n LOCATION: http://192.168.0.1:3266/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 566 0.034972000 74.139.31.11 [CENSORED] SSDP 322 HTTP/1.1 200 OK Frame 566: 322 bytes on wire (2576 bits), 322 bytes captured (2576 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.636072000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.636072000 seconds [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.034972000 seconds] Frame Number: 566 Frame Length: 322 bytes (2576 bits) Capture Length: 322 bytes (2576 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 74.139.31.11 (74.139.31.11), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 308 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x999c [correct] [Good: True] [Bad: False] Source: 74.139.31.11 (74.139.31.11) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 288 Checksum: 0xb7bc [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:WANDevice:1\r\n USN: uuid:5a34308c-1a2c-4546-ac5d-7663dd01dca1::urn:schemas-upnp-org:device:WANDevice:1\r\n EXT:\r\n SERVER: Ubuntu/lucid UPnP/1.0 MiniUPnPd/1.4\r\n LOCATION: http://192.168.0.1:3266/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 567 0.035009000 74.139.31.11 [CENSORED] SSDP 354 HTTP/1.1 200 OK Frame 567: 354 bytes on wire (2832 bits), 354 bytes captured (2832 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.636109000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.636109000 seconds [Time delta from previous captured frame: 0.000037000 seconds] [Time delta from previous displayed frame: 0.000037000 seconds] [Time since reference or first frame: 0.035009000 seconds] Frame Number: 567 Frame Length: 354 bytes (2832 bits) Capture Length: 354 bytes (2832 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 74.139.31.11 (74.139.31.11), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 340 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x997c [correct] [Good: True] [Bad: False] Source: 74.139.31.11 (74.139.31.11) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 320 Checksum: 0x2ff5 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n USN: uuid:5a34308c-1a2c-4546-ac5d-7663dd01dca1::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n EXT:\r\n SERVER: Ubuntu/lucid UPnP/1.0 MiniUPnPd/1.4\r\n LOCATION: http://192.168.0.1:3266/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 568 0.035042000 74.139.31.11 [CENSORED] SSDP 336 HTTP/1.1 200 OK Frame 568: 336 bytes on wire (2688 bits), 336 bytes captured (2688 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.636142000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.636142000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.035042000 seconds] Frame Number: 568 Frame Length: 336 bytes (2688 bits) Capture Length: 336 bytes (2688 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 74.139.31.11 (74.139.31.11), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 322 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x998e [correct] [Good: True] [Bad: False] Source: 74.139.31.11 (74.139.31.11) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 302 Checksum: 0x2975 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n USN: uuid:5a34308c-1a2c-4546-ac5d-7663dd01dca1::urn:schemas-upnp-org:service:WANIPConnection:1\r\n EXT:\r\n SERVER: Ubuntu/lucid UPnP/1.0 MiniUPnPd/1.4\r\n LOCATION: http://192.168.0.1:3266/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 569 0.035075000 74.139.31.11 [CENSORED] SSDP 338 HTTP/1.1 200 OK Frame 569: 338 bytes on wire (2704 bits), 338 bytes captured (2704 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.636175000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.636175000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.035075000 seconds] Frame Number: 569 Frame Length: 338 bytes (2704 bits) Capture Length: 338 bytes (2704 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 74.139.31.11 (74.139.31.11), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 324 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x998c [correct] [Good: True] [Bad: False] Source: 74.139.31.11 (74.139.31.11) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 304 Checksum: 0x8368 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANPPPConnection:1\r\n USN: uuid:5a34308c-1a2c-4546-ac5d-7663dd01dca1::urn:schemas-upnp-org:service:WANPPPConnection:1\r\n EXT:\r\n SERVER: Ubuntu/lucid UPnP/1.0 MiniUPnPd/1.4\r\n LOCATION: http://192.168.0.1:3266/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 570 0.035110000 74.139.31.11 [CENSORED] SSDP 338 HTTP/1.1 200 OK Frame 570: 338 bytes on wire (2704 bits), 338 bytes captured (2704 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.636210000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.636210000 seconds [Time delta from previous captured frame: 0.000035000 seconds] [Time delta from previous displayed frame: 0.000035000 seconds] [Time since reference or first frame: 0.035110000 seconds] Frame Number: 570 Frame Length: 338 bytes (2704 bits) Capture Length: 338 bytes (2704 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 74.139.31.11 (74.139.31.11), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 324 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x998c [correct] [Good: True] [Bad: False] Source: 74.139.31.11 (74.139.31.11) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 304 Checksum: 0x260b [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n USN: uuid:5a34308c-1a2c-4546-ac5d-7663dd01dca1::urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n EXT:\r\n SERVER: Ubuntu/lucid UPnP/1.0 MiniUPnPd/1.4\r\n LOCATION: http://192.168.0.1:3266/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 571 0.035144000 65.26.245.65 [CENSORED] SSDP 347 HTTP/1.1 200 OK Frame 571: 347 bytes on wire (2776 bits), 347 bytes captured (2776 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.636244000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.636244000 seconds [Time delta from previous captured frame: 0.000034000 seconds] [Time delta from previous displayed frame: 0.000034000 seconds] [Time since reference or first frame: 0.035144000 seconds] Frame Number: 571 Frame Length: 347 bytes (2776 bits) Capture Length: 347 bytes (2776 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 65.26.245.65 (65.26.245.65), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 333 Identification: 0xca01 (51713) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x02bc [correct] [Good: True] [Bad: False] Source: 65.26.245.65 (65.26.245.65) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 313 Checksum: 0xc385 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:\r\n USN: uuid:33333333-3333-3333-3333-333333333333::urn:schemas-upnp-org:service:WANIPConnection:\r\n \r\n No. Time Source Destination Protocol Length Info 572 0.035169000 183.163.38.224 [CENSORED] SSDP 284 HTTP/1.1 200 OK Frame 572: 284 bytes on wire (2272 bits), 284 bytes captured (2272 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.636269000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.636269000 seconds [Time delta from previous captured frame: 0.000025000 seconds] [Time delta from previous displayed frame: 0.000025000 seconds] [Time since reference or first frame: 0.035169000 seconds] Frame Number: 572 Frame Length: 284 bytes (2272 bits) Capture Length: 284 bytes (2272 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 183.163.38.224 (183.163.38.224), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 270 Identification: 0xaf2e (44846) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0xbba6 [correct] [Good: True] [Bad: False] Source: 183.163.38.224 (183.163.38.224) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 250 Checksum: 0xa721 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: upnp:rootdevice\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 573 0.035209000 173.21.236.154 [CENSORED] SSDP 326 HTTP/1.1 200 OK Frame 573: 326 bytes on wire (2608 bits), 326 bytes captured (2608 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.636309000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.636309000 seconds [Time delta from previous captured frame: 0.000040000 seconds] [Time delta from previous displayed frame: 0.000040000 seconds] [Time since reference or first frame: 0.035209000 seconds] Frame Number: 573 Frame Length: 326 bytes (2608 bits) Capture Length: 326 bytes (2608 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 173.21.236.154 (173.21.236.154), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 312 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (17) Header checksum: 0x6b7e [correct] [Good: True] [Bad: False] Source: 173.21.236.154 (173.21.236.154) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 292 Checksum: 0x7d46 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-upnp-org:service:WANPPPConnection:1\r\n USN: uuid:5d658666-1dd2-11b2-8bd0-b7394e1f72ca::urn:schemas-upnp-org:service:WANPPPConnection:1\r\n \r\n No. Time Source Destination Protocol Length Info 574 0.035243000 173.21.236.154 [CENSORED] SSDP 326 HTTP/1.1 200 OK Frame 574: 326 bytes on wire (2608 bits), 326 bytes captured (2608 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.636343000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.636343000 seconds [Time delta from previous captured frame: 0.000034000 seconds] [Time delta from previous displayed frame: 0.000034000 seconds] [Time since reference or first frame: 0.035243000 seconds] Frame Number: 574 Frame Length: 326 bytes (2608 bits) Capture Length: 326 bytes (2608 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 173.21.236.154 (173.21.236.154), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 312 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (17) Header checksum: 0x6b7e [correct] [Good: True] [Bad: False] Source: 173.21.236.154 (173.21.236.154) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 292 Checksum: 0x30dc [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n USN: uuid:5d62e442-1dd2-11b2-92e8-c37cea2d6178::urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n \r\n No. Time Source Destination Protocol Length Info 575 0.035276000 173.21.236.154 [CENSORED] SSDP 326 HTTP/1.1 200 OK Frame 575: 326 bytes on wire (2608 bits), 326 bytes captured (2608 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.636376000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.636376000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.035276000 seconds] Frame Number: 575 Frame Length: 326 bytes (2608 bits) Capture Length: 326 bytes (2608 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 173.21.236.154 (173.21.236.154), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 312 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (17) Header checksum: 0x6b7e [correct] [Good: True] [Bad: False] Source: 173.21.236.154 (173.21.236.154) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 292 Checksum: 0x2cc4 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-wifialliance-org:device:WFADevice:1\r\n USN: uuid:5d66cdfa-1dd2-11b2-9bd8-c979b72eac8f::urn:schemas-wifialliance-org:device:WFADevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 576 0.035312000 173.21.236.154 [CENSORED] SSDP 336 HTTP/1.1 200 OK Frame 576: 336 bytes on wire (2688 bits), 336 bytes captured (2688 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.636412000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.636412000 seconds [Time delta from previous captured frame: 0.000036000 seconds] [Time delta from previous displayed frame: 0.000036000 seconds] [Time since reference or first frame: 0.035312000 seconds] Frame Number: 576 Frame Length: 336 bytes (2688 bits) Capture Length: 336 bytes (2688 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 173.21.236.154 (173.21.236.154), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 322 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (17) Header checksum: 0x6b74 [correct] [Good: True] [Bad: False] Source: 173.21.236.154 (173.21.236.154) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 302 Checksum: 0x99cd [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-wifialliance-org:service:WFAWLANConfig:1\r\n USN: uuid:5d66cdfa-1dd2-11b2-9bd8-c979b72eac8f::urn:schemas-wifialliance-org:service:WFAWLANConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 577 0.035336000 173.21.236.154 [CENSORED] SSDP 271 HTTP/1.1 200 OK Frame 577: 271 bytes on wire (2168 bits), 271 bytes captured (2168 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.636436000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.636436000 seconds [Time delta from previous captured frame: 0.000024000 seconds] [Time delta from previous displayed frame: 0.000024000 seconds] [Time since reference or first frame: 0.035336000 seconds] Frame Number: 577 Frame Length: 271 bytes (2168 bits) Capture Length: 271 bytes (2168 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 173.21.236.154 (173.21.236.154), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 257 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (17) Header checksum: 0x6bb5 [correct] [Good: True] [Bad: False] Source: 173.21.236.154 (173.21.236.154) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 237 Checksum: 0xa10d [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: UPnP/1.0 MiniUPnPd/1.3\r\n ST: uuid:5d62e442-1dd2-11b2-92e8-c37cea2d6178\r\n USN: uuid:5d62e442-1dd2-11b2-92e8-c37cea2d6178\r\n \r\n No. Time Source Destination Protocol Length Info 578 0.035368000 173.21.236.154 [CENSORED] SSDP 271 HTTP/1.1 200 OK Frame 578: 271 bytes on wire (2168 bits), 271 bytes captured (2168 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.636468000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.636468000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.035368000 seconds] Frame Number: 578 Frame Length: 271 bytes (2168 bits) Capture Length: 271 bytes (2168 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 173.21.236.154 (173.21.236.154), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 257 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (17) Header checksum: 0x6bb5 [correct] [Good: True] [Bad: False] Source: 173.21.236.154 (173.21.236.154) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 237 Checksum: 0x6506 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: UPnP/1.0 MiniUPnPd/1.3\r\n ST: uuid:5d643ac2-1dd2-11b2-a10e-85758878e264\r\n USN: uuid:5d643ac2-1dd2-11b2-a10e-85758878e264\r\n \r\n No. Time Source Destination Protocol Length Info 579 0.035416000 122.138.117.208 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 579: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.636516000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.636516000 seconds [Time delta from previous captured frame: 0.000048000 seconds] [Time delta from previous displayed frame: 0.000048000 seconds] [Time since reference or first frame: 0.035416000 seconds] Frame Number: 579 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 122.138.117.208 (122.138.117.208), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0x4f0a (20234) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x089c [correct] [Good: True] [Bad: False] Source: 122.138.117.208 (122.138.117.208) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0x2726 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANIPConnection:1\r\n \r\n No. Time Source Destination Protocol Length Info 580 0.035452000 113.195.18.167 [CENSORED] SSDP 364 HTTP/1.1 200 OK Frame 580: 364 bytes on wire (2912 bits), 364 bytes captured (2912 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.636552000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.636552000 seconds [Time delta from previous captured frame: 0.000036000 seconds] [Time delta from previous displayed frame: 0.000036000 seconds] [Time since reference or first frame: 0.035452000 seconds] Frame Number: 580 Frame Length: 364 bytes (2912 bits) Capture Length: 364 bytes (2912 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 113.195.18.167 (113.195.18.167), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 350 Identification: 0xf073 (61555) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xd31a [correct] [Good: True] [Bad: False] Source: 113.195.18.167 (113.195.18.167) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 330 Checksum: 0x2173 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 581 0.035476000 173.21.236.154 [CENSORED] SSDP 271 HTTP/1.1 200 OK Frame 581: 271 bytes on wire (2168 bits), 271 bytes captured (2168 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.636576000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.636576000 seconds [Time delta from previous captured frame: 0.000024000 seconds] [Time delta from previous displayed frame: 0.000024000 seconds] [Time since reference or first frame: 0.035476000 seconds] Frame Number: 581 Frame Length: 271 bytes (2168 bits) Capture Length: 271 bytes (2168 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 173.21.236.154 (173.21.236.154), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 257 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (17) Header checksum: 0x6bb5 [correct] [Good: True] [Bad: False] Source: 173.21.236.154 (173.21.236.154) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 237 Checksum: 0x7f27 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: UPnP/1.0 MiniUPnPd/1.3\r\n ST: uuid:5d658666-1dd2-11b2-8bd0-b7394e1f72ca\r\n USN: uuid:5d658666-1dd2-11b2-8bd0-b7394e1f72ca\r\n \r\n No. Time Source Destination Protocol Length Info 582 0.035520000 60.215.212.197 [CENSORED] SSDP 362 HTTP/1.1 200 OK Frame 582: 362 bytes on wire (2896 bits), 362 bytes captured (2896 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.636620000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.636620000 seconds [Time delta from previous captured frame: 0.000044000 seconds] [Time delta from previous displayed frame: 0.000044000 seconds] [Time since reference or first frame: 0.035520000 seconds] Frame Number: 582 Frame Length: 362 bytes (2896 bits) Capture Length: 362 bytes (2896 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 60.215.212.197 (60.215.212.197), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 348 Identification: 0xdf77 (57207) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x56f6 [correct] [Good: True] [Bad: False] Source: 60.215.212.197 (60.215.212.197) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 328 Checksum: 0x1c53 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 583 0.035548000 42.102.194.176 [CENSORED] SSDP 332 HTTP/1.1 200 OK Frame 583: 332 bytes on wire (2656 bits), 332 bytes captured (2656 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.636648000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.636648000 seconds [Time delta from previous captured frame: 0.000028000 seconds] [Time delta from previous displayed frame: 0.000028000 seconds] [Time since reference or first frame: 0.035548000 seconds] Frame Number: 583 Frame Length: 332 bytes (2656 bits) Capture Length: 332 bytes (2656 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 42.102.194.176 (42.102.194.176), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 318 Identification: 0xcbd9 (52185) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x8f38 [correct] [Good: True] [Bad: False] Source: 42.102.194.176 (42.102.194.176) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 298 Checksum: 0x408e [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000::urn:schemas-upnp-org:device:WANDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 584 0.035588000 42.102.194.176 [CENSORED] SSDP 364 HTTP/1.1 200 OK Frame 584: 364 bytes on wire (2912 bits), 364 bytes captured (2912 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.636688000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.636688000 seconds [Time delta from previous captured frame: 0.000040000 seconds] [Time delta from previous displayed frame: 0.000040000 seconds] [Time since reference or first frame: 0.035588000 seconds] Frame Number: 584 Frame Length: 364 bytes (2912 bits) Capture Length: 364 bytes (2912 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 42.102.194.176 (42.102.194.176), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 350 Identification: 0xcbda (52186) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x8f17 [correct] [Good: True] [Bad: False] Source: 42.102.194.176 (42.102.194.176) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 330 Checksum: 0xb8c6 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 585 0.035616000 42.102.194.176 [CENSORED] SSDP 330 HTTP/1.1 200 OK Frame 585: 330 bytes on wire (2640 bits), 330 bytes captured (2640 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.636716000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.636716000 seconds [Time delta from previous captured frame: 0.000028000 seconds] [Time delta from previous displayed frame: 0.000028000 seconds] [Time since reference or first frame: 0.035616000 seconds] Frame Number: 585 Frame Length: 330 bytes (2640 bits) Capture Length: 330 bytes (2640 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 42.102.194.176 (42.102.194.176), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 316 Identification: 0xcbdb (52187) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x8f28 [correct] [Good: True] [Bad: False] Source: 42.102.194.176 (42.102.194.176) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 296 Checksum: 0x3a6d [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 586 0.035647000 120.10.119.38 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 586: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.636747000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.636747000 seconds [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.035647000 seconds] Frame Number: 586 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 120.10.119.38 (120.10.119.38), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0xac35 (44085) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xacc8 [correct] [Good: True] [Bad: False] Source: 120.10.119.38 (120.10.119.38) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0x0252 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 587 0.035703000 67.175.2.242 [CENSORED] SSDP 353 HTTP/1.1 200 OK Frame 587: 353 bytes on wire (2824 bits), 353 bytes captured (2824 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.636803000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.636803000 seconds [Time delta from previous captured frame: 0.000056000 seconds] [Time delta from previous displayed frame: 0.000056000 seconds] [Time since reference or first frame: 0.035703000 seconds] Frame Number: 587 Frame Length: 353 bytes (2824 bits) Capture Length: 353 bytes (2824 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 67.175.2.242 (67.175.2.242), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 339 Identification: 0xfb26 (64294) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0xc14b [correct] [Good: True] [Bad: False] Source: 67.175.2.242 (67.175.2.242) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 319 Checksum: 0x0ce5 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.1.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:\r\n USN: uuid:b95ccd3a-1dd1-11b2-893c-9c71f20fe062::urn:schemas-upnp-org:device:WANConnectionDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 588 0.035742000 67.175.2.242 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 588: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.636842000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.636842000 seconds [Time delta from previous captured frame: 0.000039000 seconds] [Time delta from previous displayed frame: 0.000039000 seconds] [Time since reference or first frame: 0.035742000 seconds] Frame Number: 588 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 67.175.2.242 (67.175.2.242), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0xfb27 (64295) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0xc14e [correct] [Good: True] [Bad: False] Source: 67.175.2.242 (67.175.2.242) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0x6851 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.1.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANPPPConnection:\r\n USN: uuid:b95ccd3a-1dd1-11b2-893c-9c71f20fe062::urn:schemas-upnp-org:service:WANPPPConnection:\r\n \r\n No. Time Source Destination Protocol Length Info 589 0.036267000 120.10.119.38 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 589: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.637367000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.637367000 seconds [Time delta from previous captured frame: 0.000525000 seconds] [Time delta from previous displayed frame: 0.000525000 seconds] [Time since reference or first frame: 0.036267000 seconds] Frame Number: 589 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 120.10.119.38 (120.10.119.38), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0xac46 (44102) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xac99 [correct] [Good: True] [Bad: False] Source: 120.10.119.38 (120.10.119.38) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0x2850 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANIPConnection:1\r\n \r\n No. Time Source Destination Protocol Length Info 590 0.036300000 67.8.85.141 [CENSORED] SSDP 348 HTTP/1.1 200 OK Frame 590: 348 bytes on wire (2784 bits), 348 bytes captured (2784 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.637400000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.637400000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.036300000 seconds] Frame Number: 590 Frame Length: 348 bytes (2784 bits) Capture Length: 348 bytes (2784 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 67.8.85.141 (67.8.85.141), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 334 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 247 Protocol: UDP (17) Header checksum: 0x6e83 [correct] [Good: True] [Bad: False] Source: 67.8.85.141 (67.8.85.141) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 314 Checksum: 0x55b9 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n USN: uuid:6132a764-1dd2-11b2-b019-e701f3f06ede::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 591 0.036329000 67.8.85.141 [CENSORED] SSDP 328 HTTP/1.1 200 OK Frame 591: 328 bytes on wire (2624 bits), 328 bytes captured (2624 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.637429000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.637429000 seconds [Time delta from previous captured frame: 0.000029000 seconds] [Time delta from previous displayed frame: 0.000029000 seconds] [Time since reference or first frame: 0.036329000 seconds] Frame Number: 591 Frame Length: 328 bytes (2624 bits) Capture Length: 328 bytes (2624 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 67.8.85.141 (67.8.85.141), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 314 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 247 Protocol: UDP (17) Header checksum: 0x6e97 [correct] [Good: True] [Bad: False] Source: 67.8.85.141 (67.8.85.141) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 294 Checksum: 0x3abf [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-upnp-org:device:WANDevice:1\r\n USN: uuid:613181ae-1dd2-11b2-bc04-8be5a8e981fb::urn:schemas-upnp-org:device:WANDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 592 0.036362000 115.222.155.36 [CENSORED] SSDP 332 HTTP/1.1 200 OK Frame 592: 332 bytes on wire (2656 bits), 332 bytes captured (2656 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.637462000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.637462000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.036362000 seconds] Frame Number: 592 Frame Length: 332 bytes (2656 bits) Capture Length: 332 bytes (2656 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 115.222.155.36 (115.222.155.36), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 318 Identification: 0x2f30 (12080) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x09f6 [correct] [Good: True] [Bad: False] Source: 115.222.155.36 (115.222.155.36) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 298 Checksum: 0x1ea2 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000::urn:schemas-upnp-org:device:WANDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 593 0.036401000 106.44.209.217 [CENSORED] SSDP 364 HTTP/1.1 200 OK Frame 593: 364 bytes on wire (2912 bits), 364 bytes captured (2912 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.637501000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.637501000 seconds [Time delta from previous captured frame: 0.000039000 seconds] [Time delta from previous displayed frame: 0.000039000 seconds] [Time since reference or first frame: 0.036401000 seconds] Frame Number: 593 Frame Length: 364 bytes (2912 bits) Capture Length: 364 bytes (2912 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 106.44.209.217 (106.44.209.217), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 350 Identification: 0x56e8 (22248) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xb51a [correct] [Good: True] [Bad: False] Source: 106.44.209.217 (106.44.209.217) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 330 Checksum: 0x69d7 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 594 0.036434000 115.222.155.36 [CENSORED] SSDP 364 HTTP/1.1 200 OK Frame 594: 364 bytes on wire (2912 bits), 364 bytes captured (2912 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.637534000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.637534000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.036434000 seconds] Frame Number: 594 Frame Length: 364 bytes (2912 bits) Capture Length: 364 bytes (2912 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 115.222.155.36 (115.222.155.36), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 350 Identification: 0x2f31 (12081) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x09d5 [correct] [Good: True] [Bad: False] Source: 115.222.155.36 (115.222.155.36) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 330 Checksum: 0x96da [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 595 0.036458000 142.136.156.153 [CENSORED] SSDP 280 HTTP/1.1 200 OK Frame 595: 280 bytes on wire (2240 bits), 280 bytes captured (2240 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.637558000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.637558000 seconds [Time delta from previous captured frame: 0.000024000 seconds] [Time delta from previous displayed frame: 0.000024000 seconds] [Time since reference or first frame: 0.036458000 seconds] Frame Number: 595 Frame Length: 280 bytes (2240 bits) Capture Length: 280 bytes (2240 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 142.136.156.153 (142.136.156.153), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 266 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 247 Protocol: UDP (17) Header checksum: 0xdc3a [correct] [Good: True] [Bad: False] Source: 142.136.156.153 (142.136.156.153) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 246 Checksum: 0xc8d0 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65530/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: upnp:rootdevice\r\n USN: uuid:6e645cc8-1dd2-11b2-8f60-9aa9a059afe3::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 596 0.036501000 184.167.193.168 [CENSORED] SSDP 365 HTTP/1.1 200 OK Frame 596: 365 bytes on wire (2920 bits), 365 bytes captured (2920 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.637601000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.637601000 seconds [Time delta from previous captured frame: 0.000043000 seconds] [Time delta from previous displayed frame: 0.000043000 seconds] [Time since reference or first frame: 0.036501000 seconds] Frame Number: 596 Frame Length: 365 bytes (2920 bits) Capture Length: 365 bytes (2920 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 184.167.193.168 (184.167.193.168), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 351 Identification: 0x75e9 (30185) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x18ce [correct] [Good: True] [Bad: False] Source: 184.167.193.168 (184.167.193.168) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 331 Checksum: 0x8f4e [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:\r\n USN: uuid:cc9a6286-1dd1-11b2-9bec-d3a86a4d2c82::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:\r\n \r\n No. Time Source Destination Protocol Length Info 597 0.036629000 183.163.38.224 [CENSORED] SSDP 332 HTTP/1.1 200 OK Frame 597: 332 bytes on wire (2656 bits), 332 bytes captured (2656 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.637729000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.637729000 seconds [Time delta from previous captured frame: 0.000128000 seconds] [Time delta from previous displayed frame: 0.000128000 seconds] [Time since reference or first frame: 0.036629000 seconds] Frame Number: 597 Frame Length: 332 bytes (2656 bits) Capture Length: 332 bytes (2656 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 183.163.38.224 (183.163.38.224), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 318 Identification: 0xaf31 (44849) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0xbb73 [correct] [Good: True] [Bad: False] Source: 183.163.38.224 (183.163.38.224) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 298 Checksum: 0x4f21 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000::urn:schemas-upnp-org:device:WANDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 598 0.036658000 115.222.155.36 [CENSORED] SSDP 330 HTTP/1.1 200 OK Frame 598: 330 bytes on wire (2640 bits), 330 bytes captured (2640 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.637758000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.637758000 seconds [Time delta from previous captured frame: 0.000029000 seconds] [Time delta from previous displayed frame: 0.000029000 seconds] [Time since reference or first frame: 0.036658000 seconds] Frame Number: 598 Frame Length: 330 bytes (2640 bits) Capture Length: 330 bytes (2640 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 115.222.155.36 (115.222.155.36), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 316 Identification: 0x2f32 (12082) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x09f6 [correct] [Good: True] [Bad: False] Source: 115.222.155.36 (115.222.155.36) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 296 Checksum: 0x1881 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 599 0.036697000 115.222.155.36 [CENSORED] SSDP 362 HTTP/1.1 200 OK Frame 599: 362 bytes on wire (2896 bits), 362 bytes captured (2896 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.637797000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.637797000 seconds [Time delta from previous captured frame: 0.000039000 seconds] [Time delta from previous displayed frame: 0.000039000 seconds] [Time since reference or first frame: 0.036697000 seconds] Frame Number: 599 Frame Length: 362 bytes (2896 bits) Capture Length: 362 bytes (2896 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 115.222.155.36 (115.222.155.36), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 348 Identification: 0x2f33 (12083) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x09d5 [correct] [Good: True] [Bad: False] Source: 115.222.155.36 (115.222.155.36) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 328 Checksum: 0x1eed [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 600 0.036731000 115.222.155.36 [CENSORED] SSDP 368 HTTP/1.1 200 OK Frame 600: 368 bytes on wire (2944 bits), 368 bytes captured (2944 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.637831000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.637831000 seconds [Time delta from previous captured frame: 0.000034000 seconds] [Time delta from previous displayed frame: 0.000034000 seconds] [Time since reference or first frame: 0.036731000 seconds] Frame Number: 600 Frame Length: 368 bytes (2944 bits) Capture Length: 368 bytes (2944 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 115.222.155.36 (115.222.155.36), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 354 Identification: 0x2f34 (12084) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x09ce [correct] [Good: True] [Bad: False] Source: 115.222.155.36 (115.222.155.36) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 334 Checksum: 0xd99b [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 601 0.036759000 183.141.157.46 [CENSORED] SSDP 330 HTTP/1.1 200 OK Frame 601: 330 bytes on wire (2640 bits), 330 bytes captured (2640 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.637859000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.637859000 seconds [Time delta from previous captured frame: 0.000028000 seconds] [Time delta from previous displayed frame: 0.000028000 seconds] [Time since reference or first frame: 0.036759000 seconds] Frame Number: 601 Frame Length: 330 bytes (2640 bits) Capture Length: 330 bytes (2640 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 183.141.157.46 (183.141.157.46), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 316 Identification: 0x4223 (16931) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xb13b [correct] [Good: True] [Bad: False] Source: 183.141.157.46 (183.141.157.46) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 296 Checksum: 0xd2c7 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 602 0.036794000 71.198.34.78 [CENSORED] SSDP 354 HTTP/1.1 200 OK Frame 602: 354 bytes on wire (2832 bits), 354 bytes captured (2832 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.637894000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.637894000 seconds [Time delta from previous captured frame: 0.000035000 seconds] [Time delta from previous displayed frame: 0.000035000 seconds] [Time since reference or first frame: 0.036794000 seconds] Frame Number: 602 Frame Length: 354 bytes (2832 bits) Capture Length: 354 bytes (2832 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 71.198.34.78 (71.198.34.78), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 340 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x9dfe [correct] [Good: True] [Bad: False] Source: 71.198.34.78 (71.198.34.78) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 320 Checksum: 0xa649 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65530/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-wifialliance-org:service:WFAWLANConfig:1\r\n USN: uuid:1f8c0e4c-1dd2-11b2-8314-d55e5542cfc7::urn:schemas-wifialliance-org:service:WFAWLANConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 603 0.036826000 189.100.172.65 [CENSORED] SSDP 357 HTTP/1.1 200 OK Frame 603: 357 bytes on wire (2856 bits), 357 bytes captured (2856 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.637926000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.637926000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.036826000 seconds] Frame Number: 603 Frame Length: 357 bytes (2856 bits) Capture Length: 357 bytes (2856 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 189.100.172.65 (189.100.172.65), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 343 Identification: 0x0d3f (3391) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 53 Protocol: UDP (17) Header checksum: 0x922b [correct] [Good: True] [Bad: False] Source: 189.100.172.65 (189.100.172.65) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 323 Checksum: 0xf51a [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n USN: uuid:bcb7b2d0-1dd1-11b2-9f89-d6ebbd92b718::urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 604 0.036855000 189.100.172.65 [CENSORED] SSDP 333 HTTP/1.1 200 OK Frame 604: 333 bytes on wire (2664 bits), 333 bytes captured (2664 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.637955000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.637955000 seconds [Time delta from previous captured frame: 0.000029000 seconds] [Time delta from previous displayed frame: 0.000029000 seconds] [Time since reference or first frame: 0.036855000 seconds] Frame Number: 604 Frame Length: 333 bytes (2664 bits) Capture Length: 333 bytes (2664 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 189.100.172.65 (189.100.172.65), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 319 Identification: 0x0d40 (3392) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 53 Protocol: UDP (17) Header checksum: 0x9242 [correct] [Good: True] [Bad: False] Source: 189.100.172.65 (189.100.172.65) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 299 Checksum: 0x4b74 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:WANDevice:\r\n USN: uuid:bcbb599e-1dd1-11b2-b4b7-f815a40b6d4b::urn:schemas-upnp-org:device:WANDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 605 0.036892000 115.222.155.36 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 605: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.637992000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.637992000 seconds [Time delta from previous captured frame: 0.000037000 seconds] [Time delta from previous displayed frame: 0.000037000 seconds] [Time since reference or first frame: 0.036892000 seconds] Frame Number: 605 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 115.222.155.36 (115.222.155.36), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0x2f35 (12085) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x09d9 [correct] [Good: True] [Bad: False] Source: 115.222.155.36 (115.222.155.36) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0x087e [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANIPConnection:1\r\n \r\n No. Time Source Destination Protocol Length Info 606 0.036918000 118.180.59.13 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 606: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.638018000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.638018000 seconds [Time delta from previous captured frame: 0.000026000 seconds] [Time delta from previous displayed frame: 0.000026000 seconds] [Time since reference or first frame: 0.036918000 seconds] Frame Number: 606 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 118.180.59.13 (118.180.59.13), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0x8f58 (36696) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 242 Protocol: UDP (17) Header checksum: 0x0b25 [correct] [Good: True] [Bad: False] Source: 118.180.59.13 (118.180.59.13) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0x1808 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 607 0.036956000 118.180.59.13 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 607: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.638056000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.638056000 seconds [Time delta from previous captured frame: 0.000038000 seconds] [Time delta from previous displayed frame: 0.000038000 seconds] [Time since reference or first frame: 0.036956000 seconds] Frame Number: 607 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 118.180.59.13 (118.180.59.13), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0x8f59 (36697) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 242 Protocol: UDP (17) Header checksum: 0x0af6 [correct] [Good: True] [Bad: False] Source: 118.180.59.13 (118.180.59.13) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0x64e5 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 608 0.036979000 118.180.59.13 [CENSORED] SSDP 284 HTTP/1.1 200 OK Frame 608: 284 bytes on wire (2272 bits), 284 bytes captured (2272 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.638079000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.638079000 seconds [Time delta from previous captured frame: 0.000023000 seconds] [Time delta from previous displayed frame: 0.000023000 seconds] [Time since reference or first frame: 0.036979000 seconds] Frame Number: 608 Frame Length: 284 bytes (2272 bits) Capture Length: 284 bytes (2272 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 118.180.59.13 (118.180.59.13), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 270 Identification: 0x8f5a (36698) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 242 Protocol: UDP (17) Header checksum: 0x0b3d [correct] [Good: True] [Bad: False] Source: 118.180.59.13 (118.180.59.13) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 250 Checksum: 0xd3e3 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: upnp:rootdevice\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 609 0.037019000 118.180.59.13 [CENSORED] SSDP 348 HTTP/1.1 200 OK Frame 609: 348 bytes on wire (2784 bits), 348 bytes captured (2784 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.638119000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.638119000 seconds [Time delta from previous captured frame: 0.000040000 seconds] [Time delta from previous displayed frame: 0.000040000 seconds] [Time since reference or first frame: 0.037019000 seconds] Frame Number: 609 Frame Length: 348 bytes (2784 bits) Capture Length: 348 bytes (2784 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 118.180.59.13 (118.180.59.13), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 334 Identification: 0x8f5b (36699) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 242 Protocol: UDP (17) Header checksum: 0x0afc [correct] [Good: True] [Bad: False] Source: 118.180.59.13 (118.180.59.13) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 314 Checksum: 0x0d9e [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n \r\n No. Time Source Destination Protocol Length Info 610 0.037046000 118.180.59.13 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 610: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.638146000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.638146000 seconds [Time delta from previous captured frame: 0.000027000 seconds] [Time delta from previous displayed frame: 0.000027000 seconds] [Time since reference or first frame: 0.037046000 seconds] Frame Number: 610 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 118.180.59.13 (118.180.59.13), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0x8f5c (36700) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 242 Protocol: UDP (17) Header checksum: 0x0b21 [correct] [Good: True] [Bad: False] Source: 118.180.59.13 (118.180.59.13) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0x3fc1 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 611 0.037085000 113.195.18.167 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 611: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.638185000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.638185000 seconds [Time delta from previous captured frame: 0.000039000 seconds] [Time delta from previous displayed frame: 0.000039000 seconds] [Time since reference or first frame: 0.037085000 seconds] Frame Number: 611 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 113.195.18.167 (113.195.18.167), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0xf077 (61559) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xd31e [correct] [Good: True] [Bad: False] Source: 113.195.18.167 (113.195.18.167) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0x9316 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANIPConnection:1\r\n \r\n No. Time Source Destination Protocol Length Info 612 0.037117000 115.222.155.36 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 612: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.638217000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.638217000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.037117000 seconds] Frame Number: 612 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 115.222.155.36 (115.222.155.36), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0x2f37 (12087) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x09d7 [correct] [Good: True] [Bad: False] Source: 115.222.155.36 (115.222.155.36) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0x07a4 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 613 0.037141000 115.222.155.36 [CENSORED] SSDP 284 HTTP/1.1 200 OK Frame 613: 284 bytes on wire (2272 bits), 284 bytes captured (2272 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.638241000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.638241000 seconds [Time delta from previous captured frame: 0.000024000 seconds] [Time delta from previous displayed frame: 0.000024000 seconds] [Time since reference or first frame: 0.037141000 seconds] Frame Number: 613 Frame Length: 284 bytes (2272 bits) Capture Length: 284 bytes (2272 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 115.222.155.36 (115.222.155.36), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 270 Identification: 0x2f38 (12088) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x0a1e [correct] [Good: True] [Bad: False] Source: 115.222.155.36 (115.222.155.36) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 250 Checksum: 0x76a2 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: upnp:rootdevice\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 614 0.037179000 115.222.155.36 [CENSORED] SSDP 348 HTTP/1.1 200 OK Frame 614: 348 bytes on wire (2784 bits), 348 bytes captured (2784 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.638279000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.638279000 seconds [Time delta from previous captured frame: 0.000038000 seconds] [Time delta from previous displayed frame: 0.000038000 seconds] [Time since reference or first frame: 0.037179000 seconds] Frame Number: 614 Frame Length: 348 bytes (2784 bits) Capture Length: 348 bytes (2784 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 115.222.155.36 (115.222.155.36), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 334 Identification: 0x2f39 (12089) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x09dd [correct] [Good: True] [Bad: False] Source: 115.222.155.36 (115.222.155.36) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 314 Checksum: 0xb05c [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n \r\n No. Time Source Destination Protocol Length Info 615 0.037206000 115.222.155.36 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 615: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.638306000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.638306000 seconds [Time delta from previous captured frame: 0.000027000 seconds] [Time delta from previous displayed frame: 0.000027000 seconds] [Time since reference or first frame: 0.037206000 seconds] Frame Number: 615 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 115.222.155.36 (115.222.155.36), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0x2f3a (12090) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x0a02 [correct] [Good: True] [Bad: False] Source: 115.222.155.36 (115.222.155.36) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0xe27f [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 616 0.037241000 115.222.155.36 [CENSORED] SSDP 332 HTTP/1.1 200 OK Frame 616: 332 bytes on wire (2656 bits), 332 bytes captured (2656 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.638341000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.638341000 seconds [Time delta from previous captured frame: 0.000035000 seconds] [Time delta from previous displayed frame: 0.000035000 seconds] [Time since reference or first frame: 0.037241000 seconds] Frame Number: 616 Frame Length: 332 bytes (2656 bits) Capture Length: 332 bytes (2656 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 115.222.155.36 (115.222.155.36), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 318 Identification: 0x2f3b (12091) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x09eb [correct] [Good: True] [Bad: False] Source: 115.222.155.36 (115.222.155.36) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 298 Checksum: 0x1ea2 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000::urn:schemas-upnp-org:device:WANDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 617 0.037278000 113.195.18.167 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 617: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.638378000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.638378000 seconds [Time delta from previous captured frame: 0.000037000 seconds] [Time delta from previous displayed frame: 0.000037000 seconds] [Time since reference or first frame: 0.037278000 seconds] Frame Number: 617 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 113.195.18.167 (113.195.18.167), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0xf079 (61561) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xd31c [correct] [Good: True] [Bad: False] Source: 113.195.18.167 (113.195.18.167) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0x923c [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 618 0.037306000 69.136.105.96 [CENSORED] SSDP 334 HTTP/1.1 200 OK Frame 618: 334 bytes on wire (2672 bits), 334 bytes captured (2672 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.638406000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.638406000 seconds [Time delta from previous captured frame: 0.000028000 seconds] [Time delta from previous displayed frame: 0.000028000 seconds] [Time since reference or first frame: 0.037306000 seconds] Frame Number: 618 Frame Length: 334 bytes (2672 bits) Capture Length: 334 bytes (2672 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 69.136.105.96 (69.136.105.96), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 320 Identification: 0x0120 (288) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 250 Protocol: UDP (17) Header checksum: 0x541e [correct] [Good: True] [Bad: False] Source: 69.136.105.96 (69.136.105.96) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 300 Checksum: 0x9f3a [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n USN: uuid:23f395fe-1dd2-11b2-8af7-dfa44ba4c211::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 619 0.037336000 69.136.105.96 [CENSORED] SSDP 330 HTTP/1.1 200 OK Frame 619: 330 bytes on wire (2640 bits), 330 bytes captured (2640 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.638436000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.638436000 seconds [Time delta from previous captured frame: 0.000030000 seconds] [Time delta from previous displayed frame: 0.000030000 seconds] [Time since reference or first frame: 0.037336000 seconds] Frame Number: 619 Frame Length: 330 bytes (2640 bits) Capture Length: 330 bytes (2640 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 69.136.105.96 (69.136.105.96), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 316 Identification: 0x0121 (289) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 250 Protocol: UDP (17) Header checksum: 0x5421 [correct] [Good: True] [Bad: False] Source: 69.136.105.96 (69.136.105.96) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 296 Checksum: 0x90bc [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n USN: uuid:23fafd6c-1dd2-11b2-9178-bbf6b5973b65::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 620 0.037368000 69.136.105.96 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 620: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.638468000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.638468000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.037368000 seconds] Frame Number: 620 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 69.136.105.96 (69.136.105.96), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0x0122 (290) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 250 Protocol: UDP (17) Header checksum: 0x5434 [correct] [Good: True] [Bad: False] Source: 69.136.105.96 (69.136.105.96) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0xd902 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-upnp-org:device:WANDevice:1\r\n USN: uuid:23f74dca-1dd2-11b2-9112-c8148accf188::urn:schemas-upnp-org:device:WANDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 621 0.037407000 183.163.38.224 [CENSORED] SSDP 364 HTTP/1.1 200 OK Frame 621: 364 bytes on wire (2912 bits), 364 bytes captured (2912 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.638507000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.638507000 seconds [Time delta from previous captured frame: 0.000039000 seconds] [Time delta from previous displayed frame: 0.000039000 seconds] [Time since reference or first frame: 0.037407000 seconds] Frame Number: 621 Frame Length: 364 bytes (2912 bits) Capture Length: 364 bytes (2912 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 183.163.38.224 (183.163.38.224), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 350 Identification: 0xaf32 (44850) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0xbb52 [correct] [Good: True] [Bad: False] Source: 183.163.38.224 (183.163.38.224) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 330 Checksum: 0xc759 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 622 0.037437000 98.215.152.202 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 622: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.638537000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.638537000 seconds [Time delta from previous captured frame: 0.000030000 seconds] [Time delta from previous displayed frame: 0.000030000 seconds] [Time since reference or first frame: 0.037437000 seconds] Frame Number: 622 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 98.215.152.202 (98.215.152.202), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0xa358 (41816) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x641d [correct] [Good: True] [Bad: False] Source: 98.215.152.202 (98.215.152.202) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0xd7b3 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANPPPConnection:\r\n USN: uuid:33333333-3333-3333-3333-333333333333::urn:schemas-upnp-org:service:WANPPPConnection:\r\n \r\n No. Time Source Destination Protocol Length Info 623 0.037468000 98.215.152.202 [CENSORED] SSDP 347 HTTP/1.1 200 OK Frame 623: 347 bytes on wire (2776 bits), 347 bytes captured (2776 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.638568000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.638568000 seconds [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.037468000 seconds] Frame Number: 623 Frame Length: 347 bytes (2776 bits) Capture Length: 347 bytes (2776 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 98.215.152.202 (98.215.152.202), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 333 Identification: 0xa359 (41817) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x641e [correct] [Good: True] [Bad: False] Source: 98.215.152.202 (98.215.152.202) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 313 Checksum: 0xfe3f [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:\r\n USN: uuid:33333333-3333-3333-3333-333333333333::urn:schemas-upnp-org:service:WANIPConnection:\r\n \r\n No. Time Source Destination Protocol Length Info 624 0.037501000 98.215.152.202 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 624: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.638601000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.638601000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.037501000 seconds] Frame Number: 624 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 98.215.152.202 (98.215.152.202), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0xa35a (41818) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x641b [correct] [Good: True] [Bad: False] Source: 98.215.152.202 (98.215.152.202) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0x8f81 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:\r\n USN: uuid:11111111-1111-1111-1111-111111111111::urn:schemas-upnp-org:service:Layer3Forwarding:\r\n \r\n No. Time Source Destination Protocol Length Info 625 0.037533000 98.215.152.202 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 625: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.638633000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.638633000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.037533000 seconds] Frame Number: 625 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 98.215.152.202 (98.215.152.202), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0xa35b (41819) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x641a [correct] [Good: True] [Bad: False] Source: 98.215.152.202 (98.215.152.202) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0x2250 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-wifialliance-org:device:WFADevice:\r\n USN: uuid:565aa949-67c1-4c0e-aa8f-f349e6f59311::urn:schemas-wifialliance-org:device:WFADevice:\r\n \r\n No. Time Source Destination Protocol Length Info 626 0.037567000 142.136.125.141 [CENSORED] SSDP 357 HTTP/1.1 200 OK Frame 626: 357 bytes on wire (2856 bits), 357 bytes captured (2856 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.638667000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.638667000 seconds [Time delta from previous captured frame: 0.000034000 seconds] [Time delta from previous displayed frame: 0.000034000 seconds] [Time since reference or first frame: 0.037567000 seconds] Frame Number: 626 Frame Length: 357 bytes (2856 bits) Capture Length: 357 bytes (2856 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 142.136.125.141 (142.136.125.141), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 343 Identification: 0xef48 (61256) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 247 Protocol: UDP (17) Header checksum: 0x0bb1 [correct] [Good: True] [Bad: False] Source: 142.136.125.141 (142.136.125.141) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 323 Checksum: 0xd396 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n USN: uuid:add07b24-1dd1-11b2-b9c0-a0d7328c5f89::urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 627 0.037595000 142.136.125.141 [CENSORED] SSDP 333 HTTP/1.1 200 OK Frame 627: 333 bytes on wire (2664 bits), 333 bytes captured (2664 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.638695000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.638695000 seconds [Time delta from previous captured frame: 0.000028000 seconds] [Time delta from previous displayed frame: 0.000028000 seconds] [Time since reference or first frame: 0.037595000 seconds] Frame Number: 627 Frame Length: 333 bytes (2664 bits) Capture Length: 333 bytes (2664 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 142.136.125.141 (142.136.125.141), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 319 Identification: 0xef49 (61257) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 247 Protocol: UDP (17) Header checksum: 0x0bc8 [correct] [Good: True] [Bad: False] Source: 142.136.125.141 (142.136.125.141) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 299 Checksum: 0x6ca9 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:WANDevice:\r\n USN: uuid:add4159a-1dd1-11b2-9600-b2d4c78bec03::urn:schemas-upnp-org:device:WANDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 628 0.037632000 142.136.125.141 [CENSORED] SSDP 365 HTTP/1.1 200 OK Frame 628: 365 bytes on wire (2920 bits), 365 bytes captured (2920 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.638732000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.638732000 seconds [Time delta from previous captured frame: 0.000037000 seconds] [Time delta from previous displayed frame: 0.000037000 seconds] [Time since reference or first frame: 0.037632000 seconds] Frame Number: 628 Frame Length: 365 bytes (2920 bits) Capture Length: 365 bytes (2920 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 142.136.125.141 (142.136.125.141), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 351 Identification: 0xef4a (61258) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 247 Protocol: UDP (17) Header checksum: 0x0ba7 [correct] [Good: True] [Bad: False] Source: 142.136.125.141 (142.136.125.141) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 331 Checksum: 0x6066 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:\r\n USN: uuid:add4159a-1dd1-11b2-9600-b2d4c78bec03::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:\r\n \r\n No. Time Source Destination Protocol Length Info 629 0.037663000 142.136.125.141 [CENSORED] SSDP 353 HTTP/1.1 200 OK Frame 629: 353 bytes on wire (2824 bits), 353 bytes captured (2824 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.638763000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.638763000 seconds [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.037663000 seconds] Frame Number: 629 Frame Length: 353 bytes (2824 bits) Capture Length: 353 bytes (2824 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 142.136.125.141 (142.136.125.141), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 339 Identification: 0xef4b (61259) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 247 Protocol: UDP (17) Header checksum: 0x0bb2 [correct] [Good: True] [Bad: False] Source: 142.136.125.141 (142.136.125.141) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 319 Checksum: 0x14ab [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:\r\n USN: uuid:add7c24e-1dd1-11b2-a384-a143923c8d3f::urn:schemas-upnp-org:device:WANConnectionDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 630 0.037696000 112.101.181.150 [CENSORED] SSDP 369 HTTP/1.1 200 OK Frame 630: 369 bytes on wire (2952 bits), 369 bytes captured (2952 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.638796000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.638796000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.037696000 seconds] Frame Number: 630 Frame Length: 369 bytes (2952 bits) Capture Length: 369 bytes (2952 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 112.101.181.150 (112.101.181.150), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 355 Identification: 0xc844 (51268) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x59c3 [correct] [Good: True] [Bad: False] Source: 112.101.181.150 (112.101.181.150) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 335 Checksum: 0x1022 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.11.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 631 0.037724000 120.10.119.38 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 631: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.638824000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.638824000 seconds [Time delta from previous captured frame: 0.000028000 seconds] [Time delta from previous displayed frame: 0.000028000 seconds] [Time since reference or first frame: 0.037724000 seconds] Frame Number: 631 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 120.10.119.38 (120.10.119.38), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0xac56 (44118) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xacb7 [correct] [Good: True] [Bad: False] Source: 120.10.119.38 (120.10.119.38) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0x0252 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 632 0.037760000 120.10.119.38 [CENSORED] SSDP 332 HTTP/1.1 200 OK Frame 632: 332 bytes on wire (2656 bits), 332 bytes captured (2656 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.638860000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.638860000 seconds [Time delta from previous captured frame: 0.000036000 seconds] [Time delta from previous displayed frame: 0.000036000 seconds] [Time since reference or first frame: 0.037760000 seconds] Frame Number: 632 Frame Length: 332 bytes (2656 bits) Capture Length: 332 bytes (2656 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 120.10.119.38 (120.10.119.38), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 318 Identification: 0xac57 (44119) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xac90 [correct] [Good: True] [Bad: False] Source: 120.10.119.38 (120.10.119.38) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 298 Checksum: 0x3e74 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000::urn:schemas-upnp-org:device:WANDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 633 0.037778000 174.48.6.151 [CENSORED] SSDP 280 HTTP/1.1 200 OK Frame 633: 280 bytes on wire (2240 bits), 280 bytes captured (2240 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.638878000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.638878000 seconds [Time delta from previous captured frame: 0.000018000 seconds] [Time delta from previous displayed frame: 0.000018000 seconds] [Time since reference or first frame: 0.037778000 seconds] Frame Number: 633 Frame Length: 280 bytes (2240 bits) Capture Length: 280 bytes (2240 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 174.48.6.151 (174.48.6.151), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 266 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 253 Protocol: UDP (17) Header checksum: 0x4c95 [correct] [Good: True] [Bad: False] Source: 174.48.6.151 (174.48.6.151) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 246 Checksum: 0x7059 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65530/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: upnp:rootdevice\r\n USN: uuid:6e66cc24-1dd2-11b2-8b4e-e869e1167d23::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 634 0.037820000 120.10.119.38 [CENSORED] SSDP 330 HTTP/1.1 200 OK Frame 634: 330 bytes on wire (2640 bits), 330 bytes captured (2640 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.638920000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.638920000 seconds [Time delta from previous captured frame: 0.000042000 seconds] [Time delta from previous displayed frame: 0.000042000 seconds] [Time since reference or first frame: 0.037820000 seconds] Frame Number: 634 Frame Length: 330 bytes (2640 bits) Capture Length: 330 bytes (2640 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 120.10.119.38 (120.10.119.38), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 316 Identification: 0xac59 (44121) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xaca0 [correct] [Good: True] [Bad: False] Source: 120.10.119.38 (120.10.119.38) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 296 Checksum: 0x3853 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 635 0.037856000 120.10.119.38 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 635: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.638956000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.638956000 seconds [Time delta from previous captured frame: 0.000036000 seconds] [Time delta from previous displayed frame: 0.000036000 seconds] [Time since reference or first frame: 0.037856000 seconds] Frame Number: 635 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 120.10.119.38 (120.10.119.38), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0xac5c (44124) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xac83 [correct] [Good: True] [Bad: False] Source: 120.10.119.38 (120.10.119.38) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0x2850 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANIPConnection:1\r\n \r\n No. Time Source Destination Protocol Length Info 636 0.037883000 120.10.119.38 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 636: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.638983000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.638983000 seconds [Time delta from previous captured frame: 0.000027000 seconds] [Time delta from previous displayed frame: 0.000027000 seconds] [Time since reference or first frame: 0.037883000 seconds] Frame Number: 636 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 120.10.119.38 (120.10.119.38), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0xac5d (44125) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xacb0 [correct] [Good: True] [Bad: False] Source: 120.10.119.38 (120.10.119.38) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0xda98 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 637 0.037922000 115.222.155.36 [CENSORED] SSDP 368 HTTP/1.1 200 OK Frame 637: 368 bytes on wire (2944 bits), 368 bytes captured (2944 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.639022000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.639022000 seconds [Time delta from previous captured frame: 0.000039000 seconds] [Time delta from previous displayed frame: 0.000039000 seconds] [Time since reference or first frame: 0.037922000 seconds] Frame Number: 637 Frame Length: 368 bytes (2944 bits) Capture Length: 368 bytes (2944 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 115.222.155.36 (115.222.155.36), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 354 Identification: 0x2f3f (12095) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x09c3 [correct] [Good: True] [Bad: False] Source: 115.222.155.36 (115.222.155.36) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 334 Checksum: 0xd99b [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 638 0.037952000 115.222.155.36 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 638: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.639052000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.639052000 seconds [Time delta from previous captured frame: 0.000030000 seconds] [Time delta from previous displayed frame: 0.000030000 seconds] [Time since reference or first frame: 0.037952000 seconds] Frame Number: 638 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 115.222.155.36 (115.222.155.36), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0x2f40 (12096) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x09ce [correct] [Good: True] [Bad: False] Source: 115.222.155.36 (115.222.155.36) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0x087e [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANIPConnection:1\r\n \r\n No. Time Source Destination Protocol Length Info 639 0.037984000 75.132.12.17 [CENSORED] SSDP 353 HTTP/1.1 200 OK Frame 639: 353 bytes on wire (2824 bits), 353 bytes captured (2824 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.639084000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.639084000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.037984000 seconds] Frame Number: 639 Frame Length: 353 bytes (2824 bits) Capture Length: 353 bytes (2824 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 75.132.12.17 (75.132.12.17), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 339 Identification: 0x7116 (28950) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (17) Header checksum: 0x3c68 [correct] [Good: True] [Bad: False] Source: 75.132.12.17 (75.132.12.17) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 319 Checksum: 0xef2b [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:\r\n USN: uuid:b1ce1f4c-1dd1-11b2-90df-863701f3777d::urn:schemas-upnp-org:device:WANConnectionDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 640 0.038015000 76.75.93.246 [CENSORED] SSDP 347 HTTP/1.1 200 OK Frame 640: 347 bytes on wire (2776 bits), 347 bytes captured (2776 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.639115000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.639115000 seconds [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.038015000 seconds] Frame Number: 640 Frame Length: 347 bytes (2776 bits) Capture Length: 347 bytes (2776 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 76.75.93.246 (76.75.93.246), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 333 Identification: 0x7477 (29815) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0xe460 [correct] [Good: True] [Bad: False] Source: 76.75.93.246 (76.75.93.246) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 313 Checksum: 0x636e [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:\r\n USN: uuid:add7e22e-1dd1-11b2-bf7c-8986e56cbfa0::urn:schemas-upnp-org:service:WANIPConnection:\r\n \r\n No. Time Source Destination Protocol Length Info 641 0.038046000 76.75.93.246 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 641: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.639146000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.639146000 seconds [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.038046000 seconds] Frame Number: 641 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 76.75.93.246 (76.75.93.246), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0x7478 (29816) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0xe45d [correct] [Good: True] [Bad: False] Source: 76.75.93.246 (76.75.93.246) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0x6d00 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:\r\n USN: uuid:add091f4-1dd1-11b2-bf32-ff9a8ca729bb::urn:schemas-upnp-org:service:Layer3Forwarding:\r\n \r\n No. Time Source Destination Protocol Length Info 642 0.038071000 65.31.92.103 [CENSORED] SSDP 287 HTTP/1.1 200 OK Frame 642: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.639171000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.639171000 seconds [Time delta from previous captured frame: 0.000025000 seconds] [Time delta from previous displayed frame: 0.000025000 seconds] [Time since reference or first frame: 0.038071000 seconds] Frame Number: 642 Frame Length: 287 bytes (2296 bits) Capture Length: 287 bytes (2296 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 65.31.92.103 (65.31.92.103), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 273 Identification: 0x50fe (20734) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x14d1 [correct] [Good: True] [Bad: False] Source: 65.31.92.103 (65.31.92.103) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 253 Checksum: 0x49b8 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: upnp:rootdevice\r\n USN: uuid:77e2cf9e-1dd2-11b2-adae-b1e37771b8a7::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 643 0.038134000 171.104.96.11 [CENSORED] SSDP 272 HTTP/1.1 200 OK Frame 643: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.639234000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.639234000 seconds [Time delta from previous captured frame: 0.000063000 seconds] [Time delta from previous displayed frame: 0.000063000 seconds] [Time since reference or first frame: 0.038134000 seconds] Frame Number: 643 Frame Length: 272 bytes (2176 bits) Capture Length: 272 bytes (2176 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 171.104.96.11 (171.104.96.11), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 258 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0xfdf0 [correct] [Good: True] [Bad: False] Source: 171.104.96.11 (171.104.96.11) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 238 Checksum: 0x4304 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: upnp:rootdevice\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::upnp:rootdevice\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:3183/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 644 0.038177000 1.223.130.59 [CENSORED] SSDP 321 HTTP/1.1 200 OK Frame 644: 321 bytes on wire (2568 bits), 321 bytes captured (2568 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.639277000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.639277000 seconds [Time delta from previous captured frame: 0.000043000 seconds] [Time delta from previous displayed frame: 0.000043000 seconds] [Time since reference or first frame: 0.038177000 seconds] Frame Number: 644 Frame Length: 321 bytes (2568 bits) Capture Length: 321 bytes (2568 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 1.223.130.59 (1.223.130.59), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 307 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x8519 [correct] [Good: True] [Bad: False] Source: 1.223.130.59 (1.223.130.59) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 287 Checksum: 0x0d15 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:WANDevice:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:device:WANDevice:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:32768/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 645 0.038214000 1.223.130.59 [CENSORED] SSDP 353 HTTP/1.1 200 OK Frame 645: 353 bytes on wire (2824 bits), 353 bytes captured (2824 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.639314000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.639314000 seconds [Time delta from previous captured frame: 0.000037000 seconds] [Time delta from previous displayed frame: 0.000037000 seconds] [Time since reference or first frame: 0.038214000 seconds] Frame Number: 645 Frame Length: 353 bytes (2824 bits) Capture Length: 353 bytes (2824 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 1.223.130.59 (1.223.130.59), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 339 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x84f9 [correct] [Good: True] [Bad: False] Source: 1.223.130.59 (1.223.130.59) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 319 Checksum: 0x854d [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:32768/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 646 0.038800000 1.223.130.59 [CENSORED] SSDP 335 HTTP/1.1 200 OK Frame 646: 335 bytes on wire (2680 bits), 335 bytes captured (2680 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.639900000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.639900000 seconds [Time delta from previous captured frame: 0.000586000 seconds] [Time delta from previous displayed frame: 0.000586000 seconds] [Time since reference or first frame: 0.038800000 seconds] Frame Number: 646 Frame Length: 335 bytes (2680 bits) Capture Length: 335 bytes (2680 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 1.223.130.59 (1.223.130.59), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 321 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x850b [correct] [Good: True] [Bad: False] Source: 1.223.130.59 (1.223.130.59) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 301 Checksum: 0xaf9c [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:service:WANIPConnection:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:32768/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 647 0.038840000 118.180.59.13 [CENSORED] SSDP 362 HTTP/1.1 200 OK Frame 647: 362 bytes on wire (2896 bits), 362 bytes captured (2896 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.639940000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.639940000 seconds [Time delta from previous captured frame: 0.000040000 seconds] [Time delta from previous displayed frame: 0.000040000 seconds] [Time since reference or first frame: 0.038840000 seconds] Frame Number: 647 Frame Length: 362 bytes (2896 bits) Capture Length: 362 bytes (2896 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 118.180.59.13 (118.180.59.13), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 348 Identification: 0x8f6b (36715) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 242 Protocol: UDP (17) Header checksum: 0x0ade [correct] [Good: True] [Bad: False] Source: 118.180.59.13 (118.180.59.13) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 328 Checksum: 0x7c2e [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 648 0.038873000 118.180.59.13 [CENSORED] SSDP 368 HTTP/1.1 200 OK Frame 648: 368 bytes on wire (2944 bits), 368 bytes captured (2944 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.639973000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.639973000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.038873000 seconds] Frame Number: 648 Frame Length: 368 bytes (2944 bits) Capture Length: 368 bytes (2944 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 118.180.59.13 (118.180.59.13), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 354 Identification: 0x8f6c (36716) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 242 Protocol: UDP (17) Header checksum: 0x0ad7 [correct] [Good: True] [Bad: False] Source: 118.180.59.13 (118.180.59.13) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 334 Checksum: 0x36dd [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 649 0.038900000 182.110.226.44 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 649: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.640000000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.640000000 seconds [Time delta from previous captured frame: 0.000027000 seconds] [Time delta from previous displayed frame: 0.000027000 seconds] [Time since reference or first frame: 0.038900000 seconds] Frame Number: 649 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 182.110.226.44 (182.110.226.44), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x28 (DSCP 0x0a: Assured Forwarding 11; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 10.. = Differentiated Services Codepoint: Assured Forwarding 11 (0x0a) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0x8ee4 (36580) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x2097 [correct] [Good: True] [Bad: False] Source: 182.110.226.44 (182.110.226.44) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0x312e [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 650 0.038927000 115.222.155.36 [CENSORED] SSDP 284 HTTP/1.1 200 OK Frame 650: 284 bytes on wire (2272 bits), 284 bytes captured (2272 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.640027000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.640027000 seconds [Time delta from previous captured frame: 0.000027000 seconds] [Time delta from previous displayed frame: 0.000027000 seconds] [Time since reference or first frame: 0.038927000 seconds] Frame Number: 650 Frame Length: 284 bytes (2272 bits) Capture Length: 284 bytes (2272 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 115.222.155.36 (115.222.155.36), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 270 Identification: 0x2f43 (12099) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x0a13 [correct] [Good: True] [Bad: False] Source: 115.222.155.36 (115.222.155.36) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 250 Checksum: 0x76a2 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: upnp:rootdevice\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 651 0.038974000 118.180.59.13 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 651: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.640074000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.640074000 seconds [Time delta from previous captured frame: 0.000047000 seconds] [Time delta from previous displayed frame: 0.000047000 seconds] [Time since reference or first frame: 0.038974000 seconds] Frame Number: 651 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 118.180.59.13 (118.180.59.13), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0x8f6d (36717) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 242 Protocol: UDP (17) Header checksum: 0x0ae2 [correct] [Good: True] [Bad: False] Source: 118.180.59.13 (118.180.59.13) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0x65bf [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANIPConnection:1\r\n \r\n No. Time Source Destination Protocol Length Info 652 0.038995000 76.126.208.169 [CENSORED] SSDP 272 HTTP/1.1 200 OK Frame 652: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.640095000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.640095000 seconds [Time delta from previous captured frame: 0.000021000 seconds] [Time delta from previous displayed frame: 0.000021000 seconds] [Time since reference or first frame: 0.038995000 seconds] Frame Number: 652 Frame Length: 272 bytes (2176 bits) Capture Length: 272 bytes (2176 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 76.126.208.169 (76.126.208.169), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 258 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xeb3c [correct] [Good: True] [Bad: False] Source: 76.126.208.169 (76.126.208.169) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 238 Checksum: 0x354c [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: upnp:rootdevice\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::upnp:rootdevice\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.1.1:2048/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 653 0.039040000 76.126.208.169 [CENSORED] SSDP 344 HTTP/1.1 200 OK Frame 653: 344 bytes on wire (2752 bits), 344 bytes captured (2752 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.640140000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.640140000 seconds [Time delta from previous captured frame: 0.000045000 seconds] [Time delta from previous displayed frame: 0.000045000 seconds] [Time since reference or first frame: 0.039040000 seconds] Frame Number: 653 Frame Length: 344 bytes (2752 bits) Capture Length: 344 bytes (2752 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 76.126.208.169 (76.126.208.169), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 330 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xeaf4 [correct] [Good: True] [Bad: False] Source: 76.126.208.169 (76.126.208.169) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 310 Checksum: 0xc64d [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.1.1:2048/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 654 0.039072000 76.126.208.169 [CENSORED] SSDP 340 HTTP/1.1 200 OK Frame 654: 340 bytes on wire (2720 bits), 340 bytes captured (2720 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.640172000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.640172000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.039072000 seconds] Frame Number: 654 Frame Length: 340 bytes (2720 bits) Capture Length: 340 bytes (2720 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 76.126.208.169 (76.126.208.169), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 326 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xeaf8 [correct] [Good: True] [Bad: False] Source: 76.126.208.169 (76.126.208.169) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 306 Checksum: 0xec7b [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.1.1:2048/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 655 0.039109000 115.222.155.36 [CENSORED] SSDP 348 HTTP/1.1 200 OK Frame 655: 348 bytes on wire (2784 bits), 348 bytes captured (2784 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.640209000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.640209000 seconds [Time delta from previous captured frame: 0.000037000 seconds] [Time delta from previous displayed frame: 0.000037000 seconds] [Time since reference or first frame: 0.039109000 seconds] Frame Number: 655 Frame Length: 348 bytes (2784 bits) Capture Length: 348 bytes (2784 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 115.222.155.36 (115.222.155.36), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 334 Identification: 0x2f44 (12100) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x09d2 [correct] [Good: True] [Bad: False] Source: 115.222.155.36 (115.222.155.36) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 314 Checksum: 0xb05c [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n \r\n No. Time Source Destination Protocol Length Info 656 0.039141000 142.136.156.153 [CENSORED] SSDP 344 HTTP/1.1 200 OK Frame 656: 344 bytes on wire (2752 bits), 344 bytes captured (2752 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.640241000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.640241000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.039141000 seconds] Frame Number: 656 Frame Length: 344 bytes (2752 bits) Capture Length: 344 bytes (2752 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 142.136.156.153 (142.136.156.153), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 330 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 247 Protocol: UDP (17) Header checksum: 0xdbfa [correct] [Good: True] [Bad: False] Source: 142.136.156.153 (142.136.156.153) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 310 Checksum: 0x028b [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65530/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n USN: uuid:6e645cc8-1dd2-11b2-8f60-9aa9a059afe3::urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n \r\n No. Time Source Destination Protocol Length Info 657 0.039177000 75.134.144.219 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 657: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.640277000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.640277000 seconds [Time delta from previous captured frame: 0.000036000 seconds] [Time delta from previous displayed frame: 0.000036000 seconds] [Time since reference or first frame: 0.039177000 seconds] Frame Number: 657 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 75.134.144.219 (75.134.144.219), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0x835c (33628) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0xa359 [correct] [Good: True] [Bad: False] Source: 75.134.144.219 (75.134.144.219) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0x299d [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-wifialliance-org:device:WFADevice:\r\n USN: uuid:2a85078e-1dd2-11b2-a580-c84cd024adf0::urn:schemas-wifialliance-org:device:WFADevice:\r\n \r\n No. Time Source Destination Protocol Length Info 658 0.039212000 75.134.144.219 [CENSORED] SSDP 359 HTTP/1.1 200 OK Frame 658: 359 bytes on wire (2872 bits), 359 bytes captured (2872 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.640312000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.640312000 seconds [Time delta from previous captured frame: 0.000035000 seconds] [Time delta from previous displayed frame: 0.000035000 seconds] [Time since reference or first frame: 0.039212000 seconds] Frame Number: 658 Frame Length: 359 bytes (2872 bits) Capture Length: 359 bytes (2872 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 75.134.144.219 (75.134.144.219), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 345 Identification: 0x835d (33629) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0xa34e [correct] [Good: True] [Bad: False] Source: 75.134.144.219 (75.134.144.219) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 325 Checksum: 0xfa42 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-wifialliance-org:service:WFAWLANConfig:\r\n USN: uuid:2a85078e-1dd2-11b2-a580-c84cd024adf0::urn:schemas-wifialliance-org:service:WFAWLANConfig:\r\n \r\n No. Time Source Destination Protocol Length Info 659 0.039244000 142.136.156.153 [CENSORED] SSDP 344 HTTP/1.1 200 OK Frame 659: 344 bytes on wire (2752 bits), 344 bytes captured (2752 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.640344000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.640344000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.039244000 seconds] Frame Number: 659 Frame Length: 344 bytes (2752 bits) Capture Length: 344 bytes (2752 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 142.136.156.153 (142.136.156.153), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 330 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 247 Protocol: UDP (17) Header checksum: 0xdbfa [correct] [Good: True] [Bad: False] Source: 142.136.156.153 (142.136.156.153) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 310 Checksum: 0x1888 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65530/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-wifialliance-org:device:WFADevice:1\r\n USN: uuid:6e6747a8-1dd2-11b2-a09c-9b7b2c4c64d7::urn:schemas-wifialliance-org:device:WFADevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 660 0.039279000 142.136.156.153 [CENSORED] SSDP 354 HTTP/1.1 200 OK Frame 660: 354 bytes on wire (2832 bits), 354 bytes captured (2832 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.640379000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.640379000 seconds [Time delta from previous captured frame: 0.000035000 seconds] [Time delta from previous displayed frame: 0.000035000 seconds] [Time since reference or first frame: 0.039279000 seconds] Frame Number: 660 Frame Length: 354 bytes (2832 bits) Capture Length: 354 bytes (2832 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 142.136.156.153 (142.136.156.153), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 340 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 247 Protocol: UDP (17) Header checksum: 0xdbf0 [correct] [Good: True] [Bad: False] Source: 142.136.156.153 (142.136.156.153) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 320 Checksum: 0xdd39 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65530/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-wifialliance-org:service:WFAWLANConfig:1\r\n USN: uuid:6e6747a8-1dd2-11b2-a09c-9b7b2c4c64d7::urn:schemas-wifialliance-org:service:WFAWLANConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 661 0.039304000 142.136.156.153 [CENSORED] SSDP 289 HTTP/1.1 200 OK Frame 661: 289 bytes on wire (2312 bits), 289 bytes captured (2312 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.640404000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.640404000 seconds [Time delta from previous captured frame: 0.000025000 seconds] [Time delta from previous displayed frame: 0.000025000 seconds] [Time since reference or first frame: 0.039304000 seconds] Frame Number: 661 Frame Length: 289 bytes (2312 bits) Capture Length: 289 bytes (2312 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 142.136.156.153 (142.136.156.153), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 275 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 247 Protocol: UDP (17) Header checksum: 0xdc31 [correct] [Good: True] [Bad: False] Source: 142.136.156.153 (142.136.156.153) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 255 Checksum: 0x9238 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65530/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: uuid:6e645cc8-1dd2-11b2-8f60-9aa9a059afe3\r\n USN: uuid:6e645cc8-1dd2-11b2-8f60-9aa9a059afe3\r\n \r\n No. Time Source Destination Protocol Length Info 662 0.039337000 142.136.156.153 [CENSORED] SSDP 289 HTTP/1.1 200 OK Frame 662: 289 bytes on wire (2312 bits), 289 bytes captured (2312 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.640437000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.640437000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.039337000 seconds] Frame Number: 662 Frame Length: 289 bytes (2312 bits) Capture Length: 289 bytes (2312 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 142.136.156.153 (142.136.156.153), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 275 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 247 Protocol: UDP (17) Header checksum: 0xdc31 [correct] [Good: True] [Bad: False] Source: 142.136.156.153 (142.136.156.153) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 255 Checksum: 0xfe05 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65530/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: uuid:6e655f24-1dd2-11b2-a3d1-838d22b06f81\r\n USN: uuid:6e655f24-1dd2-11b2-a3d1-838d22b06f81\r\n \r\n No. Time Source Destination Protocol Length Info 663 0.039370000 142.136.156.153 [CENSORED] SSDP 289 HTTP/1.1 200 OK Frame 663: 289 bytes on wire (2312 bits), 289 bytes captured (2312 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.640470000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.640470000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.039370000 seconds] Frame Number: 663 Frame Length: 289 bytes (2312 bits) Capture Length: 289 bytes (2312 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 142.136.156.153 (142.136.156.153), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 275 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 247 Protocol: UDP (17) Header checksum: 0xdc31 [correct] [Good: True] [Bad: False] Source: 142.136.156.153 (142.136.156.153) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 255 Checksum: 0xade6 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65530/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: uuid:6e665866-1dd2-11b2-ab45-addca2a0b3b6\r\n USN: uuid:6e665866-1dd2-11b2-ab45-addca2a0b3b6\r\n \r\n No. Time Source Destination Protocol Length Info 664 0.039414000 171.104.96.11 [CENSORED] SSDP 352 HTTP/1.1 200 OK Frame 664: 352 bytes on wire (2816 bits), 352 bytes captured (2816 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.640514000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.640514000 seconds [Time delta from previous captured frame: 0.000044000 seconds] [Time delta from previous displayed frame: 0.000044000 seconds] [Time since reference or first frame: 0.039414000 seconds] Frame Number: 664 Frame Length: 352 bytes (2816 bits) Capture Length: 352 bytes (2816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 171.104.96.11 (171.104.96.11), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 338 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0xfda0 [correct] [Good: True] [Bad: False] Source: 171.104.96.11 (171.104.96.11) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 318 Checksum: 0x86a8 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:3183/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 665 0.039446000 115.222.155.36 [CENSORED] SSDP 330 HTTP/1.1 200 OK Frame 665: 330 bytes on wire (2640 bits), 330 bytes captured (2640 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.640546000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.640546000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.039446000 seconds] Frame Number: 665 Frame Length: 330 bytes (2640 bits) Capture Length: 330 bytes (2640 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 115.222.155.36 (115.222.155.36), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 316 Identification: 0x2f48 (12104) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x09e0 [correct] [Good: True] [Bad: False] Source: 115.222.155.36 (115.222.155.36) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 296 Checksum: 0x1881 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 666 0.039483000 115.222.155.36 [CENSORED] SSDP 362 HTTP/1.1 200 OK Frame 666: 362 bytes on wire (2896 bits), 362 bytes captured (2896 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.640583000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.640583000 seconds [Time delta from previous captured frame: 0.000037000 seconds] [Time delta from previous displayed frame: 0.000037000 seconds] [Time since reference or first frame: 0.039483000 seconds] Frame Number: 666 Frame Length: 362 bytes (2896 bits) Capture Length: 362 bytes (2896 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 115.222.155.36 (115.222.155.36), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 348 Identification: 0x2f49 (12105) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x09bf [correct] [Good: True] [Bad: False] Source: 115.222.155.36 (115.222.155.36) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 328 Checksum: 0x1eed [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 667 0.039552000 115.222.155.36 [CENSORED] SSDP 368 HTTP/1.1 200 OK Frame 667: 368 bytes on wire (2944 bits), 368 bytes captured (2944 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.640652000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.640652000 seconds [Time delta from previous captured frame: 0.000069000 seconds] [Time delta from previous displayed frame: 0.000069000 seconds] [Time since reference or first frame: 0.039552000 seconds] Frame Number: 667 Frame Length: 368 bytes (2944 bits) Capture Length: 368 bytes (2944 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 115.222.155.36 (115.222.155.36), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 354 Identification: 0x2f4a (12106) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x09b8 [correct] [Good: True] [Bad: False] Source: 115.222.155.36 (115.222.155.36) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 334 Checksum: 0xd99b [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 668 0.039579000 123.156.234.229 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 668: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.640679000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.640679000 seconds [Time delta from previous captured frame: 0.000027000 seconds] [Time delta from previous displayed frame: 0.000027000 seconds] [Time since reference or first frame: 0.039579000 seconds] Frame Number: 668 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 123.156.234.229 (123.156.234.229), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0xf13f (61759) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xf06c [correct] [Good: True] [Bad: False] Source: 123.156.234.229 (123.156.234.229) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0x6347 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 669 0.039608000 123.72.90.109 [CENSORED] SSDP 284 HTTP/1.1 200 OK Frame 669: 284 bytes on wire (2272 bits), 284 bytes captured (2272 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.640708000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.640708000 seconds [Time delta from previous captured frame: 0.000029000 seconds] [Time delta from previous displayed frame: 0.000029000 seconds] [Time since reference or first frame: 0.039608000 seconds] Frame Number: 669 Frame Length: 284 bytes (2272 bits) Capture Length: 284 bytes (2272 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 123.72.90.109 (123.72.90.109), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 270 Identification: 0x751a (29978) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 250 Protocol: UDP (17) Header checksum: 0xf988 [correct] [Good: True] [Bad: False] Source: 123.72.90.109 (123.72.90.109) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 250 Checksum: 0xafef [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: upnp:rootdevice\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 670 0.039651000 123.72.90.109 [CENSORED] SSDP 348 HTTP/1.1 200 OK Frame 670: 348 bytes on wire (2784 bits), 348 bytes captured (2784 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.640751000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.640751000 seconds [Time delta from previous captured frame: 0.000043000 seconds] [Time delta from previous displayed frame: 0.000043000 seconds] [Time since reference or first frame: 0.039651000 seconds] Frame Number: 670 Frame Length: 348 bytes (2784 bits) Capture Length: 348 bytes (2784 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 123.72.90.109 (123.72.90.109), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 334 Identification: 0x751b (29979) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 250 Protocol: UDP (17) Header checksum: 0xf947 [correct] [Good: True] [Bad: False] Source: 123.72.90.109 (123.72.90.109) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 314 Checksum: 0xe9a9 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n \r\n No. Time Source Destination Protocol Length Info 671 0.039678000 123.72.90.109 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 671: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.640778000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.640778000 seconds [Time delta from previous captured frame: 0.000027000 seconds] [Time delta from previous displayed frame: 0.000027000 seconds] [Time since reference or first frame: 0.039678000 seconds] Frame Number: 671 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 123.72.90.109 (123.72.90.109), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0x751c (29980) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 250 Protocol: UDP (17) Header checksum: 0xf96c [correct] [Good: True] [Bad: False] Source: 123.72.90.109 (123.72.90.109) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0x1bcd [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 672 0.039716000 182.247.32.224 [CENSORED] SSDP 332 HTTP/1.1 200 OK Frame 672: 332 bytes on wire (2656 bits), 332 bytes captured (2656 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.640816000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.640816000 seconds [Time delta from previous captured frame: 0.000038000 seconds] [Time delta from previous displayed frame: 0.000038000 seconds] [Time since reference or first frame: 0.039716000 seconds] Frame Number: 672 Frame Length: 332 bytes (2656 bits) Capture Length: 332 bytes (2656 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 182.247.32.224 (182.247.32.224), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 318 Identification: 0xfa0c (64012) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x7744 [correct] [Good: True] [Bad: False] Source: 182.247.32.224 (182.247.32.224) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 298 Checksum: 0x55cd [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000::urn:schemas-upnp-org:device:WANDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 673 0.039750000 171.104.96.11 [CENSORED] SSDP 334 HTTP/1.1 200 OK Frame 673: 334 bytes on wire (2672 bits), 334 bytes captured (2672 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.640850000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.640850000 seconds [Time delta from previous captured frame: 0.000034000 seconds] [Time delta from previous displayed frame: 0.000034000 seconds] [Time since reference or first frame: 0.039750000 seconds] Frame Number: 673 Frame Length: 334 bytes (2672 bits) Capture Length: 334 bytes (2672 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 171.104.96.11 (171.104.96.11), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 320 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0xfdb2 [correct] [Good: True] [Bad: False] Source: 171.104.96.11 (171.104.96.11) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 300 Checksum: 0xb0f7 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:service:WANIPConnection:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:3183/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 674 0.039782000 120.10.119.38 [CENSORED] SSDP 330 HTTP/1.1 200 OK Frame 674: 330 bytes on wire (2640 bits), 330 bytes captured (2640 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.640882000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.640882000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.039782000 seconds] Frame Number: 674 Frame Length: 330 bytes (2640 bits) Capture Length: 330 bytes (2640 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 120.10.119.38 (120.10.119.38), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 316 Identification: 0xac64 (44132) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xac95 [correct] [Good: True] [Bad: False] Source: 120.10.119.38 (120.10.119.38) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 296 Checksum: 0x3853 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 675 0.039815000 139.212.26.197 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 675: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.640915000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.640915000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.039815000 seconds] Frame Number: 675 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 139.212.26.197 (139.212.26.197), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0xd723 (55075) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xca81 [correct] [Good: True] [Bad: False] Source: 139.212.26.197 (139.212.26.197) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0x2330 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 676 0.039859000 183.163.38.224 [CENSORED] SSDP 368 HTTP/1.1 200 OK Frame 676: 368 bytes on wire (2944 bits), 368 bytes captured (2944 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.640959000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.640959000 seconds [Time delta from previous captured frame: 0.000044000 seconds] [Time delta from previous displayed frame: 0.000044000 seconds] [Time since reference or first frame: 0.039859000 seconds] Frame Number: 676 Frame Length: 368 bytes (2944 bits) Capture Length: 368 bytes (2944 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 183.163.38.224 (183.163.38.224), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 354 Identification: 0xaf35 (44853) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0xbb4b [correct] [Good: True] [Bad: False] Source: 183.163.38.224 (183.163.38.224) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 334 Checksum: 0x0a1b [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 677 0.039889000 115.222.155.36 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 677: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.640989000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.640989000 seconds [Time delta from previous captured frame: 0.000030000 seconds] [Time delta from previous displayed frame: 0.000030000 seconds] [Time since reference or first frame: 0.039889000 seconds] Frame Number: 677 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 115.222.155.36 (115.222.155.36), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0x2f4b (12107) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x09c3 [correct] [Good: True] [Bad: False] Source: 115.222.155.36 (115.222.155.36) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0x087e [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANIPConnection:1\r\n \r\n No. Time Source Destination Protocol Length Info 678 0.039917000 115.222.155.36 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 678: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.641017000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.641017000 seconds [Time delta from previous captured frame: 0.000028000 seconds] [Time delta from previous displayed frame: 0.000028000 seconds] [Time since reference or first frame: 0.039917000 seconds] Frame Number: 678 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 115.222.155.36 (115.222.155.36), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0x2f4c (12108) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x09f0 [correct] [Good: True] [Bad: False] Source: 115.222.155.36 (115.222.155.36) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0xbac6 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 679 0.039958000 218.11.204.163 [CENSORED] SSDP 364 HTTP/1.1 200 OK Frame 679: 364 bytes on wire (2912 bits), 364 bytes captured (2912 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.641058000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.641058000 seconds [Time delta from previous captured frame: 0.000041000 seconds] [Time delta from previous displayed frame: 0.000041000 seconds] [Time since reference or first frame: 0.039958000 seconds] Frame Number: 679 Frame Length: 364 bytes (2912 bits) Capture Length: 364 bytes (2912 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 218.11.204.163 (218.11.204.163), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 350 Identification: 0x79ae (31150) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x27ab [correct] [Good: True] [Bad: False] Source: 218.11.204.163 (218.11.204.163) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 330 Checksum: 0xff2c [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.2.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 680 0.039993000 218.11.204.163 [CENSORED] SSDP 362 HTTP/1.1 200 OK Frame 680: 362 bytes on wire (2896 bits), 362 bytes captured (2896 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.641093000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.641093000 seconds [Time delta from previous captured frame: 0.000035000 seconds] [Time delta from previous displayed frame: 0.000035000 seconds] [Time since reference or first frame: 0.039993000 seconds] Frame Number: 680 Frame Length: 362 bytes (2896 bits) Capture Length: 362 bytes (2896 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 218.11.204.163 (218.11.204.163), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 348 Identification: 0x79b0 (31152) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x27ab [correct] [Good: True] [Bad: False] Source: 218.11.204.163 (218.11.204.163) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 328 Checksum: 0x873f [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.2.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 681 0.040038000 24.205.39.121 [CENSORED] SSDP 288 HTTP/1.1 200 OK Frame 681: 288 bytes on wire (2304 bits), 288 bytes captured (2304 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.641138000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.641138000 seconds [Time delta from previous captured frame: 0.000045000 seconds] [Time delta from previous displayed frame: 0.000045000 seconds] [Time since reference or first frame: 0.040038000 seconds] Frame Number: 681 Frame Length: 288 bytes (2304 bits) Capture Length: 288 bytes (2304 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 24.205.39.121 (24.205.39.121), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 274 Identification: 0x4eba (20154) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 248 Protocol: UDP (17) Header checksum: 0x7754 [correct] [Good: True] [Bad: False] Source: 24.205.39.121 (24.205.39.121) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 254 Checksum: 0x8a10 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.10.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: upnp:rootdevice\r\n USN: uuid:11111111-1111-1111-1111-111111111111::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 682 0.040086000 24.205.39.121 [CENSORED] SSDP 358 HTTP/1.1 200 OK Frame 682: 358 bytes on wire (2864 bits), 358 bytes captured (2864 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.641186000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.641186000 seconds [Time delta from previous captured frame: 0.000048000 seconds] [Time delta from previous displayed frame: 0.000048000 seconds] [Time since reference or first frame: 0.040086000 seconds] Frame Number: 682 Frame Length: 358 bytes (2864 bits) Capture Length: 358 bytes (2864 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 24.205.39.121 (24.205.39.121), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 344 Identification: 0x4ebb (20155) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 248 Protocol: UDP (17) Header checksum: 0x770d [correct] [Good: True] [Bad: False] Source: 24.205.39.121 (24.205.39.121) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 324 Checksum: 0xb5dd [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.10.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n USN: uuid:11111111-1111-1111-1111-111111111111::urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 683 0.040115000 24.205.39.121 [CENSORED] SSDP 334 HTTP/1.1 200 OK Frame 683: 334 bytes on wire (2672 bits), 334 bytes captured (2672 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.641215000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.641215000 seconds [Time delta from previous captured frame: 0.000029000 seconds] [Time delta from previous displayed frame: 0.000029000 seconds] [Time since reference or first frame: 0.040115000 seconds] Frame Number: 683 Frame Length: 334 bytes (2672 bits) Capture Length: 334 bytes (2672 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 24.205.39.121 (24.205.39.121), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 320 Identification: 0x4ebc (20156) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 248 Protocol: UDP (17) Header checksum: 0x7724 [correct] [Good: True] [Bad: False] Source: 24.205.39.121 (24.205.39.121) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 300 Checksum: 0xdf38 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.10.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:WANDevice:\r\n USN: uuid:22222222-2222-2222-2222-222222222222::urn:schemas-upnp-org:device:WANDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 684 0.040155000 24.205.39.121 [CENSORED] SSDP 366 HTTP/1.1 200 OK Frame 684: 366 bytes on wire (2928 bits), 366 bytes captured (2928 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.641255000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.641255000 seconds [Time delta from previous captured frame: 0.000040000 seconds] [Time delta from previous displayed frame: 0.000040000 seconds] [Time since reference or first frame: 0.040155000 seconds] Frame Number: 684 Frame Length: 366 bytes (2928 bits) Capture Length: 366 bytes (2928 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 24.205.39.121 (24.205.39.121), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 352 Identification: 0x4ebd (20157) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 248 Protocol: UDP (17) Header checksum: 0x7703 [correct] [Good: True] [Bad: False] Source: 24.205.39.121 (24.205.39.121) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 332 Checksum: 0xdbec [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.10.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:\r\n USN: uuid:22222222-2222-2222-2222-222222222222::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:\r\n \r\n No. Time Source Destination Protocol Length Info 685 0.040181000 171.104.96.11 [CENSORED] SSDP 336 HTTP/1.1 200 OK Frame 685: 336 bytes on wire (2688 bits), 336 bytes captured (2688 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.641281000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.641281000 seconds [Time delta from previous captured frame: 0.000026000 seconds] [Time delta from previous displayed frame: 0.000026000 seconds] [Time since reference or first frame: 0.040181000 seconds] Frame Number: 685 Frame Length: 336 bytes (2688 bits) Capture Length: 336 bytes (2688 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 171.104.96.11 (171.104.96.11), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 322 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0xfdb0 [correct] [Good: True] [Bad: False] Source: 171.104.96.11 (171.104.96.11) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 302 Checksum: 0xda1b [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANPPPConnection:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:service:WANPPPConnection:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:3183/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 686 0.040220000 24.196.37.146 [CENSORED] SSDP 344 HTTP/1.1 200 OK Frame 686: 344 bytes on wire (2752 bits), 344 bytes captured (2752 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.641320000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.641320000 seconds [Time delta from previous captured frame: 0.000039000 seconds] [Time delta from previous displayed frame: 0.000039000 seconds] [Time since reference or first frame: 0.040220000 seconds] Frame Number: 686 Frame Length: 344 bytes (2752 bits) Capture Length: 344 bytes (2752 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 24.196.37.146 (24.196.37.146), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 330 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0xc4c6 [correct] [Good: True] [Bad: False] Source: 24.196.37.146 (24.196.37.146) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 310 Checksum: 0x2639 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n USN: uuid:cd3941b4-1dd1-11b2-b51a-a0de15e615a8::urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n \r\n No. Time Source Destination Protocol Length Info 687 0.040252000 24.196.37.146 [CENSORED] SSDP 344 HTTP/1.1 200 OK Frame 687: 344 bytes on wire (2752 bits), 344 bytes captured (2752 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.641352000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.641352000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.040252000 seconds] Frame Number: 687 Frame Length: 344 bytes (2752 bits) Capture Length: 344 bytes (2752 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 24.196.37.146 (24.196.37.146), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 330 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0xc4c6 [correct] [Good: True] [Bad: False] Source: 24.196.37.146 (24.196.37.146) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 310 Checksum: 0xfec9 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-wifialliance-org:device:WFADevice:1\r\n USN: uuid:cd435dca-1dd1-11b2-8dec-9528f10e79af::urn:schemas-wifialliance-org:device:WFADevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 688 0.040291000 67.8.85.141 [CENSORED] SSDP 360 HTTP/1.1 200 OK Frame 688: 360 bytes on wire (2880 bits), 360 bytes captured (2880 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.641391000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.641391000 seconds [Time delta from previous captured frame: 0.000039000 seconds] [Time delta from previous displayed frame: 0.000039000 seconds] [Time since reference or first frame: 0.040291000 seconds] Frame Number: 688 Frame Length: 360 bytes (2880 bits) Capture Length: 360 bytes (2880 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 67.8.85.141 (67.8.85.141), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 346 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 247 Protocol: UDP (17) Header checksum: 0x6e77 [correct] [Good: True] [Bad: False] Source: 67.8.85.141 (67.8.85.141) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 326 Checksum: 0xb2f7 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n USN: uuid:613181ae-1dd2-11b2-bc04-8be5a8e981fb::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 689 0.040317000 183.141.157.46 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 689: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.641417000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.641417000 seconds [Time delta from previous captured frame: 0.000026000 seconds] [Time delta from previous displayed frame: 0.000026000 seconds] [Time since reference or first frame: 0.040317000 seconds] Frame Number: 689 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 183.141.157.46 (183.141.157.46), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0x4220 (16928) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xb162 [correct] [Good: True] [Bad: False] Source: 183.141.157.46 (183.141.157.46) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0x9cc6 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 690 0.040359000 98.230.191.220 [CENSORED] SSDP 365 HTTP/1.1 200 OK Frame 690: 365 bytes on wire (2920 bits), 365 bytes captured (2920 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.641459000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.641459000 seconds [Time delta from previous captured frame: 0.000042000 seconds] [Time delta from previous displayed frame: 0.000042000 seconds] [Time since reference or first frame: 0.040359000 seconds] Frame Number: 690 Frame Length: 365 bytes (2920 bits) Capture Length: 365 bytes (2920 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 98.230.191.220 (98.230.191.220), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 351 Identification: 0xef40 (61248) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 253 Protocol: UDP (17) Header checksum: 0xef03 [correct] [Good: True] [Bad: False] Source: 98.230.191.220 (98.230.191.220) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 331 Checksum: 0x6cdf [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:\r\n USN: uuid:add47972-1dd1-11b2-b0c2-d2e93494c688::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:\r\n \r\n No. Time Source Destination Protocol Length Info 691 0.040389000 98.230.191.220 [CENSORED] SSDP 353 HTTP/1.1 200 OK Frame 691: 353 bytes on wire (2824 bits), 353 bytes captured (2824 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.641489000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.641489000 seconds [Time delta from previous captured frame: 0.000030000 seconds] [Time delta from previous displayed frame: 0.000030000 seconds] [Time since reference or first frame: 0.040389000 seconds] Frame Number: 691 Frame Length: 353 bytes (2824 bits) Capture Length: 353 bytes (2824 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 98.230.191.220 (98.230.191.220), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 339 Identification: 0xef41 (61249) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 253 Protocol: UDP (17) Header checksum: 0xef0e [correct] [Good: True] [Bad: False] Source: 98.230.191.220 (98.230.191.220) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 319 Checksum: 0x679d [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:\r\n USN: uuid:add814b0-1dd1-11b2-b728-aa455660dce1::urn:schemas-upnp-org:device:WANConnectionDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 692 0.040441000 74.197.157.207 [CENSORED] SSDP 357 HTTP/1.1 200 OK Frame 692: 357 bytes on wire (2856 bits), 357 bytes captured (2856 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.641541000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.641541000 seconds [Time delta from previous captured frame: 0.000052000 seconds] [Time delta from previous displayed frame: 0.000052000 seconds] [Time since reference or first frame: 0.040441000 seconds] Frame Number: 692 Frame Length: 357 bytes (2856 bits) Capture Length: 357 bytes (2856 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 74.197.157.207 (74.197.157.207), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 343 Identification: 0xe355 (58197) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x3725 [correct] [Good: True] [Bad: False] Source: 74.197.157.207 (74.197.157.207) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 323 Checksum: 0xd3bb [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n USN: uuid:2a78d252-1dd2-11b2-abbe-eaae2a13e28a::urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 693 0.040471000 74.197.157.207 [CENSORED] SSDP 333 HTTP/1.1 200 OK Frame 693: 333 bytes on wire (2664 bits), 333 bytes captured (2664 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.641571000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.641571000 seconds [Time delta from previous captured frame: 0.000030000 seconds] [Time delta from previous displayed frame: 0.000030000 seconds] [Time since reference or first frame: 0.040471000 seconds] Frame Number: 693 Frame Length: 333 bytes (2664 bits) Capture Length: 333 bytes (2664 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 74.197.157.207 (74.197.157.207), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 319 Identification: 0xe356 (58198) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x373c [correct] [Good: True] [Bad: False] Source: 74.197.157.207 (74.197.157.207) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 299 Checksum: 0xfa45 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:WANDevice:\r\n USN: uuid:2a7d096c-1dd2-11b2-a854-ffd9f1faf77c::urn:schemas-upnp-org:device:WANDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 694 0.040509000 98.230.191.220 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 694: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.641609000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.641609000 seconds [Time delta from previous captured frame: 0.000038000 seconds] [Time delta from previous displayed frame: 0.000038000 seconds] [Time since reference or first frame: 0.040509000 seconds] Frame Number: 694 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 98.230.191.220 (98.230.191.220), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0xef42 (61250) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 253 Protocol: UDP (17) Header checksum: 0xef11 [correct] [Good: True] [Bad: False] Source: 98.230.191.220 (98.230.191.220) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0xc309 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANPPPConnection:\r\n USN: uuid:add814b0-1dd1-11b2-b728-aa455660dce1::urn:schemas-upnp-org:service:WANPPPConnection:\r\n \r\n No. Time Source Destination Protocol Length Info 695 0.040543000 98.230.191.220 [CENSORED] SSDP 357 HTTP/1.1 200 OK Frame 695: 357 bytes on wire (2856 bits), 357 bytes captured (2856 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.641643000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.641643000 seconds [Time delta from previous captured frame: 0.000034000 seconds] [Time delta from previous displayed frame: 0.000034000 seconds] [Time since reference or first frame: 0.040543000 seconds] Frame Number: 695 Frame Length: 357 bytes (2856 bits) Capture Length: 357 bytes (2856 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 98.230.191.220 (98.230.191.220), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 343 Identification: 0xef52 (61266) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 253 Protocol: UDP (17) Header checksum: 0xeef9 [correct] [Good: True] [Bad: False] Source: 98.230.191.220 (98.230.191.220) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 323 Checksum: 0xe684 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n USN: uuid:add0de0c-1dd1-11b2-98f8-e3f7e0807e16::urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 696 0.040572000 98.230.191.220 [CENSORED] SSDP 333 HTTP/1.1 200 OK Frame 696: 333 bytes on wire (2664 bits), 333 bytes captured (2664 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.641672000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.641672000 seconds [Time delta from previous captured frame: 0.000029000 seconds] [Time delta from previous displayed frame: 0.000029000 seconds] [Time since reference or first frame: 0.040572000 seconds] Frame Number: 696 Frame Length: 333 bytes (2664 bits) Capture Length: 333 bytes (2664 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 98.230.191.220 (98.230.191.220), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 319 Identification: 0xef53 (61267) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 253 Protocol: UDP (17) Header checksum: 0xef10 [correct] [Good: True] [Bad: False] Source: 98.230.191.220 (98.230.191.220) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 299 Checksum: 0x7922 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:WANDevice:\r\n USN: uuid:add47972-1dd1-11b2-b0c2-d2e93494c688::urn:schemas-upnp-org:device:WANDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 697 0.040638000 183.193.119.144 [CENSORED] SSDP 362 HTTP/1.1 200 OK Frame 697: 362 bytes on wire (2896 bits), 362 bytes captured (2896 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.641738000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.641738000 seconds [Time delta from previous captured frame: 0.000066000 seconds] [Time delta from previous displayed frame: 0.000066000 seconds] [Time since reference or first frame: 0.040638000 seconds] Frame Number: 697 Frame Length: 362 bytes (2896 bits) Capture Length: 362 bytes (2896 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 183.193.119.144 (183.193.119.144), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 348 Identification: 0xc769 (51049) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x524f [correct] [Good: True] [Bad: False] Source: 183.193.119.144 (183.193.119.144) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 328 Checksum: 0xfe9d [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 698 0.040677000 183.193.119.144 [CENSORED] SSDP 368 HTTP/1.1 200 OK Frame 698: 368 bytes on wire (2944 bits), 368 bytes captured (2944 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.641777000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.641777000 seconds [Time delta from previous captured frame: 0.000039000 seconds] [Time delta from previous displayed frame: 0.000039000 seconds] [Time since reference or first frame: 0.040677000 seconds] Frame Number: 698 Frame Length: 368 bytes (2944 bits) Capture Length: 368 bytes (2944 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 183.193.119.144 (183.193.119.144), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 354 Identification: 0xc76a (51050) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x5248 [correct] [Good: True] [Bad: False] Source: 183.193.119.144 (183.193.119.144) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 334 Checksum: 0xb94c [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 699 0.040708000 183.193.119.144 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 699: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.641808000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.641808000 seconds [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.040708000 seconds] Frame Number: 699 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 183.193.119.144 (183.193.119.144), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0xc76b (51051) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x5253 [correct] [Good: True] [Bad: False] Source: 183.193.119.144 (183.193.119.144) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0xe82e [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANIPConnection:1\r\n \r\n No. Time Source Destination Protocol Length Info 700 0.041290000 123.72.90.109 [CENSORED] SSDP 330 HTTP/1.1 200 OK Frame 700: 330 bytes on wire (2640 bits), 330 bytes captured (2640 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.642390000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.642390000 seconds [Time delta from previous captured frame: 0.000582000 seconds] [Time delta from previous displayed frame: 0.000582000 seconds] [Time since reference or first frame: 0.041290000 seconds] Frame Number: 700 Frame Length: 330 bytes (2640 bits) Capture Length: 330 bytes (2640 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 123.72.90.109 (123.72.90.109), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 316 Identification: 0x751f (29983) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 250 Protocol: UDP (17) Header checksum: 0xf955 [correct] [Good: True] [Bad: False] Source: 123.72.90.109 (123.72.90.109) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 296 Checksum: 0x51ce [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 701 0.041328000 123.72.90.109 [CENSORED] SSDP 362 HTTP/1.1 200 OK Frame 701: 362 bytes on wire (2896 bits), 362 bytes captured (2896 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.642428000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.642428000 seconds [Time delta from previous captured frame: 0.000038000 seconds] [Time delta from previous displayed frame: 0.000038000 seconds] [Time since reference or first frame: 0.041328000 seconds] Frame Number: 701 Frame Length: 362 bytes (2896 bits) Capture Length: 362 bytes (2896 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 123.72.90.109 (123.72.90.109), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 348 Identification: 0x7520 (29984) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 250 Protocol: UDP (17) Header checksum: 0xf934 [correct] [Good: True] [Bad: False] Source: 123.72.90.109 (123.72.90.109) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 328 Checksum: 0x583a [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 702 0.041360000 115.222.155.36 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 702: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.642460000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.642460000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.041360000 seconds] Frame Number: 702 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 115.222.155.36 (115.222.155.36), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0x2f56 (12118) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x09b8 [correct] [Good: True] [Bad: False] Source: 115.222.155.36 (115.222.155.36) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0x087e [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANIPConnection:1\r\n \r\n No. Time Source Destination Protocol Length Info 703 0.041384000 112.242.83.1 [CENSORED] SSDP 284 HTTP/1.1 200 OK Frame 703: 284 bytes on wire (2272 bits), 284 bytes captured (2272 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.642484000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.642484000 seconds [Time delta from previous captured frame: 0.000024000 seconds] [Time delta from previous displayed frame: 0.000024000 seconds] [Time since reference or first frame: 0.041384000 seconds] Frame Number: 703 Frame Length: 284 bytes (2272 bits) Capture Length: 284 bytes (2272 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 112.242.83.1 (112.242.83.1), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 270 Identification: 0x573a (22330) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x2d1b [correct] [Good: True] [Bad: False] Source: 112.242.83.1 (112.242.83.1) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 250 Checksum: 0xc1b1 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: upnp:rootdevice\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 704 0.041424000 123.170.94.234 [CENSORED] SSDP 348 HTTP/1.1 200 OK Frame 704: 348 bytes on wire (2784 bits), 348 bytes captured (2784 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.642524000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.642524000 seconds [Time delta from previous captured frame: 0.000040000 seconds] [Time delta from previous displayed frame: 0.000040000 seconds] [Time since reference or first frame: 0.041424000 seconds] Frame Number: 704 Frame Length: 348 bytes (2784 bits) Capture Length: 348 bytes (2784 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 123.170.94.234 (123.170.94.234), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 334 Identification: 0x09a5 (2469) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x63cf [correct] [Good: True] [Bad: False] Source: 123.170.94.234 (123.170.94.234) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 314 Checksum: 0xe4ca [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n \r\n No. Time Source Destination Protocol Length Info 705 0.041448000 123.170.94.234 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 705: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.642548000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.642548000 seconds [Time delta from previous captured frame: 0.000024000 seconds] [Time delta from previous displayed frame: 0.000024000 seconds] [Time since reference or first frame: 0.041448000 seconds] Frame Number: 705 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 123.170.94.234 (123.170.94.234), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0x09a6 (2470) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x6404 [correct] [Good: True] [Bad: False] Source: 123.170.94.234 (123.170.94.234) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0x16ee [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 706 0.041489000 71.81.235.253 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 706: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.642589000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.642589000 seconds [Time delta from previous captured frame: 0.000041000 seconds] [Time delta from previous displayed frame: 0.000041000 seconds] [Time since reference or first frame: 0.041489000 seconds] Frame Number: 706 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 71.81.235.253 (71.81.235.253), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0xb02f (45103) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 247 Protocol: UDP (17) Header checksum: 0x2399 [correct] [Good: True] [Bad: False] Source: 71.81.235.253 (71.81.235.253) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0xb5de [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANPPPConnection:\r\n USN: uuid:2a811534-1dd2-11b2-ab2a-8804aed09a71::urn:schemas-upnp-org:service:WANPPPConnection:\r\n \r\n No. Time Source Destination Protocol Length Info 707 0.041520000 71.81.235.253 [CENSORED] SSDP 347 HTTP/1.1 200 OK Frame 707: 347 bytes on wire (2776 bits), 347 bytes captured (2776 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.642620000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.642620000 seconds [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.041520000 seconds] Frame Number: 707 Frame Length: 347 bytes (2776 bits) Capture Length: 347 bytes (2776 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 71.81.235.253 (71.81.235.253), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 333 Identification: 0xb030 (45104) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 247 Protocol: UDP (17) Header checksum: 0x239a [correct] [Good: True] [Bad: False] Source: 71.81.235.253 (71.81.235.253) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 313 Checksum: 0x9ea8 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:\r\n USN: uuid:2a811534-1dd2-11b2-ab2a-8804aed09a71::urn:schemas-upnp-org:service:WANIPConnection:\r\n \r\n No. Time Source Destination Protocol Length Info 708 0.041544000 1.223.130.59 [CENSORED] SSDP 273 HTTP/1.1 200 OK Frame 708: 273 bytes on wire (2184 bits), 273 bytes captured (2184 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.642644000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.642644000 seconds [Time delta from previous captured frame: 0.000024000 seconds] [Time delta from previous displayed frame: 0.000024000 seconds] [Time since reference or first frame: 0.041544000 seconds] Frame Number: 708 Frame Length: 273 bytes (2184 bits) Capture Length: 273 bytes (2184 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 1.223.130.59 (1.223.130.59), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 259 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x8549 [correct] [Good: True] [Bad: False] Source: 1.223.130.59 (1.223.130.59) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 239 Checksum: 0x41a9 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: upnp:rootdevice\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::upnp:rootdevice\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:32768/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 709 0.041583000 123.244.179.155 [CENSORED] SSDP 332 HTTP/1.1 200 OK Frame 709: 332 bytes on wire (2656 bits), 332 bytes captured (2656 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.642683000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.642683000 seconds [Time delta from previous captured frame: 0.000039000 seconds] [Time delta from previous displayed frame: 0.000039000 seconds] [Time since reference or first frame: 0.041583000 seconds] Frame Number: 709 Frame Length: 332 bytes (2656 bits) Capture Length: 332 bytes (2656 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 123.244.179.155 (123.244.179.155), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 318 Identification: 0x07c0 (1984) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x10d9 [correct] [Good: True] [Bad: False] Source: 123.244.179.155 (123.244.179.155) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 298 Checksum: 0xfe14 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000::urn:schemas-upnp-org:device:WANDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 710 0.041653000 123.244.179.155 [CENSORED] SSDP 364 HTTP/1.1 200 OK Frame 710: 364 bytes on wire (2912 bits), 364 bytes captured (2912 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.642753000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.642753000 seconds [Time delta from previous captured frame: 0.000070000 seconds] [Time delta from previous displayed frame: 0.000070000 seconds] [Time since reference or first frame: 0.041653000 seconds] Frame Number: 710 Frame Length: 364 bytes (2912 bits) Capture Length: 364 bytes (2912 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 123.244.179.155 (123.244.179.155), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 350 Identification: 0x07c1 (1985) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x10b8 [correct] [Good: True] [Bad: False] Source: 123.244.179.155 (123.244.179.155) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 330 Checksum: 0x764d [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 711 0.041681000 123.244.179.155 [CENSORED] SSDP 330 HTTP/1.1 200 OK Frame 711: 330 bytes on wire (2640 bits), 330 bytes captured (2640 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.642781000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.642781000 seconds [Time delta from previous captured frame: 0.000028000 seconds] [Time delta from previous displayed frame: 0.000028000 seconds] [Time since reference or first frame: 0.041681000 seconds] Frame Number: 711 Frame Length: 330 bytes (2640 bits) Capture Length: 330 bytes (2640 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 123.244.179.155 (123.244.179.155), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 316 Identification: 0x07c2 (1986) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x10d9 [correct] [Good: True] [Bad: False] Source: 123.244.179.155 (123.244.179.155) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 296 Checksum: 0xf7f3 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 712 0.041719000 123.244.179.155 [CENSORED] SSDP 362 HTTP/1.1 200 OK Frame 712: 362 bytes on wire (2896 bits), 362 bytes captured (2896 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.642819000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.642819000 seconds [Time delta from previous captured frame: 0.000038000 seconds] [Time delta from previous displayed frame: 0.000038000 seconds] [Time since reference or first frame: 0.041719000 seconds] Frame Number: 712 Frame Length: 362 bytes (2896 bits) Capture Length: 362 bytes (2896 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 123.244.179.155 (123.244.179.155), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 348 Identification: 0x07c3 (1987) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x10b8 [correct] [Good: True] [Bad: False] Source: 123.244.179.155 (123.244.179.155) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 328 Checksum: 0xfe5f [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 713 0.041747000 171.104.96.11 [CENSORED] SSDP 336 HTTP/1.1 200 OK Frame 713: 336 bytes on wire (2688 bits), 336 bytes captured (2688 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.642847000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.642847000 seconds [Time delta from previous captured frame: 0.000028000 seconds] [Time delta from previous displayed frame: 0.000028000 seconds] [Time since reference or first frame: 0.041747000 seconds] Frame Number: 713 Frame Length: 336 bytes (2688 bits) Capture Length: 336 bytes (2688 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 171.104.96.11 (171.104.96.11), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 322 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0xfdb0 [correct] [Good: True] [Bad: False] Source: 171.104.96.11 (171.104.96.11) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 302 Checksum: 0xda1b [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANPPPConnection:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:service:WANPPPConnection:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:3183/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 714 0.041780000 171.104.96.11 [CENSORED] SSDP 336 HTTP/1.1 200 OK Frame 714: 336 bytes on wire (2688 bits), 336 bytes captured (2688 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.642880000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.642880000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.041780000 seconds] Frame Number: 714 Frame Length: 336 bytes (2688 bits) Capture Length: 336 bytes (2688 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 171.104.96.11 (171.104.96.11), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 322 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0xfdb0 [correct] [Good: True] [Bad: False] Source: 171.104.96.11 (171.104.96.11) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 302 Checksum: 0x7cbe [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:3183/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 715 0.041816000 123.244.179.155 [CENSORED] SSDP 368 HTTP/1.1 200 OK Frame 715: 368 bytes on wire (2944 bits), 368 bytes captured (2944 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.642916000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.642916000 seconds [Time delta from previous captured frame: 0.000036000 seconds] [Time delta from previous displayed frame: 0.000036000 seconds] [Time since reference or first frame: 0.041816000 seconds] Frame Number: 715 Frame Length: 368 bytes (2944 bits) Capture Length: 368 bytes (2944 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 123.244.179.155 (123.244.179.155), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 354 Identification: 0x07c4 (1988) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x10b1 [correct] [Good: True] [Bad: False] Source: 123.244.179.155 (123.244.179.155) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 334 Checksum: 0xb90e [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 716 0.041844000 123.244.179.155 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 716: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.642944000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.642944000 seconds [Time delta from previous captured frame: 0.000028000 seconds] [Time delta from previous displayed frame: 0.000028000 seconds] [Time since reference or first frame: 0.041844000 seconds] Frame Number: 716 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 123.244.179.155 (123.244.179.155), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0x07c6 (1990) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x10e9 [correct] [Good: True] [Bad: False] Source: 123.244.179.155 (123.244.179.155) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0x9a39 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 717 0.041883000 123.244.179.155 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 717: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.642983000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.642983000 seconds [Time delta from previous captured frame: 0.000039000 seconds] [Time delta from previous displayed frame: 0.000039000 seconds] [Time since reference or first frame: 0.041883000 seconds] Frame Number: 717 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 123.244.179.155 (123.244.179.155), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0x07c7 (1991) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x10ba [correct] [Good: True] [Bad: False] Source: 123.244.179.155 (123.244.179.155) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0xe716 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 718 0.041906000 123.244.179.155 [CENSORED] SSDP 284 HTTP/1.1 200 OK Frame 718: 284 bytes on wire (2272 bits), 284 bytes captured (2272 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.643006000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.643006000 seconds [Time delta from previous captured frame: 0.000023000 seconds] [Time delta from previous displayed frame: 0.000023000 seconds] [Time since reference or first frame: 0.041906000 seconds] Frame Number: 718 Frame Length: 284 bytes (2272 bits) Capture Length: 284 bytes (2272 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 123.244.179.155 (123.244.179.155), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 270 Identification: 0x07c8 (1992) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x1101 [correct] [Good: True] [Bad: False] Source: 123.244.179.155 (123.244.179.155) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 250 Checksum: 0x5615 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: upnp:rootdevice\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 719 0.041945000 123.244.179.155 [CENSORED] SSDP 348 HTTP/1.1 200 OK Frame 719: 348 bytes on wire (2784 bits), 348 bytes captured (2784 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.643045000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.643045000 seconds [Time delta from previous captured frame: 0.000039000 seconds] [Time delta from previous displayed frame: 0.000039000 seconds] [Time since reference or first frame: 0.041945000 seconds] Frame Number: 719 Frame Length: 348 bytes (2784 bits) Capture Length: 348 bytes (2784 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 123.244.179.155 (123.244.179.155), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 334 Identification: 0x07c9 (1993) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x10c0 [correct] [Good: True] [Bad: False] Source: 123.244.179.155 (123.244.179.155) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 314 Checksum: 0x8fcf [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n \r\n No. Time Source Destination Protocol Length Info 720 0.041972000 123.244.179.155 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 720: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.643072000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.643072000 seconds [Time delta from previous captured frame: 0.000027000 seconds] [Time delta from previous displayed frame: 0.000027000 seconds] [Time since reference or first frame: 0.041972000 seconds] Frame Number: 720 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 123.244.179.155 (123.244.179.155), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0x07ca (1994) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x10e5 [correct] [Good: True] [Bad: False] Source: 123.244.179.155 (123.244.179.155) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0xc1f2 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 721 0.042009000 123.244.179.155 [CENSORED] SSDP 332 HTTP/1.1 200 OK Frame 721: 332 bytes on wire (2656 bits), 332 bytes captured (2656 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.643109000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.643109000 seconds [Time delta from previous captured frame: 0.000037000 seconds] [Time delta from previous displayed frame: 0.000037000 seconds] [Time since reference or first frame: 0.042009000 seconds] Frame Number: 721 Frame Length: 332 bytes (2656 bits) Capture Length: 332 bytes (2656 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 123.244.179.155 (123.244.179.155), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 318 Identification: 0x07cb (1995) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x10ce [correct] [Good: True] [Bad: False] Source: 123.244.179.155 (123.244.179.155) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 298 Checksum: 0xfe14 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000::urn:schemas-upnp-org:device:WANDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 722 0.042047000 123.244.179.155 [CENSORED] SSDP 364 HTTP/1.1 200 OK Frame 722: 364 bytes on wire (2912 bits), 364 bytes captured (2912 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.643147000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.643147000 seconds [Time delta from previous captured frame: 0.000038000 seconds] [Time delta from previous displayed frame: 0.000038000 seconds] [Time since reference or first frame: 0.042047000 seconds] Frame Number: 722 Frame Length: 364 bytes (2912 bits) Capture Length: 364 bytes (2912 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 123.244.179.155 (123.244.179.155), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 350 Identification: 0x07cc (1996) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x10ad [correct] [Good: True] [Bad: False] Source: 123.244.179.155 (123.244.179.155) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 330 Checksum: 0x764d [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 723 0.042076000 123.244.179.155 [CENSORED] SSDP 330 HTTP/1.1 200 OK Frame 723: 330 bytes on wire (2640 bits), 330 bytes captured (2640 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.643176000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.643176000 seconds [Time delta from previous captured frame: 0.000029000 seconds] [Time delta from previous displayed frame: 0.000029000 seconds] [Time since reference or first frame: 0.042076000 seconds] Frame Number: 723 Frame Length: 330 bytes (2640 bits) Capture Length: 330 bytes (2640 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 123.244.179.155 (123.244.179.155), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 316 Identification: 0x07cd (1997) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x10ce [correct] [Good: True] [Bad: False] Source: 123.244.179.155 (123.244.179.155) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 296 Checksum: 0xf7f3 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 724 0.042113000 123.244.179.155 [CENSORED] SSDP 362 HTTP/1.1 200 OK Frame 724: 362 bytes on wire (2896 bits), 362 bytes captured (2896 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.643213000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.643213000 seconds [Time delta from previous captured frame: 0.000037000 seconds] [Time delta from previous displayed frame: 0.000037000 seconds] [Time since reference or first frame: 0.042113000 seconds] Frame Number: 724 Frame Length: 362 bytes (2896 bits) Capture Length: 362 bytes (2896 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 123.244.179.155 (123.244.179.155), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 348 Identification: 0x07ce (1998) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x10ad [correct] [Good: True] [Bad: False] Source: 123.244.179.155 (123.244.179.155) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 328 Checksum: 0xfe5f [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 725 0.042143000 1.223.130.59 [CENSORED] SSDP 345 HTTP/1.1 200 OK Frame 725: 345 bytes on wire (2760 bits), 345 bytes captured (2760 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.643243000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.643243000 seconds [Time delta from previous captured frame: 0.000030000 seconds] [Time delta from previous displayed frame: 0.000030000 seconds] [Time since reference or first frame: 0.042143000 seconds] Frame Number: 725 Frame Length: 345 bytes (2760 bits) Capture Length: 345 bytes (2760 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 1.223.130.59 (1.223.130.59), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 331 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x8501 [correct] [Good: True] [Bad: False] Source: 1.223.130.59 (1.223.130.59) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 311 Checksum: 0xd2aa [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:32768/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 726 0.042172000 114.111.250.181 [CENSORED] SSDP 336 HTTP/1.1 200 OK Frame 726: 336 bytes on wire (2688 bits), 336 bytes captured (2688 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.643272000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.643272000 seconds [Time delta from previous captured frame: 0.000029000 seconds] [Time delta from previous displayed frame: 0.000029000 seconds] [Time since reference or first frame: 0.042172000 seconds] Frame Number: 726 Frame Length: 336 bytes (2688 bits) Capture Length: 336 bytes (2688 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 114.111.250.181 (114.111.250.181), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 322 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x9bff [correct] [Good: True] [Bad: False] Source: 114.111.250.181 (114.111.250.181) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 302 Checksum: 0x7f61 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANPPPConnection:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:service:WANPPPConnection:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:4409/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 727 0.042209000 206.53.91.49 [CENSORED] SSDP 350 HTTP/1.1 200 OK Frame 727: 350 bytes on wire (2800 bits), 350 bytes captured (2800 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.643309000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.643309000 seconds [Time delta from previous captured frame: 0.000037000 seconds] [Time delta from previous displayed frame: 0.000037000 seconds] [Time since reference or first frame: 0.042209000 seconds] Frame Number: 727 Frame Length: 350 bytes (2800 bits) Capture Length: 350 bytes (2800 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 206.53.91.49 (206.53.91.49), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x28 (DSCP 0x0a: Assured Forwarding 11; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 10.. = Differentiated Services Codepoint: Assured Forwarding 11 (0x0a) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 336 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0xd987 [correct] [Good: True] [Bad: False] Source: 206.53.91.49 (206.53.91.49) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 316 Checksum: 0xd733 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://10.1.11.1:65530/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n USN: uuid:2322cf50-1dd2-11b2-b141-9f05b2c189c9::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 728 0.042240000 206.53.91.49 [CENSORED] SSDP 346 HTTP/1.1 200 OK Frame 728: 346 bytes on wire (2768 bits), 346 bytes captured (2768 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.643340000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.643340000 seconds [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.042240000 seconds] Frame Number: 728 Frame Length: 346 bytes (2768 bits) Capture Length: 346 bytes (2768 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 206.53.91.49 (206.53.91.49), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x28 (DSCP 0x0a: Assured Forwarding 11; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 10.. = Differentiated Services Codepoint: Assured Forwarding 11 (0x0a) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 332 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0xd98b [correct] [Good: True] [Bad: False] Source: 206.53.91.49 (206.53.91.49) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 312 Checksum: 0xf3f4 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://10.1.11.1:65530/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n USN: uuid:232b2d44-1dd2-11b2-8a92-901b19299811::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 729 0.042272000 114.111.250.181 [CENSORED] SSDP 336 HTTP/1.1 200 OK Frame 729: 336 bytes on wire (2688 bits), 336 bytes captured (2688 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.643372000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.643372000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.042272000 seconds] Frame Number: 729 Frame Length: 336 bytes (2688 bits) Capture Length: 336 bytes (2688 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 114.111.250.181 (114.111.250.181), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 322 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x9bff [correct] [Good: True] [Bad: False] Source: 114.111.250.181 (114.111.250.181) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 302 Checksum: 0x2204 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:4409/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 730 0.042295000 67.181.133.142 [CENSORED] SSDP 271 HTTP/1.1 200 OK Frame 730: 271 bytes on wire (2168 bits), 271 bytes captured (2168 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.643395000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.643395000 seconds [Time delta from previous captured frame: 0.000023000 seconds] [Time delta from previous displayed frame: 0.000023000 seconds] [Time since reference or first frame: 0.042295000 seconds] Frame Number: 730 Frame Length: 271 bytes (2168 bits) Capture Length: 271 bytes (2168 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 67.181.133.142 (67.181.133.142), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 257 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x3f22 [correct] [Good: True] [Bad: False] Source: 67.181.133.142 (67.181.133.142) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 237 Checksum: 0x6008 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: UPnP/1.0 MiniUPnPd/1.3\r\n ST: uuid:5d6106d6-1dd2-11b2-9f7c-cef1fe4faa93\r\n USN: uuid:5d6106d6-1dd2-11b2-9f7c-cef1fe4faa93\r\n \r\n No. Time Source Destination Protocol Length Info 731 0.042328000 1.223.130.59 [CENSORED] SSDP 273 HTTP/1.1 200 OK Frame 731: 273 bytes on wire (2184 bits), 273 bytes captured (2184 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.643428000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.643428000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.042328000 seconds] Frame Number: 731 Frame Length: 273 bytes (2184 bits) Capture Length: 273 bytes (2184 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 1.223.130.59 (1.223.130.59), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 259 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x8549 [correct] [Good: True] [Bad: False] Source: 1.223.130.59 (1.223.130.59) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 239 Checksum: 0x41a9 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: upnp:rootdevice\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::upnp:rootdevice\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:32768/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 732 0.042359000 67.181.133.142 [CENSORED] SSDP 271 HTTP/1.1 200 OK Frame 732: 271 bytes on wire (2168 bits), 271 bytes captured (2168 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.643459000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.643459000 seconds [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.042359000 seconds] Frame Number: 732 Frame Length: 271 bytes (2168 bits) Capture Length: 271 bytes (2168 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 67.181.133.142 (67.181.133.142), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 257 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x3f22 [correct] [Good: True] [Bad: False] Source: 67.181.133.142 (67.181.133.142) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 237 Checksum: 0x717e [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: UPnP/1.0 MiniUPnPd/1.3\r\n ST: uuid:5d624c26-1dd2-11b2-a47f-fe62f595450a\r\n USN: uuid:5d624c26-1dd2-11b2-a47f-fe62f595450a\r\n \r\n No. Time Source Destination Protocol Length Info 733 0.042409000 181.136.134.126 [CENSORED] SSDP 376 HTTP/1.1 200 OK Frame 733: 376 bytes on wire (3008 bits), 376 bytes captured (3008 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.643509000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.643509000 seconds [Time delta from previous captured frame: 0.000050000 seconds] [Time delta from previous displayed frame: 0.000050000 seconds] [Time since reference or first frame: 0.042409000 seconds] Frame Number: 733 Frame Length: 376 bytes (3008 bits) Capture Length: 376 bytes (3008 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 181.136.134.126 (181.136.134.126), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 362 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0xc6d5 [correct] [Good: True] [Bad: False] Source: 181.136.134.126 (181.136.134.126) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 342 Checksum: 0xc497 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n DATE: Sun, 23 Nov 2014 17:41:54 GMT\r\n EXT:\r\n LOCATION: http://192.168.0.1:2869/Desc.xml\r\n SERVER: OS/0.0 UPnP/1.0 UPnP-Device-Host/1.0\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n USN: uuid:f1bcf3c2-9299-11e2-9e96-0800200c9a66::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 734 0.042438000 60.219.197.210 [CENSORED] SSDP 348 HTTP/1.1 200 OK Frame 734: 348 bytes on wire (2784 bits), 348 bytes captured (2784 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.643538000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.643538000 seconds [Time delta from previous captured frame: 0.000029000 seconds] [Time delta from previous displayed frame: 0.000029000 seconds] [Time since reference or first frame: 0.042438000 seconds] Frame Number: 734 Frame Length: 348 bytes (2784 bits) Capture Length: 348 bytes (2784 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 60.219.197.210 (60.219.197.210), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 334 Identification: 0xfcf3 (64755) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x4867 [correct] [Good: True] [Bad: False] Source: 60.219.197.210 (60.219.197.210) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 314 Checksum: 0xbcb1 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n \r\n No. Time Source Destination Protocol Length Info 735 0.042468000 66.176.50.134 [CENSORED] SSDP 339 HTTP/1.1 200 OK Frame 735: 339 bytes on wire (2712 bits), 339 bytes captured (2712 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.643568000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.643568000 seconds [Time delta from previous captured frame: 0.000030000 seconds] [Time delta from previous displayed frame: 0.000030000 seconds] [Time since reference or first frame: 0.042468000 seconds] Frame Number: 735 Frame Length: 339 bytes (2712 bits) Capture Length: 339 bytes (2712 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 66.176.50.134 (66.176.50.134), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 325 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 253 Protocol: UDP (17) Header checksum: 0x8beb [correct] [Good: True] [Bad: False] Source: 66.176.50.134 (66.176.50.134) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 305 Checksum: 0xf616 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANPPPConnection:1\r\n USN: uuid:5a34308c-1a2c-4546-ac5d-7663dd01dca1::urn:schemas-upnp-org:service:WANPPPConnection:1\r\n EXT:\r\n SERVER: Ubuntu/lucid UPnP/1.0 MiniUPnPd/1.4\r\n LOCATION: http://192.168.0.1:25209/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 736 0.042501000 66.176.50.134 [CENSORED] SSDP 339 HTTP/1.1 200 OK Frame 736: 339 bytes on wire (2712 bits), 339 bytes captured (2712 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.643601000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.643601000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.042501000 seconds] Frame Number: 736 Frame Length: 339 bytes (2712 bits) Capture Length: 339 bytes (2712 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 66.176.50.134 (66.176.50.134), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 325 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 253 Protocol: UDP (17) Header checksum: 0x8beb [correct] [Good: True] [Bad: False] Source: 66.176.50.134 (66.176.50.134) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 305 Checksum: 0x98b9 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n USN: uuid:5a34308c-1a2c-4546-ac5d-7663dd01dca1::urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n EXT:\r\n SERVER: Ubuntu/lucid UPnP/1.0 MiniUPnPd/1.4\r\n LOCATION: http://192.168.0.1:25209/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 737 0.042528000 120.10.119.38 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 737: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.643628000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.643628000 seconds [Time delta from previous captured frame: 0.000027000 seconds] [Time delta from previous displayed frame: 0.000027000 seconds] [Time since reference or first frame: 0.042528000 seconds] Frame Number: 737 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 120.10.119.38 (120.10.119.38), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0xac6c (44140) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xaca1 [correct] [Good: True] [Bad: False] Source: 120.10.119.38 (120.10.119.38) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0x0252 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 738 0.042555000 66.176.50.134 [CENSORED] SSDP 275 HTTP/1.1 200 OK Frame 738: 275 bytes on wire (2200 bits), 275 bytes captured (2200 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.643655000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.643655000 seconds [Time delta from previous captured frame: 0.000027000 seconds] [Time delta from previous displayed frame: 0.000027000 seconds] [Time since reference or first frame: 0.042555000 seconds] Frame Number: 738 Frame Length: 275 bytes (2200 bits) Capture Length: 275 bytes (2200 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 66.176.50.134 (66.176.50.134), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 261 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 253 Protocol: UDP (17) Header checksum: 0x8c2b [correct] [Good: True] [Bad: False] Source: 66.176.50.134 (66.176.50.134) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 241 Checksum: 0x5eff [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: upnp:rootdevice\r\n USN: uuid:5a34308c-1a2c-4546-ac5d-7663dd01dca1::upnp:rootdevice\r\n EXT:\r\n SERVER: Ubuntu/lucid UPnP/1.0 MiniUPnPd/1.4\r\n LOCATION: http://192.168.0.1:25209/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 739 0.042589000 72.175.181.193 [CENSORED] SSDP 275 HTTP/1.1 200 OK Frame 739: 275 bytes on wire (2200 bits), 275 bytes captured (2200 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.643689000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.643689000 seconds [Time delta from previous captured frame: 0.000034000 seconds] [Time delta from previous displayed frame: 0.000034000 seconds] [Time since reference or first frame: 0.042589000 seconds] Frame Number: 739 Frame Length: 275 bytes (2200 bits) Capture Length: 275 bytes (2200 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 72.175.181.193 (72.175.181.193), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x28 (DSCP 0x0a: Assured Forwarding 11; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 10.. = Differentiated Services Codepoint: Assured Forwarding 11 (0x0a) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 261 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x04c9 [correct] [Good: True] [Bad: False] Source: 72.175.181.193 (72.175.181.193) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 241 Checksum: 0xcec4 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: upnp:rootdevice\r\n USN: uuid:5a34308c-1a2c-4546-ac5d-7663dd01dca1::upnp:rootdevice\r\n EXT:\r\n SERVER: Ubuntu/lucid UPnP/1.0 MiniUPnPd/1.4\r\n LOCATION: http://192.168.0.1:63493/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 740 0.042633000 1.223.130.59 [CENSORED] SSDP 345 HTTP/1.1 200 OK Frame 740: 345 bytes on wire (2760 bits), 345 bytes captured (2760 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.643733000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.643733000 seconds [Time delta from previous captured frame: 0.000044000 seconds] [Time delta from previous displayed frame: 0.000044000 seconds] [Time since reference or first frame: 0.042633000 seconds] Frame Number: 740 Frame Length: 345 bytes (2760 bits) Capture Length: 345 bytes (2760 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 1.223.130.59 (1.223.130.59), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 331 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x8501 [correct] [Good: True] [Bad: False] Source: 1.223.130.59 (1.223.130.59) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 311 Checksum: 0xd2aa [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:32768/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 741 0.042666000 123.156.234.229 [CENSORED] SSDP 348 HTTP/1.1 200 OK Frame 741: 348 bytes on wire (2784 bits), 348 bytes captured (2784 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.643766000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.643766000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.042666000 seconds] Frame Number: 741 Frame Length: 348 bytes (2784 bits) Capture Length: 348 bytes (2784 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 123.156.234.229 (123.156.234.229), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 334 Identification: 0xf142 (61762) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xf043 [correct] [Good: True] [Bad: False] Source: 123.156.234.229 (123.156.234.229) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 314 Checksum: 0x58dd [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n \r\n No. Time Source Destination Protocol Length Info 742 0.042698000 1.223.130.59 [CENSORED] SSDP 341 HTTP/1.1 200 OK Frame 742: 341 bytes on wire (2728 bits), 341 bytes captured (2728 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.643798000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.643798000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.042698000 seconds] Frame Number: 742 Frame Length: 341 bytes (2728 bits) Capture Length: 341 bytes (2728 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 1.223.130.59 (1.223.130.59), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 327 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x8505 [correct] [Good: True] [Bad: False] Source: 1.223.130.59 (1.223.130.59) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 307 Checksum: 0xf8d8 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:32768/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 743 0.042736000 123.156.234.229 [CENSORED] SSDP 364 HTTP/1.1 200 OK Frame 743: 364 bytes on wire (2912 bits), 364 bytes captured (2912 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.643836000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.643836000 seconds [Time delta from previous captured frame: 0.000038000 seconds] [Time delta from previous displayed frame: 0.000038000 seconds] [Time since reference or first frame: 0.042736000 seconds] Frame Number: 743 Frame Length: 364 bytes (2912 bits) Capture Length: 364 bytes (2912 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 123.156.234.229 (123.156.234.229), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 350 Identification: 0xf145 (61765) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xf030 [correct] [Good: True] [Bad: False] Source: 123.156.234.229 (123.156.234.229) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 330 Checksum: 0x3f5b [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 744 0.042759000 96.32.150.42 [CENSORED] SSDP 287 HTTP/1.1 200 OK Frame 744: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.643859000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.643859000 seconds [Time delta from previous captured frame: 0.000023000 seconds] [Time delta from previous displayed frame: 0.000023000 seconds] [Time since reference or first frame: 0.042759000 seconds] Frame Number: 744 Frame Length: 287 bytes (2296 bits) Capture Length: 287 bytes (2296 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 96.32.150.42 (96.32.150.42), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 273 Identification: 0x2c6d (11373) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 247 Protocol: UDP (17) Header checksum: 0xe47d [correct] [Good: True] [Bad: False] Source: 96.32.150.42 (96.32.150.42) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 253 Checksum: 0x52cb [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: upnp:rootdevice\r\n USN: uuid:add0bb84-1dd1-11b2-b975-a91282fd83cc::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 745 0.042789000 98.224.227.137 [CENSORED] SSDP 287 HTTP/1.1 200 OK Frame 745: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.643889000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.643889000 seconds [Time delta from previous captured frame: 0.000030000 seconds] [Time delta from previous displayed frame: 0.000030000 seconds] [Time since reference or first frame: 0.042789000 seconds] Frame Number: 745 Frame Length: 287 bytes (2296 bits) Capture Length: 287 bytes (2296 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 98.224.227.137 (98.224.227.137), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 273 Identification: 0xd441 (54337) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0xe8a9 [correct] [Good: True] [Bad: False] Source: 98.224.227.137 (98.224.227.137) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 253 Checksum: 0x31ae [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: upnp:rootdevice\r\n USN: uuid:2a789076-1dd2-11b2-aed3-d5baa25bb496::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 746 0.042828000 113.123.147.242 [CENSORED] SSDP 330 HTTP/1.1 200 OK Frame 746: 330 bytes on wire (2640 bits), 330 bytes captured (2640 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.643928000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.643928000 seconds [Time delta from previous captured frame: 0.000039000 seconds] [Time delta from previous displayed frame: 0.000039000 seconds] [Time since reference or first frame: 0.042828000 seconds] Frame Number: 746 Frame Length: 330 bytes (2640 bits) Capture Length: 330 bytes (2640 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 113.123.147.242 (113.123.147.242), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 316 Identification: 0x6360 (25440) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xdf4c [correct] [Good: True] [Bad: False] Source: 113.123.147.242 (113.123.147.242) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 296 Checksum: 0x2216 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 747 0.042867000 113.123.147.242 [CENSORED] SSDP 362 HTTP/1.1 200 OK Frame 747: 362 bytes on wire (2896 bits), 362 bytes captured (2896 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.643967000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.643967000 seconds [Time delta from previous captured frame: 0.000039000 seconds] [Time delta from previous displayed frame: 0.000039000 seconds] [Time since reference or first frame: 0.042867000 seconds] Frame Number: 747 Frame Length: 362 bytes (2896 bits) Capture Length: 362 bytes (2896 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 113.123.147.242 (113.123.147.242), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 348 Identification: 0x6361 (25441) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xdf2b [correct] [Good: True] [Bad: False] Source: 113.123.147.242 (113.123.147.242) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 328 Checksum: 0x2882 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 748 0.042901000 113.123.147.242 [CENSORED] SSDP 368 HTTP/1.1 200 OK Frame 748: 368 bytes on wire (2944 bits), 368 bytes captured (2944 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.644001000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.644001000 seconds [Time delta from previous captured frame: 0.000034000 seconds] [Time delta from previous displayed frame: 0.000034000 seconds] [Time since reference or first frame: 0.042901000 seconds] Frame Number: 748 Frame Length: 368 bytes (2944 bits) Capture Length: 368 bytes (2944 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 113.123.147.242 (113.123.147.242), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 354 Identification: 0x6362 (25442) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xdf34 [correct] [Good: True] [Bad: False] Source: 113.123.147.242 (113.123.147.242) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 334 Checksum: 0xe330 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 749 0.042931000 113.123.147.242 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 749: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.644031000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.644031000 seconds [Time delta from previous captured frame: 0.000030000 seconds] [Time delta from previous displayed frame: 0.000030000 seconds] [Time since reference or first frame: 0.042931000 seconds] Frame Number: 749 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 113.123.147.242 (113.123.147.242), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0x6363 (25443) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xdf3f [correct] [Good: True] [Bad: False] Source: 113.123.147.242 (113.123.147.242) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0x1213 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANIPConnection:1\r\n \r\n No. Time Source Destination Protocol Length Info 750 0.042968000 123.244.179.155 [CENSORED] SSDP 368 HTTP/1.1 200 OK Frame 750: 368 bytes on wire (2944 bits), 368 bytes captured (2944 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.644068000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.644068000 seconds [Time delta from previous captured frame: 0.000037000 seconds] [Time delta from previous displayed frame: 0.000037000 seconds] [Time since reference or first frame: 0.042968000 seconds] Frame Number: 750 Frame Length: 368 bytes (2944 bits) Capture Length: 368 bytes (2944 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 123.244.179.155 (123.244.179.155), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 354 Identification: 0x07da (2010) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x109b [correct] [Good: True] [Bad: False] Source: 123.244.179.155 (123.244.179.155) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 334 Checksum: 0xb90e [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 751 0.042997000 113.9.218.238 [CENSORED] SSDP 332 HTTP/1.1 200 OK Frame 751: 332 bytes on wire (2656 bits), 332 bytes captured (2656 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.644097000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.644097000 seconds [Time delta from previous captured frame: 0.000029000 seconds] [Time delta from previous displayed frame: 0.000029000 seconds] [Time since reference or first frame: 0.042997000 seconds] Frame Number: 751 Frame Length: 332 bytes (2656 bits) Capture Length: 332 bytes (2656 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 113.9.218.238 (113.9.218.238), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 318 Identification: 0xfbaa (64426) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x0076 [correct] [Good: True] [Bad: False] Source: 113.9.218.238 (113.9.218.238) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 298 Checksum: 0xe1ac [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000::urn:schemas-upnp-org:device:WANDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 752 0.043036000 123.156.234.229 [CENSORED] SSDP 368 HTTP/1.1 200 OK Frame 752: 368 bytes on wire (2944 bits), 368 bytes captured (2944 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.644136000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.644136000 seconds [Time delta from previous captured frame: 0.000039000 seconds] [Time delta from previous displayed frame: 0.000039000 seconds] [Time since reference or first frame: 0.043036000 seconds] Frame Number: 752 Frame Length: 368 bytes (2944 bits) Capture Length: 368 bytes (2944 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 123.156.234.229 (123.156.234.229), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 354 Identification: 0xf148 (61768) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xf039 [correct] [Good: True] [Bad: False] Source: 123.156.234.229 (123.156.234.229) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 334 Checksum: 0x821c [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 753 0.043058000 178.117.227.89 [CENSORED] SSDP 272 HTTP/1.1 200 OK Frame 753: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.644158000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.644158000 seconds [Time delta from previous captured frame: 0.000022000 seconds] [Time delta from previous displayed frame: 0.000022000 seconds] [Time since reference or first frame: 0.043058000 seconds] Frame Number: 753 Frame Length: 272 bytes (2176 bits) Capture Length: 272 bytes (2176 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 178.117.227.89 (178.117.227.89), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 258 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 250 Protocol: UDP (17) Header checksum: 0x6e95 [correct] [Good: True] [Bad: False] Source: 178.117.227.89 (178.117.227.89) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 238 Checksum: 0x307f [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=1800\r\n ST: upnp:rootdevice\r\n USN: uuid:12345678-0000-0000-0000-00000000abcd::upnp:rootdevice\r\n EXT:\r\n Server: WNDR4300 UPnP/1.0 miniupnpd/1.0\r\n Location: http://192.168.0.51:5555/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 754 0.043119000 180.105.202.130 [CENSORED] SSDP 284 HTTP/1.1 200 OK Frame 754: 284 bytes on wire (2272 bits), 284 bytes captured (2272 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.644219000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.644219000 seconds [Time delta from previous captured frame: 0.000061000 seconds] [Time delta from previous displayed frame: 0.000061000 seconds] [Time since reference or first frame: 0.043119000 seconds] Frame Number: 754 Frame Length: 284 bytes (2272 bits) Capture Length: 284 bytes (2272 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 180.105.202.130 (180.105.202.130), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 270 Identification: 0x9d51 (40273) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x2c1b [correct] [Good: True] [Bad: False] Source: 180.105.202.130 (180.105.202.130) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 250 Checksum: 0x06b9 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: upnp:rootdevice\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 755 0.043163000 206.53.91.49 [CENSORED] SSDP 342 HTTP/1.1 200 OK Frame 755: 342 bytes on wire (2736 bits), 342 bytes captured (2736 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.644263000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.644263000 seconds [Time delta from previous captured frame: 0.000044000 seconds] [Time delta from previous displayed frame: 0.000044000 seconds] [Time since reference or first frame: 0.043163000 seconds] Frame Number: 755 Frame Length: 342 bytes (2736 bits) Capture Length: 342 bytes (2736 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 206.53.91.49 (206.53.91.49), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x28 (DSCP 0x0a: Assured Forwarding 11; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 10.. = Differentiated Services Codepoint: Assured Forwarding 11 (0x0a) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 328 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0xd98f [correct] [Good: True] [Bad: False] Source: 206.53.91.49 (206.53.91.49) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 308 Checksum: 0xbc0b [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://10.1.11.1:65530/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-wifialliance-org:device:WFADevice:1\r\n USN: uuid:232c5278-1dd2-11b2-9761-9f17806c6b36::urn:schemas-wifialliance-org:device:WFADevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 756 0.043198000 206.53.91.49 [CENSORED] SSDP 352 HTTP/1.1 200 OK Frame 756: 352 bytes on wire (2816 bits), 352 bytes captured (2816 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.644298000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.644298000 seconds [Time delta from previous captured frame: 0.000035000 seconds] [Time delta from previous displayed frame: 0.000035000 seconds] [Time since reference or first frame: 0.043198000 seconds] Frame Number: 756 Frame Length: 352 bytes (2816 bits) Capture Length: 352 bytes (2816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 206.53.91.49 (206.53.91.49), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x28 (DSCP 0x0a: Assured Forwarding 11; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 10.. = Differentiated Services Codepoint: Assured Forwarding 11 (0x0a) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 338 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0xd985 [correct] [Good: True] [Bad: False] Source: 206.53.91.49 (206.53.91.49) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 318 Checksum: 0xa895 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://10.1.11.1:65530/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-wifialliance-org:service:WFAWLANConfig:1\r\n USN: uuid:232c5278-1dd2-11b2-9761-9f17806c6b36::urn:schemas-wifialliance-org:service:WFAWLANConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 757 0.043227000 180.105.202.130 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 757: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.644327000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.644327000 seconds [Time delta from previous captured frame: 0.000029000 seconds] [Time delta from previous displayed frame: 0.000029000 seconds] [Time since reference or first frame: 0.043227000 seconds] Frame Number: 757 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 180.105.202.130 (180.105.202.130), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0x9d53 (40275) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x2bff [correct] [Good: True] [Bad: False] Source: 180.105.202.130 (180.105.202.130) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0x7296 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 758 0.043770000 206.53.91.49 [CENSORED] SSDP 287 HTTP/1.1 200 OK Frame 758: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.644870000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.644870000 seconds [Time delta from previous captured frame: 0.000543000 seconds] [Time delta from previous displayed frame: 0.000543000 seconds] [Time since reference or first frame: 0.043770000 seconds] Frame Number: 758 Frame Length: 287 bytes (2296 bits) Capture Length: 287 bytes (2296 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 206.53.91.49 (206.53.91.49), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x28 (DSCP 0x0a: Assured Forwarding 11; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 10.. = Differentiated Services Codepoint: Assured Forwarding 11 (0x0a) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 273 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0xd9c6 [correct] [Good: True] [Bad: False] Source: 206.53.91.49 (206.53.91.49) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 253 Checksum: 0x4d03 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://10.1.11.1:65530/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: uuid:2322cf50-1dd2-11b2-b141-9f05b2c189c9\r\n USN: uuid:2322cf50-1dd2-11b2-b141-9f05b2c189c9\r\n \r\n No. Time Source Destination Protocol Length Info 759 0.043807000 206.53.91.49 [CENSORED] SSDP 287 HTTP/1.1 200 OK Frame 759: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.644907000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.644907000 seconds [Time delta from previous captured frame: 0.000037000 seconds] [Time delta from previous displayed frame: 0.000037000 seconds] [Time since reference or first frame: 0.043807000 seconds] Frame Number: 759 Frame Length: 287 bytes (2296 bits) Capture Length: 287 bytes (2296 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 206.53.91.49 (206.53.91.49), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x28 (DSCP 0x0a: Assured Forwarding 11; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 10.. = Differentiated Services Codepoint: Assured Forwarding 11 (0x0a) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 273 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0xd9c6 [correct] [Good: True] [Bad: False] Source: 206.53.91.49 (206.53.91.49) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 253 Checksum: 0x947a [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://10.1.11.1:65530/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: uuid:2323f4d4-1dd2-11b2-afd8-b95b8c249ce5\r\n USN: uuid:2323f4d4-1dd2-11b2-afd8-b95b8c249ce5\r\n \r\n No. Time Source Destination Protocol Length Info 760 0.043847000 24.13.218.67 [CENSORED] SSDP 354 HTTP/1.1 200 OK Frame 760: 354 bytes on wire (2832 bits), 354 bytes captured (2832 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.644947000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.644947000 seconds [Time delta from previous captured frame: 0.000040000 seconds] [Time delta from previous displayed frame: 0.000040000 seconds] [Time since reference or first frame: 0.043847000 seconds] Frame Number: 760 Frame Length: 354 bytes (2832 bits) Capture Length: 354 bytes (2832 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 24.13.218.67 (24.13.218.67), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 340 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x10c2 [correct] [Good: True] [Bad: False] Source: 24.13.218.67 (24.13.218.67) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 320 Checksum: 0xb371 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-wifialliance-org:service:WFAWLANConfig:1\r\n USN: uuid:6162bcba-1dd2-11b2-9561-ff7130eef918::urn:schemas-wifialliance-org:service:WFAWLANConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 761 0.043874000 206.53.91.49 [CENSORED] SSDP 287 HTTP/1.1 200 OK Frame 761: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.644974000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.644974000 seconds [Time delta from previous captured frame: 0.000027000 seconds] [Time delta from previous displayed frame: 0.000027000 seconds] [Time since reference or first frame: 0.043874000 seconds] Frame Number: 761 Frame Length: 287 bytes (2296 bits) Capture Length: 287 bytes (2296 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 206.53.91.49 (206.53.91.49), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x28 (DSCP 0x0a: Assured Forwarding 11; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 10.. = Differentiated Services Codepoint: Assured Forwarding 11 (0x0a) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 273 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0xd9c6 [correct] [Good: True] [Bad: False] Source: 206.53.91.49 (206.53.91.49) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 253 Checksum: 0x3a29 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://10.1.11.1:65530/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: uuid:232b2d44-1dd2-11b2-8a92-901b19299811\r\n USN: uuid:232b2d44-1dd2-11b2-8a92-901b19299811\r\n \r\n No. Time Source Destination Protocol Length Info 762 0.043903000 24.13.218.67 [CENSORED] SSDP 289 HTTP/1.1 200 OK Frame 762: 289 bytes on wire (2312 bits), 289 bytes captured (2312 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.645003000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.645003000 seconds [Time delta from previous captured frame: 0.000029000 seconds] [Time delta from previous displayed frame: 0.000029000 seconds] [Time since reference or first frame: 0.043903000 seconds] Frame Number: 762 Frame Length: 289 bytes (2312 bits) Capture Length: 289 bytes (2312 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 24.13.218.67 (24.13.218.67), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 275 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x1103 [correct] [Good: True] [Bad: False] Source: 24.13.218.67 (24.13.218.67) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 255 Checksum: 0x00c2 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: uuid:6154e36a-1dd2-11b2-82ca-f34a0be69130\r\n USN: uuid:6154e36a-1dd2-11b2-82ca-f34a0be69130\r\n \r\n No. Time Source Destination Protocol Length Info 763 0.043935000 24.13.218.67 [CENSORED] SSDP 289 HTTP/1.1 200 OK Frame 763: 289 bytes on wire (2312 bits), 289 bytes captured (2312 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.645035000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.645035000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.043935000 seconds] Frame Number: 763 Frame Length: 289 bytes (2312 bits) Capture Length: 289 bytes (2312 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 24.13.218.67 (24.13.218.67), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 275 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x1103 [correct] [Good: True] [Bad: False] Source: 24.13.218.67 (24.13.218.67) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 255 Checksum: 0xeda8 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: uuid:6155d270-1dd2-11b2-9b1c-a85eb2f927f9\r\n USN: uuid:6155d270-1dd2-11b2-9b1c-a85eb2f927f9\r\n \r\n No. Time Source Destination Protocol Length Info 764 0.043967000 73.162.61.73 [CENSORED] SSDP 282 HTTP/1.1 200 OK Frame 764: 282 bytes on wire (2256 bits), 282 bytes captured (2256 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.645067000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.645067000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.043967000 seconds] Frame Number: 764 Frame Length: 282 bytes (2256 bits) Capture Length: 282 bytes (2256 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 73.162.61.73 (73.162.61.73), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 268 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 242 Protocol: UDP (17) Header checksum: 0x856f [correct] [Good: True] [Bad: False] Source: 73.162.61.73 (73.162.61.73) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 248 Checksum: 0xdc3a [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: uuid:af27ca57-be97-4bff-a6dd-02189d1043da\r\n USN: uuid:af27ca57-be97-4bff-a6dd-02189d1043da\r\n EXT:\r\n SERVER: SMCD3G-CCR/... UPnP/1.0 MiniUPnPd/1.4\r\n LOCATION: http://10.0.0.2:5000/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 765 0.043998000 75.146.230.229 [CENSORED] SSDP 280 HTTP/1.1 200 OK Frame 765: 280 bytes on wire (2240 bits), 280 bytes captured (2240 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.645098000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.645098000 seconds [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.043998000 seconds] Frame Number: 765 Frame Length: 280 bytes (2240 bits) Capture Length: 280 bytes (2240 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 75.146.230.229 (75.146.230.229), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 266 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (17) Header checksum: 0xd2e4 [correct] [Good: True] [Bad: False] Source: 75.146.230.229 (75.146.230.229) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 246 Checksum: 0x6f82 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.5.1:65535/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: upnp:rootdevice\r\n USN: uuid:cdf117e4-1dd1-11b2-b824-ebb2c43d1d0b::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 766 0.044042000 75.146.230.229 [CENSORED] SSDP 352 HTTP/1.1 200 OK Frame 766: 352 bytes on wire (2816 bits), 352 bytes captured (2816 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.645142000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.645142000 seconds [Time delta from previous captured frame: 0.000044000 seconds] [Time delta from previous displayed frame: 0.000044000 seconds] [Time since reference or first frame: 0.044042000 seconds] Frame Number: 766 Frame Length: 352 bytes (2816 bits) Capture Length: 352 bytes (2816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 75.146.230.229 (75.146.230.229), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 338 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (17) Header checksum: 0xd29c [correct] [Good: True] [Bad: False] Source: 75.146.230.229 (75.146.230.229) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 318 Checksum: 0x0084 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.5.1:65535/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n USN: uuid:cdf117e4-1dd1-11b2-b824-ebb2c43d1d0b::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 767 0.044074000 75.146.230.229 [CENSORED] SSDP 348 HTTP/1.1 200 OK Frame 767: 348 bytes on wire (2784 bits), 348 bytes captured (2784 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.645174000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.645174000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.044074000 seconds] Frame Number: 767 Frame Length: 348 bytes (2784 bits) Capture Length: 348 bytes (2784 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 75.146.230.229 (75.146.230.229), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 334 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (17) Header checksum: 0xd2a0 [correct] [Good: True] [Bad: False] Source: 75.146.230.229 (75.146.230.229) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 314 Checksum: 0x7aab [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.5.1:65535/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n USN: uuid:cdf98532-1dd1-11b2-b439-aec211ca49c7::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 768 0.044101000 73.162.61.73 [CENSORED] SSDP 321 HTTP/1.1 200 OK Frame 768: 321 bytes on wire (2568 bits), 321 bytes captured (2568 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.645201000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.645201000 seconds [Time delta from previous captured frame: 0.000027000 seconds] [Time delta from previous displayed frame: 0.000027000 seconds] [Time since reference or first frame: 0.044101000 seconds] Frame Number: 768 Frame Length: 321 bytes (2568 bits) Capture Length: 321 bytes (2568 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 73.162.61.73 (73.162.61.73), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 307 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 242 Protocol: UDP (17) Header checksum: 0x8548 [correct] [Good: True] [Bad: False] Source: 73.162.61.73 (73.162.61.73) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 287 Checksum: 0x6714 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:WANDevice:1\r\n USN: uuid:af27ca57-be97-4bff-a6dd-02189d1043da::urn:schemas-upnp-org:device:WANDevice:1\r\n EXT:\r\n SERVER: SMCD3G-CCR/... UPnP/1.0 MiniUPnPd/1.4\r\n LOCATION: http://10.0.0.2:5000/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 769 0.044136000 1.223.130.59 [CENSORED] SSDP 337 HTTP/1.1 200 OK Frame 769: 337 bytes on wire (2696 bits), 337 bytes captured (2696 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.645236000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.645236000 seconds [Time delta from previous captured frame: 0.000035000 seconds] [Time delta from previous displayed frame: 0.000035000 seconds] [Time since reference or first frame: 0.044136000 seconds] Frame Number: 769 Frame Length: 337 bytes (2696 bits) Capture Length: 337 bytes (2696 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 1.223.130.59 (1.223.130.59), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 323 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x8509 [correct] [Good: True] [Bad: False] Source: 1.223.130.59 (1.223.130.59) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 303 Checksum: 0xd8c0 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANPPPConnection:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:service:WANPPPConnection:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:32768/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 770 0.044170000 174.48.6.151 [CENSORED] SSDP 352 HTTP/1.1 200 OK Frame 770: 352 bytes on wire (2816 bits), 352 bytes captured (2816 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.645270000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.645270000 seconds [Time delta from previous captured frame: 0.000034000 seconds] [Time delta from previous displayed frame: 0.000034000 seconds] [Time since reference or first frame: 0.044170000 seconds] Frame Number: 770 Frame Length: 352 bytes (2816 bits) Capture Length: 352 bytes (2816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 174.48.6.151 (174.48.6.151), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 338 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 253 Protocol: UDP (17) Header checksum: 0x4c4d [correct] [Good: True] [Bad: False] Source: 174.48.6.151 (174.48.6.151) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 318 Checksum: 0x015b [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65530/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n USN: uuid:6e66cc24-1dd2-11b2-8b4e-e869e1167d23::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 771 0.044201000 75.146.230.229 [CENSORED] SSDP 328 HTTP/1.1 200 OK Frame 771: 328 bytes on wire (2624 bits), 328 bytes captured (2624 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.645301000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.645301000 seconds [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.044201000 seconds] Frame Number: 771 Frame Length: 328 bytes (2624 bits) Capture Length: 328 bytes (2624 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 75.146.230.229 (75.146.230.229), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 314 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (17) Header checksum: 0xd2b4 [correct] [Good: True] [Bad: False] Source: 75.146.230.229 (75.146.230.229) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 294 Checksum: 0x234b [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.5.1:65535/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-upnp-org:device:WANDevice:1\r\n USN: uuid:cdf2e588-1dd1-11b2-8c2d-91d384c1d5d2::urn:schemas-upnp-org:device:WANDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 772 0.044225000 61.252.244.124 [CENSORED] SSDP 287 HTTP/1.1 200 OK Frame 772: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.645325000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.645325000 seconds [Time delta from previous captured frame: 0.000024000 seconds] [Time delta from previous displayed frame: 0.000024000 seconds] [Time since reference or first frame: 0.044225000 seconds] Frame Number: 772 Frame Length: 287 bytes (2296 bits) Capture Length: 287 bytes (2296 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 61.252.244.124 (61.252.244.124), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 273 Identification: 0x0d82 (3458) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 247 Protocol: UDP (17) Header checksum: 0xc75a [correct] [Good: True] [Bad: False] Source: 61.252.244.124 (61.252.244.124) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 253 Checksum: 0xc7e0 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: upnp:rootdevice\r\n USN: uuid:11111111-1111-1111-1111-111111111111::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 773 0.044275000 123.244.179.155 [CENSORED] SSDP 368 HTTP/1.1 200 OK Frame 773: 368 bytes on wire (2944 bits), 368 bytes captured (2944 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.645375000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.645375000 seconds [Time delta from previous captured frame: 0.000050000 seconds] [Time delta from previous displayed frame: 0.000050000 seconds] [Time since reference or first frame: 0.044275000 seconds] Frame Number: 773 Frame Length: 368 bytes (2944 bits) Capture Length: 368 bytes (2944 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 123.244.179.155 (123.244.179.155), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 354 Identification: 0x07e5 (2021) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x1090 [correct] [Good: True] [Bad: False] Source: 123.244.179.155 (123.244.179.155) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 334 Checksum: 0xb90e [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 774 0.044304000 78.20.55.113 [CENSORED] SSDP 348 HTTP/1.1 200 OK Frame 774: 348 bytes on wire (2784 bits), 348 bytes captured (2784 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.645404000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.645404000 seconds [Time delta from previous captured frame: 0.000029000 seconds] [Time delta from previous displayed frame: 0.000029000 seconds] [Time since reference or first frame: 0.044304000 seconds] Frame Number: 774 Frame Length: 348 bytes (2784 bits) Capture Length: 348 bytes (2784 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 78.20.55.113 (78.20.55.113), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 334 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x7d93 [correct] [Good: True] [Bad: False] Source: 78.20.55.113 (78.20.55.113) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 314 Checksum: 0x9631 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n USN: uuid:1aa434c2-1dd2-11b2-85d1-99c020404980::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 775 0.044338000 61.252.244.124 [CENSORED] SSDP 347 HTTP/1.1 200 OK Frame 775: 347 bytes on wire (2776 bits), 347 bytes captured (2776 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.645438000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.645438000 seconds [Time delta from previous captured frame: 0.000034000 seconds] [Time delta from previous displayed frame: 0.000034000 seconds] [Time since reference or first frame: 0.044338000 seconds] Frame Number: 775 Frame Length: 347 bytes (2776 bits) Capture Length: 347 bytes (2776 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 61.252.244.124 (61.252.244.124), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 333 Identification: 0x0d88 (3464) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 247 Protocol: UDP (17) Header checksum: 0xc718 [correct] [Good: True] [Bad: False] Source: 61.252.244.124 (61.252.244.124) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 313 Checksum: 0xc768 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:\r\n USN: uuid:33333333-3333-3333-3333-333333333333::urn:schemas-upnp-org:service:WANIPConnection:\r\n \r\n No. Time Source Destination Protocol Length Info 776 0.044371000 61.252.244.124 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 776: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.645471000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.645471000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.044371000 seconds] Frame Number: 776 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 61.252.244.124 (61.252.244.124), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0x0d89 (3465) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 247 Protocol: UDP (17) Header checksum: 0xc715 [correct] [Good: True] [Bad: False] Source: 61.252.244.124 (61.252.244.124) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0x58aa [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:\r\n USN: uuid:11111111-1111-1111-1111-111111111111::urn:schemas-upnp-org:service:Layer3Forwarding:\r\n \r\n No. Time Source Destination Protocol Length Info 777 0.044404000 123.244.179.155 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 777: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.645504000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.645504000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.044404000 seconds] Frame Number: 777 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 123.244.179.155 (123.244.179.155), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0x07e6 (2022) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x109b [correct] [Good: True] [Bad: False] Source: 123.244.179.155 (123.244.179.155) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0xe7f0 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANIPConnection:1\r\n \r\n No. Time Source Destination Protocol Length Info 778 0.044436000 61.252.244.124 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 778: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.645536000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.645536000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.044436000 seconds] Frame Number: 778 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 61.252.244.124 (61.252.244.124), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0x0d8a (3466) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 247 Protocol: UDP (17) Header checksum: 0xc714 [correct] [Good: True] [Bad: False] Source: 61.252.244.124 (61.252.244.124) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0xeb78 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-wifialliance-org:device:WFADevice:\r\n USN: uuid:565aa949-67c1-4c0e-aa8f-f349e6f59311::urn:schemas-wifialliance-org:device:WFADevice:\r\n \r\n No. Time Source Destination Protocol Length Info 779 0.044471000 61.252.244.124 [CENSORED] SSDP 359 HTTP/1.1 200 OK Frame 779: 359 bytes on wire (2872 bits), 359 bytes captured (2872 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.645571000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.645571000 seconds [Time delta from previous captured frame: 0.000035000 seconds] [Time delta from previous displayed frame: 0.000035000 seconds] [Time since reference or first frame: 0.044471000 seconds] Frame Number: 779 Frame Length: 359 bytes (2872 bits) Capture Length: 359 bytes (2872 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 61.252.244.124 (61.252.244.124), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 345 Identification: 0x0d8b (3467) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 247 Protocol: UDP (17) Header checksum: 0xc709 [correct] [Good: True] [Bad: False] Source: 61.252.244.124 (61.252.244.124) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 325 Checksum: 0x9743 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-wifialliance-org:service:WFAWLANConfig:\r\n USN: uuid:565aa949-67c1-4c0e-aa8f-f349e6f59311::urn:schemas-wifialliance-org:service:WFAWLANConfig:\r\n \r\n No. Time Source Destination Protocol Length Info 780 0.044567000 113.105.206.65 [CENSORED] SSDP 362 HTTP/1.1 200 OK Frame 780: 362 bytes on wire (2896 bits), 362 bytes captured (2896 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.645667000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.645667000 seconds [Time delta from previous captured frame: 0.000096000 seconds] [Time delta from previous displayed frame: 0.000096000 seconds] [Time since reference or first frame: 0.044567000 seconds] Frame Number: 780 Frame Length: 362 bytes (2896 bits) Capture Length: 362 bytes (2896 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 113.105.206.65 (113.105.206.65), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 348 Identification: 0xdc00 (56320) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x2d5f [correct] [Good: True] [Bad: False] Source: 113.105.206.65 (113.105.206.65) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 328 Checksum: 0xd304 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{459d4d41-92ed-42d5-8518-96c297823cec}0810743F7C48::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 781 0.044590000 174.48.6.151 [CENSORED] SSDP 289 HTTP/1.1 200 OK Frame 781: 289 bytes on wire (2312 bits), 289 bytes captured (2312 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.645690000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.645690000 seconds [Time delta from previous captured frame: 0.000023000 seconds] [Time delta from previous displayed frame: 0.000023000 seconds] [Time since reference or first frame: 0.044590000 seconds] Frame Number: 781 Frame Length: 289 bytes (2312 bits) Capture Length: 289 bytes (2312 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 174.48.6.151 (174.48.6.151), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 275 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 253 Protocol: UDP (17) Header checksum: 0x4c8c [correct] [Good: True] [Bad: False] Source: 174.48.6.151 (174.48.6.151) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 255 Checksum: 0x0aa7 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65530/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: uuid:6e68cdc6-1dd2-11b2-bc5b-d72cd3221927\r\n USN: uuid:6e68cdc6-1dd2-11b2-bc5b-d72cd3221927\r\n \r\n No. Time Source Destination Protocol Length Info 782 0.044633000 113.105.206.65 [CENSORED] SSDP 368 HTTP/1.1 200 OK Frame 782: 368 bytes on wire (2944 bits), 368 bytes captured (2944 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.645733000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.645733000 seconds [Time delta from previous captured frame: 0.000043000 seconds] [Time delta from previous displayed frame: 0.000043000 seconds] [Time since reference or first frame: 0.044633000 seconds] Frame Number: 782 Frame Length: 368 bytes (2944 bits) Capture Length: 368 bytes (2944 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 113.105.206.65 (113.105.206.65), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 354 Identification: 0xdc01 (56321) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x2d58 [correct] [Good: True] [Bad: False] Source: 113.105.206.65 (113.105.206.65) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 334 Checksum: 0x68d8 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{459d4d41-92ed-42d5-8518-96c297823cec}0810743F7C48::urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 783 0.044665000 113.105.206.65 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 783: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.645765000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.645765000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.044665000 seconds] Frame Number: 783 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 113.105.206.65 (113.105.206.65), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0xdc02 (56322) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x2d63 [correct] [Good: True] [Bad: False] Source: 113.105.206.65 (113.105.206.65) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0x97ba [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{459d4d41-92ed-42d5-8518-96c297823cec}0810743F7C48::urn:schemas-upnp-org:service:WANIPConnection:1\r\n \r\n No. Time Source Destination Protocol Length Info 784 0.044692000 113.105.206.65 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 784: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.645792000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.645792000 seconds [Time delta from previous captured frame: 0.000027000 seconds] [Time delta from previous displayed frame: 0.000027000 seconds] [Time since reference or first frame: 0.044692000 seconds] Frame Number: 784 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 113.105.206.65 (113.105.206.65), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0xdc03 (56323) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x2d90 [correct] [Good: True] [Bad: False] Source: 113.105.206.65 (113.105.206.65) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0xf133 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:IGD{722696eb-73c2-4d55-ae59-ad48e0a6b7aa}0810743F7C48\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{722696eb-73c2-4d55-ae59-ad48e0a6b7aa}0810743F7C48\r\n \r\n No. Time Source Destination Protocol Length Info 785 0.044731000 113.105.206.65 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 785: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.645831000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.645831000 seconds [Time delta from previous captured frame: 0.000039000 seconds] [Time delta from previous displayed frame: 0.000039000 seconds] [Time since reference or first frame: 0.044731000 seconds] Frame Number: 785 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 113.105.206.65 (113.105.206.65), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0xdc04 (56324) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x2d61 [correct] [Good: True] [Bad: False] Source: 113.105.206.65 (113.105.206.65) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0x61af [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{722696eb-73c2-4d55-ae59-ad48e0a6b7aa}0810743F7C48::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 786 0.044760000 60.212.72.52 [CENSORED] SSDP 336 HTTP/1.1 200 OK Frame 786: 336 bytes on wire (2688 bits), 336 bytes captured (2688 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.645860000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.645860000 seconds [Time delta from previous captured frame: 0.000029000 seconds] [Time delta from previous displayed frame: 0.000029000 seconds] [Time since reference or first frame: 0.044760000 seconds] Frame Number: 786 Frame Length: 336 bytes (2688 bits) Capture Length: 336 bytes (2688 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 60.212.72.52 (60.212.72.52), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 322 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x831c [correct] [Good: True] [Bad: False] Source: 60.212.72.52 (60.212.72.52) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 302 Checksum: 0x011f [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:4996/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 787 0.044789000 27.220.9.105 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 787: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.645889000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.645889000 seconds [Time delta from previous captured frame: 0.000029000 seconds] [Time delta from previous displayed frame: 0.000029000 seconds] [Time since reference or first frame: 0.044789000 seconds] Frame Number: 787 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 27.220.9.105 (27.220.9.105), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0x9ec7 (40647) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x8422 [correct] [Good: True] [Bad: False] Source: 27.220.9.105 (27.220.9.105) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0xcc3d [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 788 0.044814000 123.248.91.31 [CENSORED] SSDP 272 HTTP/1.1 200 OK Frame 788: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.645914000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.645914000 seconds [Time delta from previous captured frame: 0.000025000 seconds] [Time delta from previous displayed frame: 0.000025000 seconds] [Time since reference or first frame: 0.044814000 seconds] Frame Number: 788 Frame Length: 272 bytes (2176 bits) Capture Length: 272 bytes (2176 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 123.248.91.31 (123.248.91.31), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 258 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x324d [correct] [Good: True] [Bad: False] Source: 123.248.91.31 (123.248.91.31) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 238 Checksum: 0x7555 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: upnp:rootdevice\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::upnp:rootdevice\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:4996/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 789 0.044861000 110.47.177.193 [CENSORED] SSDP 352 HTTP/1.1 200 OK Frame 789: 352 bytes on wire (2816 bits), 352 bytes captured (2816 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.645961000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.645961000 seconds [Time delta from previous captured frame: 0.000047000 seconds] [Time delta from previous displayed frame: 0.000047000 seconds] [Time since reference or first frame: 0.044861000 seconds] Frame Number: 789 Frame Length: 352 bytes (2816 bits) Capture Length: 352 bytes (2816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 110.47.177.193 (110.47.177.193), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 338 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0xe923 [correct] [Good: True] [Bad: False] Source: 110.47.177.193 (110.47.177.193) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 318 Checksum: 0x7226 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:4376/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 790 0.044884000 119.189.19.39 [CENSORED] SSDP 284 HTTP/1.1 200 OK Frame 790: 284 bytes on wire (2272 bits), 284 bytes captured (2272 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.645984000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.645984000 seconds [Time delta from previous captured frame: 0.000023000 seconds] [Time delta from previous displayed frame: 0.000023000 seconds] [Time since reference or first frame: 0.044884000 seconds] Frame Number: 790 Frame Length: 284 bytes (2272 bits) Capture Length: 284 bytes (2272 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 119.189.19.39 (119.189.19.39), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 270 Identification: 0x98c0 (39104) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x24a4 [correct] [Good: True] [Bad: False] Source: 119.189.19.39 (119.189.19.39) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 250 Checksum: 0xfac0 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: upnp:rootdevice\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 791 0.044924000 110.47.177.193 [CENSORED] SSDP 334 HTTP/1.1 200 OK Frame 791: 334 bytes on wire (2672 bits), 334 bytes captured (2672 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.646024000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.646024000 seconds [Time delta from previous captured frame: 0.000040000 seconds] [Time delta from previous displayed frame: 0.000040000 seconds] [Time since reference or first frame: 0.044924000 seconds] Frame Number: 791 Frame Length: 334 bytes (2672 bits) Capture Length: 334 bytes (2672 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 110.47.177.193 (110.47.177.193), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 320 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0xe935 [correct] [Good: True] [Bad: False] Source: 110.47.177.193 (110.47.177.193) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 300 Checksum: 0x9c75 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:service:WANIPConnection:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:4376/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 792 0.044955000 110.47.177.193 [CENSORED] SSDP 336 HTTP/1.1 200 OK Frame 792: 336 bytes on wire (2688 bits), 336 bytes captured (2688 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.646055000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.646055000 seconds [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.044955000 seconds] Frame Number: 792 Frame Length: 336 bytes (2688 bits) Capture Length: 336 bytes (2688 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 110.47.177.193 (110.47.177.193), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 322 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0xe933 [correct] [Good: True] [Bad: False] Source: 110.47.177.193 (110.47.177.193) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 302 Checksum: 0xc599 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANPPPConnection:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:service:WANPPPConnection:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:4376/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 793 0.044991000 110.47.177.193 [CENSORED] SSDP 336 HTTP/1.1 200 OK Frame 793: 336 bytes on wire (2688 bits), 336 bytes captured (2688 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.646091000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.646091000 seconds [Time delta from previous captured frame: 0.000036000 seconds] [Time delta from previous displayed frame: 0.000036000 seconds] [Time since reference or first frame: 0.044991000 seconds] Frame Number: 793 Frame Length: 336 bytes (2688 bits) Capture Length: 336 bytes (2688 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 110.47.177.193 (110.47.177.193), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 322 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0xe933 [correct] [Good: True] [Bad: False] Source: 110.47.177.193 (110.47.177.193) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 302 Checksum: 0x683c [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:4376/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 794 0.045019000 120.10.119.38 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 794: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.646119000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.646119000 seconds [Time delta from previous captured frame: 0.000028000 seconds] [Time delta from previous displayed frame: 0.000028000 seconds] [Time since reference or first frame: 0.045019000 seconds] Frame Number: 794 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 120.10.119.38 (120.10.119.38), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0xac89 (44169) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xac84 [correct] [Good: True] [Bad: False] Source: 120.10.119.38 (120.10.119.38) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0xda98 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 795 0.045055000 119.189.19.39 [CENSORED] SSDP 330 HTTP/1.1 200 OK Frame 795: 330 bytes on wire (2640 bits), 330 bytes captured (2640 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.646155000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.646155000 seconds [Time delta from previous captured frame: 0.000036000 seconds] [Time delta from previous displayed frame: 0.000036000 seconds] [Time since reference or first frame: 0.045055000 seconds] Frame Number: 795 Frame Length: 330 bytes (2640 bits) Capture Length: 330 bytes (2640 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 119.189.19.39 (119.189.19.39), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 316 Identification: 0x98c5 (39109) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x2481 [correct] [Good: True] [Bad: False] Source: 119.189.19.39 (119.189.19.39) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 296 Checksum: 0x9c9f [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 796 0.045080000 113.105.206.65 [CENSORED] SSDP 284 HTTP/1.1 200 OK Frame 796: 284 bytes on wire (2272 bits), 284 bytes captured (2272 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.646180000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.646180000 seconds [Time delta from previous captured frame: 0.000025000 seconds] [Time delta from previous displayed frame: 0.000025000 seconds] [Time since reference or first frame: 0.045080000 seconds] Frame Number: 796 Frame Length: 284 bytes (2272 bits) Capture Length: 284 bytes (2272 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 113.105.206.65 (113.105.206.65), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 270 Identification: 0xdc05 (56325) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x2da8 [correct] [Good: True] [Bad: False] Source: 113.105.206.65 (113.105.206.65) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 250 Checksum: 0xd0ad [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: upnp:rootdevice\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{722696eb-73c2-4d55-ae59-ad48e0a6b7aa}0810743F7C48::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 797 0.045123000 113.105.206.65 [CENSORED] SSDP 348 HTTP/1.1 200 OK Frame 797: 348 bytes on wire (2784 bits), 348 bytes captured (2784 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.646223000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.646223000 seconds [Time delta from previous captured frame: 0.000043000 seconds] [Time delta from previous displayed frame: 0.000043000 seconds] [Time since reference or first frame: 0.045123000 seconds] Frame Number: 797 Frame Length: 348 bytes (2784 bits) Capture Length: 348 bytes (2784 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 113.105.206.65 (113.105.206.65), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 334 Identification: 0xdc06 (56326) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x2d67 [correct] [Good: True] [Bad: False] Source: 113.105.206.65 (113.105.206.65) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 314 Checksum: 0x0a68 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{722696eb-73c2-4d55-ae59-ad48e0a6b7aa}0810743F7C48::urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n \r\n No. Time Source Destination Protocol Length Info 798 0.045150000 113.105.206.65 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 798: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.646250000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.646250000 seconds [Time delta from previous captured frame: 0.000027000 seconds] [Time delta from previous displayed frame: 0.000027000 seconds] [Time since reference or first frame: 0.045150000 seconds] Frame Number: 798 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 113.105.206.65 (113.105.206.65), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0xdc07 (56327) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x2d8c [correct] [Good: True] [Bad: False] Source: 113.105.206.65 (113.105.206.65) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0x2a3b [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WAN{30ea3150-5ad3-49e8-808b-6c4111437217}0810743F7C48\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{30ea3150-5ad3-49e8-808b-6c4111437217}0810743F7C48\r\n \r\n No. Time Source Destination Protocol Length Info 799 0.045226000 98.215.221.237 [CENSORED] SSDP 365 HTTP/1.1 200 OK Frame 799: 365 bytes on wire (2920 bits), 365 bytes captured (2920 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.646326000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.646326000 seconds [Time delta from previous captured frame: 0.000076000 seconds] [Time delta from previous displayed frame: 0.000076000 seconds] [Time since reference or first frame: 0.045226000 seconds] Frame Number: 799 Frame Length: 365 bytes (2920 bits) Capture Length: 365 bytes (2920 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 98.215.221.237 (98.215.221.237), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 351 Identification: 0xd488 (54408) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0xedb9 [correct] [Good: True] [Bad: False] Source: 98.215.221.237 (98.215.221.237) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 331 Checksum: 0x4f7d [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:\r\n USN: uuid:12b5d6f4-1dd2-11b2-ac5f-a8f932894d8a::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:\r\n \r\n No. Time Source Destination Protocol Length Info 800 0.045290000 98.215.221.237 [CENSORED] SSDP 353 HTTP/1.1 200 OK Frame 800: 353 bytes on wire (2824 bits), 353 bytes captured (2824 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.646390000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.646390000 seconds [Time delta from previous captured frame: 0.000064000 seconds] [Time delta from previous displayed frame: 0.000064000 seconds] [Time since reference or first frame: 0.045290000 seconds] Frame Number: 800 Frame Length: 353 bytes (2824 bits) Capture Length: 353 bytes (2824 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 98.215.221.237 (98.215.221.237), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 339 Identification: 0xd489 (54409) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0xedc4 [correct] [Good: True] [Bad: False] Source: 98.215.221.237 (98.215.221.237) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 319 Checksum: 0x73a7 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:\r\n USN: uuid:12ba1156-1dd2-11b2-8035-cdbde123f3c6::urn:schemas-upnp-org:device:WANConnectionDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 801 0.045318000 93.73.183.232 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 801: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.646418000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.646418000 seconds [Time delta from previous captured frame: 0.000028000 seconds] [Time delta from previous displayed frame: 0.000028000 seconds] [Time since reference or first frame: 0.045318000 seconds] Frame Number: 801 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 93.73.183.232 (93.73.183.232), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0x0226 (550) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0xebbf [correct] [Good: True] [Bad: False] Source: 93.73.183.232 (93.73.183.232) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0xbe23 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANPPPConnection:\r\n USN: uuid:33333333-3333-3333-3333-333333333333::urn:schemas-upnp-org:service:WANPPPConnection:\r\n \r\n No. Time Source Destination Protocol Length Info 802 0.045353000 93.73.183.232 [CENSORED] SSDP 347 HTTP/1.1 200 OK Frame 802: 347 bytes on wire (2776 bits), 347 bytes captured (2776 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.646453000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.646453000 seconds [Time delta from previous captured frame: 0.000035000 seconds] [Time delta from previous displayed frame: 0.000035000 seconds] [Time since reference or first frame: 0.045353000 seconds] Frame Number: 802 Frame Length: 347 bytes (2776 bits) Capture Length: 347 bytes (2776 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 93.73.183.232 (93.73.183.232), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 333 Identification: 0x0227 (551) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0xebc0 [correct] [Good: True] [Bad: False] Source: 93.73.183.232 (93.73.183.232) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 313 Checksum: 0xe4af [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:\r\n USN: uuid:33333333-3333-3333-3333-333333333333::urn:schemas-upnp-org:service:WANIPConnection:\r\n \r\n No. Time Source Destination Protocol Length Info 803 0.045384000 93.73.183.232 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 803: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.646484000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.646484000 seconds [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.045384000 seconds] Frame Number: 803 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 93.73.183.232 (93.73.183.232), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0x0228 (552) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0xebbd [correct] [Good: True] [Bad: False] Source: 93.73.183.232 (93.73.183.232) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0x75f1 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:\r\n USN: uuid:11111111-1111-1111-1111-111111111111::urn:schemas-upnp-org:service:Layer3Forwarding:\r\n \r\n No. Time Source Destination Protocol Length Info 804 0.045412000 60.212.72.52 [CENSORED] SSDP 320 HTTP/1.1 200 OK Frame 804: 320 bytes on wire (2560 bits), 320 bytes captured (2560 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.646512000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.646512000 seconds [Time delta from previous captured frame: 0.000028000 seconds] [Time delta from previous displayed frame: 0.000028000 seconds] [Time since reference or first frame: 0.045412000 seconds] Frame Number: 804 Frame Length: 320 bytes (2560 bits) Capture Length: 320 bytes (2560 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 60.212.72.52 (60.212.72.52), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 306 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x832c [correct] [Good: True] [Bad: False] Source: 60.212.72.52 (60.212.72.52) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 286 Checksum: 0x92d0 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:WANDevice:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:device:WANDevice:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:4996/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 805 0.045450000 98.215.221.237 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 805: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.646550000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.646550000 seconds [Time delta from previous captured frame: 0.000038000 seconds] [Time delta from previous displayed frame: 0.000038000 seconds] [Time since reference or first frame: 0.045450000 seconds] Frame Number: 805 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 98.215.221.237 (98.215.221.237), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0xd48a (54410) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0xedc7 [correct] [Good: True] [Bad: False] Source: 98.215.221.237 (98.215.221.237) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0xcf13 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANPPPConnection:\r\n USN: uuid:12ba1156-1dd2-11b2-8035-cdbde123f3c6::urn:schemas-upnp-org:service:WANPPPConnection:\r\n \r\n No. Time Source Destination Protocol Length Info 806 0.045480000 184.166.105.54 [CENSORED] SSDP 353 HTTP/1.1 200 OK Frame 806: 353 bytes on wire (2824 bits), 353 bytes captured (2824 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.646580000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.646580000 seconds [Time delta from previous captured frame: 0.000030000 seconds] [Time delta from previous displayed frame: 0.000030000 seconds] [Time since reference or first frame: 0.045480000 seconds] Frame Number: 806 Frame Length: 353 bytes (2824 bits) Capture Length: 353 bytes (2824 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 184.166.105.54 (184.166.105.54), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x28 (DSCP 0x0a: Assured Forwarding 11; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 10.. = Differentiated Services Codepoint: Assured Forwarding 11 (0x0a) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 339 Identification: 0x2619 (9753) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0xbaf5 [correct] [Good: True] [Bad: False] Source: 184.166.105.54 (184.166.105.54) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 319 Checksum: 0x560c [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:\r\n USN: uuid:33333333-3333-3333-3333-333333333333::urn:schemas-upnp-org:device:WANConnectionDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 807 0.045512000 184.166.105.54 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 807: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.646612000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.646612000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.045512000 seconds] Frame Number: 807 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 184.166.105.54 (184.166.105.54), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x28 (DSCP 0x0a: Assured Forwarding 11; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 10.. = Differentiated Services Codepoint: Assured Forwarding 11 (0x0a) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0x261a (9754) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0xbaf8 [correct] [Good: True] [Bad: False] Source: 184.166.105.54 (184.166.105.54) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0xb178 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANPPPConnection:\r\n USN: uuid:33333333-3333-3333-3333-333333333333::urn:schemas-upnp-org:service:WANPPPConnection:\r\n \r\n No. Time Source Destination Protocol Length Info 808 0.045543000 184.166.105.54 [CENSORED] SSDP 347 HTTP/1.1 200 OK Frame 808: 347 bytes on wire (2776 bits), 347 bytes captured (2776 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.646643000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.646643000 seconds [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.045543000 seconds] Frame Number: 808 Frame Length: 347 bytes (2776 bits) Capture Length: 347 bytes (2776 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 184.166.105.54 (184.166.105.54), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x28 (DSCP 0x0a: Assured Forwarding 11; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 10.. = Differentiated Services Codepoint: Assured Forwarding 11 (0x0a) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 333 Identification: 0x261b (9755) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0xbaf9 [correct] [Good: True] [Bad: False] Source: 184.166.105.54 (184.166.105.54) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 313 Checksum: 0xd804 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:\r\n USN: uuid:33333333-3333-3333-3333-333333333333::urn:schemas-upnp-org:service:WANIPConnection:\r\n \r\n No. Time Source Destination Protocol Length Info 809 0.045576000 184.166.105.54 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 809: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.646676000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.646676000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.045576000 seconds] Frame Number: 809 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 184.166.105.54 (184.166.105.54), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x28 (DSCP 0x0a: Assured Forwarding 11; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 10.. = Differentiated Services Codepoint: Assured Forwarding 11 (0x0a) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0x261c (9756) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0xbaf6 [correct] [Good: True] [Bad: False] Source: 184.166.105.54 (184.166.105.54) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0x6946 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:\r\n USN: uuid:11111111-1111-1111-1111-111111111111::urn:schemas-upnp-org:service:Layer3Forwarding:\r\n \r\n No. Time Source Destination Protocol Length Info 810 0.045608000 184.166.105.54 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 810: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.646708000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.646708000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.045608000 seconds] Frame Number: 810 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 184.166.105.54 (184.166.105.54), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x28 (DSCP 0x0a: Assured Forwarding 11; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 10.. = Differentiated Services Codepoint: Assured Forwarding 11 (0x0a) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0x261d (9757) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0xbaf5 [correct] [Good: True] [Bad: False] Source: 184.166.105.54 (184.166.105.54) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0xfc14 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-wifialliance-org:device:WFADevice:\r\n USN: uuid:565aa949-67c1-4c0e-aa8f-f349e6f59311::urn:schemas-wifialliance-org:device:WFADevice:\r\n \r\n No. Time Source Destination Protocol Length Info 811 0.045642000 184.166.105.54 [CENSORED] SSDP 359 HTTP/1.1 200 OK Frame 811: 359 bytes on wire (2872 bits), 359 bytes captured (2872 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.646742000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.646742000 seconds [Time delta from previous captured frame: 0.000034000 seconds] [Time delta from previous displayed frame: 0.000034000 seconds] [Time since reference or first frame: 0.045642000 seconds] Frame Number: 811 Frame Length: 359 bytes (2872 bits) Capture Length: 359 bytes (2872 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 184.166.105.54 (184.166.105.54), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x28 (DSCP 0x0a: Assured Forwarding 11; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 10.. = Differentiated Services Codepoint: Assured Forwarding 11 (0x0a) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 345 Identification: 0x261e (9758) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0xbaea [correct] [Good: True] [Bad: False] Source: 184.166.105.54 (184.166.105.54) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 325 Checksum: 0xa7df [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-wifialliance-org:service:WFAWLANConfig:\r\n USN: uuid:565aa949-67c1-4c0e-aa8f-f349e6f59311::urn:schemas-wifialliance-org:service:WFAWLANConfig:\r\n \r\n No. Time Source Destination Protocol Length Info 812 0.045674000 27.220.9.105 [CENSORED] SSDP 368 HTTP/1.1 200 OK Frame 812: 368 bytes on wire (2944 bits), 368 bytes captured (2944 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.646774000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.646774000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.045674000 seconds] Frame Number: 812 Frame Length: 368 bytes (2944 bits) Capture Length: 368 bytes (2944 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 27.220.9.105 (27.220.9.105), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 354 Identification: 0x9ecc (40652) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x83f3 [correct] [Good: True] [Bad: False] Source: 27.220.9.105 (27.220.9.105) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 334 Checksum: 0xc359 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 813 0.045707000 27.220.9.105 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 813: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.646807000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.646807000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.045707000 seconds] Frame Number: 813 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 27.220.9.105 (27.220.9.105), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0x9ecf (40655) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x83fc [correct] [Good: True] [Bad: False] Source: 27.220.9.105 (27.220.9.105) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0xf161 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 814 0.045736000 181.73.6.2 [CENSORED] SSDP 326 HTTP/1.1 200 OK Frame 814: 326 bytes on wire (2608 bits), 326 bytes captured (2608 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.646836000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.646836000 seconds [Time delta from previous captured frame: 0.000029000 seconds] [Time delta from previous displayed frame: 0.000029000 seconds] [Time since reference or first frame: 0.045736000 seconds] Frame Number: 814 Frame Length: 326 bytes (2608 bits) Capture Length: 326 bytes (2608 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 181.73.6.2 (181.73.6.2), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 312 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 247 Protocol: UDP (17) Header checksum: 0x4be3 [correct] [Good: True] [Bad: False] Source: 181.73.6.2 (181.73.6.2) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 292 Checksum: 0x5e52 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n USN: uuid:f218225c-1dd1-11b2-9671-8715be472bf6::urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n \r\n No. Time Source Destination Protocol Length Info 815 0.046238000 76.126.208.169 [CENSORED] SSDP 334 HTTP/1.1 200 OK Frame 815: 334 bytes on wire (2672 bits), 334 bytes captured (2672 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.647338000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.647338000 seconds [Time delta from previous captured frame: 0.000502000 seconds] [Time delta from previous displayed frame: 0.000502000 seconds] [Time since reference or first frame: 0.046238000 seconds] Frame Number: 815 Frame Length: 334 bytes (2672 bits) Capture Length: 334 bytes (2672 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 76.126.208.169 (76.126.208.169), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 320 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xeafe [correct] [Good: True] [Bad: False] Source: 76.126.208.169 (76.126.208.169) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 300 Checksum: 0xa33f [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:service:WANIPConnection:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.1.1:2048/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 816 0.046274000 76.126.208.169 [CENSORED] SSDP 336 HTTP/1.1 200 OK Frame 816: 336 bytes on wire (2688 bits), 336 bytes captured (2688 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.647374000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.647374000 seconds [Time delta from previous captured frame: 0.000036000 seconds] [Time delta from previous displayed frame: 0.000036000 seconds] [Time since reference or first frame: 0.046274000 seconds] Frame Number: 816 Frame Length: 336 bytes (2688 bits) Capture Length: 336 bytes (2688 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 76.126.208.169 (76.126.208.169), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 322 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xeafc [correct] [Good: True] [Bad: False] Source: 76.126.208.169 (76.126.208.169) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 302 Checksum: 0xcc63 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANPPPConnection:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:service:WANPPPConnection:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.1.1:2048/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 817 0.046326000 119.189.19.39 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 817: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.647426000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.647426000 seconds [Time delta from previous captured frame: 0.000052000 seconds] [Time delta from previous displayed frame: 0.000052000 seconds] [Time since reference or first frame: 0.046326000 seconds] Frame Number: 817 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 119.189.19.39 (119.189.19.39), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0x98cd (39117) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x248d [correct] [Good: True] [Bad: False] Source: 119.189.19.39 (119.189.19.39) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0x669e [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 818 0.046417000 69.122.151.229 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 818: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.647517000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.647517000 seconds [Time delta from previous captured frame: 0.000091000 seconds] [Time delta from previous displayed frame: 0.000091000 seconds] [Time since reference or first frame: 0.046417000 seconds] Frame Number: 818 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 69.122.151.229 (69.122.151.229), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0x109b (4251) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 248 Protocol: UDP (17) Header checksum: 0x181d [correct] [Good: True] [Bad: False] Source: 69.122.151.229 (69.122.151.229) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0x6e7b [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:\r\n USN: uuid:b1c5b172-1dd1-11b2-8144-8c1b2c3dfb83::urn:schemas-upnp-org:service:Layer3Forwarding:\r\n \r\n No. Time Source Destination Protocol Length Info 819 0.046450000 69.122.151.229 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 819: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.647550000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.647550000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.046450000 seconds] Frame Number: 819 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 69.122.151.229 (69.122.151.229), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0x109c (4252) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 248 Protocol: UDP (17) Header checksum: 0x181c [correct] [Good: True] [Bad: False] Source: 69.122.151.229 (69.122.151.229) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0x8c90 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-wifialliance-org:device:WFADevice:\r\n USN: uuid:b1e17588-1dd1-11b2-a238-e58129cb336c::urn:schemas-wifialliance-org:device:WFADevice:\r\n \r\n No. Time Source Destination Protocol Length Info 820 0.052150000 182.204.244.205 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 820: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.653250000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.653250000 seconds [Time delta from previous captured frame: 0.005700000 seconds] [Time delta from previous displayed frame: 0.005700000 seconds] [Time since reference or first frame: 0.052150000 seconds] Frame Number: 820 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 182.204.244.205 (182.204.244.205), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0xc0e4 (49380) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0xdcaf [correct] [Good: True] [Bad: False] Source: 182.204.244.205 (182.204.244.205) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0x1e2f [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 821 0.052188000 182.204.244.205 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 821: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.653288000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.653288000 seconds [Time delta from previous captured frame: 0.000038000 seconds] [Time delta from previous displayed frame: 0.000038000 seconds] [Time since reference or first frame: 0.052188000 seconds] Frame Number: 821 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 182.204.244.205 (182.204.244.205), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0xc0e5 (49381) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0xdc80 [correct] [Good: True] [Bad: False] Source: 182.204.244.205 (182.204.244.205) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0x6b0c [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 822 0.052211000 182.204.244.205 [CENSORED] SSDP 284 HTTP/1.1 200 OK Frame 822: 284 bytes on wire (2272 bits), 284 bytes captured (2272 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.653311000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.653311000 seconds [Time delta from previous captured frame: 0.000023000 seconds] [Time delta from previous displayed frame: 0.000023000 seconds] [Time since reference or first frame: 0.052211000 seconds] Frame Number: 822 Frame Length: 284 bytes (2272 bits) Capture Length: 284 bytes (2272 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 182.204.244.205 (182.204.244.205), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 270 Identification: 0xc0e6 (49382) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0xdcc7 [correct] [Good: True] [Bad: False] Source: 182.204.244.205 (182.204.244.205) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 250 Checksum: 0xda0a [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: upnp:rootdevice\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 823 0.052249000 182.204.244.205 [CENSORED] SSDP 348 HTTP/1.1 200 OK Frame 823: 348 bytes on wire (2784 bits), 348 bytes captured (2784 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.653349000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.653349000 seconds [Time delta from previous captured frame: 0.000038000 seconds] [Time delta from previous displayed frame: 0.000038000 seconds] [Time since reference or first frame: 0.052249000 seconds] Frame Number: 823 Frame Length: 348 bytes (2784 bits) Capture Length: 348 bytes (2784 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 182.204.244.205 (182.204.244.205), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 334 Identification: 0xc0e7 (49383) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0xdc86 [correct] [Good: True] [Bad: False] Source: 182.204.244.205 (182.204.244.205) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 314 Checksum: 0x13c5 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n \r\n No. Time Source Destination Protocol Length Info 824 0.052280000 182.204.244.205 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 824: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.653380000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.653380000 seconds [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.052280000 seconds] Frame Number: 824 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 182.204.244.205 (182.204.244.205), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0xc0e8 (49384) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0xdcbb [correct] [Good: True] [Bad: False] Source: 182.204.244.205 (182.204.244.205) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0x45e8 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 825 0.052313000 182.204.244.205 [CENSORED] SSDP 332 HTTP/1.1 200 OK Frame 825: 332 bytes on wire (2656 bits), 332 bytes captured (2656 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.653413000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.653413000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.052313000 seconds] Frame Number: 825 Frame Length: 332 bytes (2656 bits) Capture Length: 332 bytes (2656 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 182.204.244.205 (182.204.244.205), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 318 Identification: 0xc0e9 (49385) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0xdca4 [correct] [Good: True] [Bad: False] Source: 182.204.244.205 (182.204.244.205) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 298 Checksum: 0x820a [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000::urn:schemas-upnp-org:device:WANDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 826 0.052349000 113.240.199.52 [CENSORED] SSDP 348 HTTP/1.1 200 OK Frame 826: 348 bytes on wire (2784 bits), 348 bytes captured (2784 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.653449000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.653449000 seconds [Time delta from previous captured frame: 0.000036000 seconds] [Time delta from previous displayed frame: 0.000036000 seconds] [Time since reference or first frame: 0.052349000 seconds] Frame Number: 826 Frame Length: 348 bytes (2784 bits) Capture Length: 348 bytes (2784 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 113.240.199.52 (113.240.199.52), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 334 Identification: 0xc1cb (49611) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x4d18 [correct] [Good: True] [Bad: False] Source: 113.240.199.52 (113.240.199.52) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 314 Checksum: 0x863a [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n \r\n No. Time Source Destination Protocol Length Info 827 0.052374000 123.244.179.155 [CENSORED] SSDP 284 HTTP/1.1 200 OK Frame 827: 284 bytes on wire (2272 bits), 284 bytes captured (2272 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.653474000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.653474000 seconds [Time delta from previous captured frame: 0.000025000 seconds] [Time delta from previous displayed frame: 0.000025000 seconds] [Time since reference or first frame: 0.052374000 seconds] Frame Number: 827 Frame Length: 284 bytes (2272 bits) Capture Length: 284 bytes (2272 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 123.244.179.155 (123.244.179.155), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 270 Identification: 0x0820 (2080) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x10a9 [correct] [Good: True] [Bad: False] Source: 123.244.179.155 (123.244.179.155) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 250 Checksum: 0x5615 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: upnp:rootdevice\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 828 0.052416000 14.115.26.201 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 828: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.653516000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.653516000 seconds [Time delta from previous captured frame: 0.000042000 seconds] [Time delta from previous displayed frame: 0.000042000 seconds] [Time since reference or first frame: 0.052416000 seconds] Frame Number: 828 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 14.115.26.201 (14.115.26.201), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0x86fc (34556) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x97d8 [correct] [Good: True] [Bad: False] Source: 14.115.26.201 (14.115.26.201) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0xed6a [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 829 0.052440000 14.115.26.201 [CENSORED] SSDP 284 HTTP/1.1 200 OK Frame 829: 284 bytes on wire (2272 bits), 284 bytes captured (2272 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.653540000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.653540000 seconds [Time delta from previous captured frame: 0.000024000 seconds] [Time delta from previous displayed frame: 0.000024000 seconds] [Time since reference or first frame: 0.052440000 seconds] Frame Number: 829 Frame Length: 284 bytes (2272 bits) Capture Length: 284 bytes (2272 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 14.115.26.201 (14.115.26.201), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 270 Identification: 0x86fd (34557) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x981f [correct] [Good: True] [Bad: False] Source: 14.115.26.201 (14.115.26.201) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 250 Checksum: 0x5c69 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: upnp:rootdevice\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 830 0.052480000 114.101.120.185 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 830: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.653580000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.653580000 seconds [Time delta from previous captured frame: 0.000040000 seconds] [Time delta from previous displayed frame: 0.000040000 seconds] [Time since reference or first frame: 0.052480000 seconds] Frame Number: 830 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 114.101.120.185 (114.101.120.185), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0x3af1 (15089) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x2201 [correct] [Good: True] [Bad: False] Source: 114.101.120.185 (114.101.120.185) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0x2c62 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANIPConnection:1\r\n \r\n No. Time Source Destination Protocol Length Info 831 0.052510000 14.115.26.201 [CENSORED] SSDP 348 HTTP/1.1 200 OK Frame 831: 348 bytes on wire (2784 bits), 348 bytes captured (2784 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.653610000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.653610000 seconds [Time delta from previous captured frame: 0.000030000 seconds] [Time delta from previous displayed frame: 0.000030000 seconds] [Time since reference or first frame: 0.052510000 seconds] Frame Number: 831 Frame Length: 348 bytes (2784 bits) Capture Length: 348 bytes (2784 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 14.115.26.201 (14.115.26.201), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 334 Identification: 0x86fe (34558) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x97de [correct] [Good: True] [Bad: False] Source: 14.115.26.201 (14.115.26.201) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 314 Checksum: 0x9623 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n \r\n No. Time Source Destination Protocol Length Info 832 0.052537000 114.101.120.185 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 832: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.653637000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.653637000 seconds [Time delta from previous captured frame: 0.000027000 seconds] [Time delta from previous displayed frame: 0.000027000 seconds] [Time since reference or first frame: 0.052537000 seconds] Frame Number: 832 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 114.101.120.185 (114.101.120.185), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0x3af2 (15090) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x222e [correct] [Good: True] [Bad: False] Source: 114.101.120.185 (114.101.120.185) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0xdeaa [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 833 0.052580000 114.101.120.185 [CENSORED] SSDP 284 HTTP/1.1 200 OK Frame 833: 284 bytes on wire (2272 bits), 284 bytes captured (2272 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.653680000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.653680000 seconds [Time delta from previous captured frame: 0.000043000 seconds] [Time delta from previous displayed frame: 0.000043000 seconds] [Time since reference or first frame: 0.052580000 seconds] Frame Number: 833 Frame Length: 284 bytes (2272 bits) Capture Length: 284 bytes (2272 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 114.101.120.185 (114.101.120.185), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 270 Identification: 0x3af4 (15092) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x2246 [correct] [Good: True] [Bad: False] Source: 114.101.120.185 (114.101.120.185) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 250 Checksum: 0x9a86 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: upnp:rootdevice\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 834 0.052613000 24.159.181.60 [CENSORED] SSDP 280 HTTP/1.1 200 OK Frame 834: 280 bytes on wire (2240 bits), 280 bytes captured (2240 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.653713000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.653713000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.052613000 seconds] Frame Number: 834 Frame Length: 280 bytes (2240 bits) Capture Length: 280 bytes (2240 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 24.159.181.60 (24.159.181.60), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 266 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 247 Protocol: UDP (17) Header checksum: 0x3961 [correct] [Good: True] [Bad: False] Source: 24.159.181.60 (24.159.181.60) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 246 Checksum: 0xc6af [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: upnp:rootdevice\r\n USN: uuid:612efcea-1dd2-11b2-8c5b-d67ffee487ae::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 835 0.052656000 24.159.181.60 [CENSORED] SSDP 352 HTTP/1.1 200 OK Frame 835: 352 bytes on wire (2816 bits), 352 bytes captured (2816 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.653756000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.653756000 seconds [Time delta from previous captured frame: 0.000043000 seconds] [Time delta from previous displayed frame: 0.000043000 seconds] [Time since reference or first frame: 0.052656000 seconds] Frame Number: 835 Frame Length: 352 bytes (2816 bits) Capture Length: 352 bytes (2816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 24.159.181.60 (24.159.181.60), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 338 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 247 Protocol: UDP (17) Header checksum: 0x3919 [correct] [Good: True] [Bad: False] Source: 24.159.181.60 (24.159.181.60) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 318 Checksum: 0x57b1 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n USN: uuid:612efcea-1dd2-11b2-8c5b-d67ffee487ae::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 836 0.052693000 182.204.244.205 [CENSORED] SSDP 362 HTTP/1.1 200 OK Frame 836: 362 bytes on wire (2896 bits), 362 bytes captured (2896 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.653793000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.653793000 seconds [Time delta from previous captured frame: 0.000037000 seconds] [Time delta from previous displayed frame: 0.000037000 seconds] [Time since reference or first frame: 0.052693000 seconds] Frame Number: 836 Frame Length: 362 bytes (2896 bits) Capture Length: 362 bytes (2896 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 182.204.244.205 (182.204.244.205), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 348 Identification: 0xc0f7 (49399) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0xdc68 [correct] [Good: True] [Bad: False] Source: 182.204.244.205 (182.204.244.205) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 328 Checksum: 0x8255 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 837 0.052722000 24.159.181.60 [CENSORED] SSDP 348 HTTP/1.1 200 OK Frame 837: 348 bytes on wire (2784 bits), 348 bytes captured (2784 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.653822000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.653822000 seconds [Time delta from previous captured frame: 0.000029000 seconds] [Time delta from previous displayed frame: 0.000029000 seconds] [Time since reference or first frame: 0.052722000 seconds] Frame Number: 837 Frame Length: 348 bytes (2784 bits) Capture Length: 348 bytes (2784 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 24.159.181.60 (24.159.181.60), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 334 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 247 Protocol: UDP (17) Header checksum: 0x391d [correct] [Good: True] [Bad: False] Source: 24.159.181.60 (24.159.181.60) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 314 Checksum: 0x9572 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n USN: uuid:6130eb7c-1dd2-11b2-bb3b-fb593a60cf44::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 838 0.052759000 182.204.244.205 [CENSORED] SSDP 368 HTTP/1.1 200 OK Frame 838: 368 bytes on wire (2944 bits), 368 bytes captured (2944 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.653859000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.653859000 seconds [Time delta from previous captured frame: 0.000037000 seconds] [Time delta from previous displayed frame: 0.000037000 seconds] [Time since reference or first frame: 0.052759000 seconds] Frame Number: 838 Frame Length: 368 bytes (2944 bits) Capture Length: 368 bytes (2944 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 182.204.244.205 (182.204.244.205), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 354 Identification: 0xc0f8 (49400) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0xdc61 [correct] [Good: True] [Bad: False] Source: 182.204.244.205 (182.204.244.205) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 334 Checksum: 0x3d04 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 839 0.052787000 24.159.181.60 [CENSORED] SSDP 328 HTTP/1.1 200 OK Frame 839: 328 bytes on wire (2624 bits), 328 bytes captured (2624 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.653887000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.653887000 seconds [Time delta from previous captured frame: 0.000028000 seconds] [Time delta from previous displayed frame: 0.000028000 seconds] [Time since reference or first frame: 0.052787000 seconds] Frame Number: 839 Frame Length: 328 bytes (2624 bits) Capture Length: 328 bytes (2624 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 24.159.181.60 (24.159.181.60), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 314 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 247 Protocol: UDP (17) Header checksum: 0x3931 [correct] [Good: True] [Bad: False] Source: 24.159.181.60 (24.159.181.60) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 294 Checksum: 0xd209 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-upnp-org:device:WANDevice:1\r\n USN: uuid:612ff80c-1dd2-11b2-a2d7-90793174b0fd::urn:schemas-upnp-org:device:WANDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 840 0.052824000 24.159.181.60 [CENSORED] SSDP 360 HTTP/1.1 200 OK Frame 840: 360 bytes on wire (2880 bits), 360 bytes captured (2880 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.653924000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.653924000 seconds [Time delta from previous captured frame: 0.000037000 seconds] [Time delta from previous displayed frame: 0.000037000 seconds] [Time since reference or first frame: 0.052824000 seconds] Frame Number: 840 Frame Length: 360 bytes (2880 bits) Capture Length: 360 bytes (2880 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 24.159.181.60 (24.159.181.60), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 346 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 247 Protocol: UDP (17) Header checksum: 0x3911 [correct] [Good: True] [Bad: False] Source: 24.159.181.60 (24.159.181.60) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 326 Checksum: 0x4a42 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n USN: uuid:612ff80c-1dd2-11b2-a2d7-90793174b0fd::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 841 0.052853000 24.159.181.60 [CENSORED] SSDP 342 HTTP/1.1 200 OK Frame 841: 342 bytes on wire (2736 bits), 342 bytes captured (2736 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.653953000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.653953000 seconds [Time delta from previous captured frame: 0.000029000 seconds] [Time delta from previous displayed frame: 0.000029000 seconds] [Time since reference or first frame: 0.052853000 seconds] Frame Number: 841 Frame Length: 342 bytes (2736 bits) Capture Length: 342 bytes (2736 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 24.159.181.60 (24.159.181.60), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 328 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 247 Protocol: UDP (17) Header checksum: 0x3923 [correct] [Good: True] [Bad: False] Source: 24.159.181.60 (24.159.181.60) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 308 Checksum: 0xd7aa [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n USN: uuid:6130eb7c-1dd2-11b2-bb3b-fb593a60cf44::urn:schemas-upnp-org:service:WANIPConnection:1\r\n \r\n No. Time Source Destination Protocol Length Info 842 0.052888000 24.159.181.60 [CENSORED] SSDP 344 HTTP/1.1 200 OK Frame 842: 344 bytes on wire (2752 bits), 344 bytes captured (2752 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.653988000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.653988000 seconds [Time delta from previous captured frame: 0.000035000 seconds] [Time delta from previous displayed frame: 0.000035000 seconds] [Time since reference or first frame: 0.052888000 seconds] Frame Number: 842 Frame Length: 344 bytes (2752 bits) Capture Length: 344 bytes (2752 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 24.159.181.60 (24.159.181.60), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 330 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 247 Protocol: UDP (17) Header checksum: 0x3921 [correct] [Good: True] [Bad: False] Source: 24.159.181.60 (24.159.181.60) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 310 Checksum: 0x755a [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-upnp-org:service:WANPPPConnection:1\r\n USN: uuid:6130eb7c-1dd2-11b2-bb3b-fb593a60cf44::urn:schemas-upnp-org:service:WANPPPConnection:1\r\n \r\n No. Time Source Destination Protocol Length Info 843 0.052913000 119.184.125.254 [CENSORED] SSDP 284 HTTP/1.1 200 OK Frame 843: 284 bytes on wire (2272 bits), 284 bytes captured (2272 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.654013000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.654013000 seconds [Time delta from previous captured frame: 0.000025000 seconds] [Time delta from previous displayed frame: 0.000025000 seconds] [Time since reference or first frame: 0.052913000 seconds] Frame Number: 843 Frame Length: 284 bytes (2272 bits) Capture Length: 284 bytes (2272 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 119.184.125.254 (119.184.125.254), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 270 Identification: 0x6d6e (28014) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xe533 [correct] [Good: True] [Bad: False] Source: 119.184.125.254 (119.184.125.254) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 250 Checksum: 0x6cb8 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: upnp:rootdevice\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}08107887E5A7::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 844 0.052973000 119.233.146.186 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 844: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.654073000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.654073000 seconds [Time delta from previous captured frame: 0.000060000 seconds] [Time delta from previous displayed frame: 0.000060000 seconds] [Time since reference or first frame: 0.052973000 seconds] Frame Number: 844 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 119.233.146.186 (119.233.146.186), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0x8da4 (36260) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xafc8 [correct] [Good: True] [Bad: False] Source: 119.233.146.186 (119.233.146.186) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0x0c03 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 845 0.052995000 123.15.147.78 [CENSORED] SSDP 284 HTTP/1.1 200 OK Frame 845: 284 bytes on wire (2272 bits), 284 bytes captured (2272 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.654095000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.654095000 seconds [Time delta from previous captured frame: 0.000022000 seconds] [Time delta from previous displayed frame: 0.000022000 seconds] [Time since reference or first frame: 0.052995000 seconds] Frame Number: 845 Frame Length: 284 bytes (2272 bits) Capture Length: 284 bytes (2272 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 123.15.147.78 (123.15.147.78), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 270 Identification: 0x57b4 (22452) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xe246 [correct] [Good: True] [Bad: False] Source: 123.15.147.78 (123.15.147.78) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 250 Checksum: 0x7747 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: upnp:rootdevice\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 846 0.053039000 119.233.146.186 [CENSORED] SSDP 362 HTTP/1.1 200 OK Frame 846: 362 bytes on wire (2896 bits), 362 bytes captured (2896 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.654139000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.654139000 seconds [Time delta from previous captured frame: 0.000044000 seconds] [Time delta from previous displayed frame: 0.000044000 seconds] [Time since reference or first frame: 0.053039000 seconds] Frame Number: 846 Frame Length: 362 bytes (2896 bits) Capture Length: 362 bytes (2896 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 119.233.146.186 (119.233.146.186), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 348 Identification: 0x8dab (36267) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xafbb [correct] [Good: True] [Bad: False] Source: 119.233.146.186 (119.233.146.186) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 328 Checksum: 0x234c [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 847 0.053069000 124.130.60.167 [CENSORED] SSDP 330 HTTP/1.1 200 OK Frame 847: 330 bytes on wire (2640 bits), 330 bytes captured (2640 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.654169000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.654169000 seconds [Time delta from previous captured frame: 0.000030000 seconds] [Time delta from previous displayed frame: 0.000030000 seconds] [Time since reference or first frame: 0.053069000 seconds] Frame Number: 847 Frame Length: 330 bytes (2640 bits) Capture Length: 330 bytes (2640 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 124.130.60.167 (124.130.60.167), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 316 Identification: 0xd940 (55616) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xb5b0 [correct] [Good: True] [Bad: False] Source: 124.130.60.167 (124.130.60.167) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 296 Checksum: 0x6e5a [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 848 0.053106000 39.80.26.93 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 848: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.654206000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.654206000 seconds [Time delta from previous captured frame: 0.000037000 seconds] [Time delta from previous displayed frame: 0.000037000 seconds] [Time since reference or first frame: 0.053106000 seconds] Frame Number: 848 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 39.80.26.93 (39.80.26.93), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0xee63 (61027) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x1800 [correct] [Good: True] [Bad: False] Source: 39.80.26.93 (39.80.26.93) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0xd4f9 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 849 0.053133000 39.80.26.93 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 849: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.654233000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.654233000 seconds [Time delta from previous captured frame: 0.000027000 seconds] [Time delta from previous displayed frame: 0.000027000 seconds] [Time since reference or first frame: 0.053133000 seconds] Frame Number: 849 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 39.80.26.93 (39.80.26.93), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0xee66 (61030) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x182b [correct] [Good: True] [Bad: False] Source: 39.80.26.93 (39.80.26.93) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0xafd5 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 850 0.053165000 123.15.147.78 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 850: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.654265000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.654265000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.053165000 seconds] Frame Number: 850 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 123.15.147.78 (123.15.147.78), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0x57b6 (22454) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xe22a [correct] [Good: True] [Bad: False] Source: 123.15.147.78 (123.15.147.78) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0xe324 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 851 0.053196000 114.239.178.38 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 851: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.654296000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.654296000 seconds [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.053196000 seconds] Frame Number: 851 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 114.239.178.38 (114.239.178.38), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0x5712 (22290) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xcc16 [correct] [Good: True] [Bad: False] Source: 114.239.178.38 (114.239.178.38) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0xcc6c [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 852 0.053236000 119.233.146.186 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 852: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.654336000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.654336000 seconds [Time delta from previous captured frame: 0.000040000 seconds] [Time delta from previous displayed frame: 0.000040000 seconds] [Time since reference or first frame: 0.053236000 seconds] Frame Number: 852 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 119.233.146.186 (119.233.146.186), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0x8db8 (36280) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xafb4 [correct] [Good: True] [Bad: False] Source: 119.233.146.186 (119.233.146.186) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0x0cdd [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANIPConnection:1\r\n \r\n No. Time Source Destination Protocol Length Info 853 0.053760000 119.233.146.186 [CENSORED] SSDP 284 HTTP/1.1 200 OK Frame 853: 284 bytes on wire (2272 bits), 284 bytes captured (2272 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.654860000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.654860000 seconds [Time delta from previous captured frame: 0.000524000 seconds] [Time delta from previous displayed frame: 0.000524000 seconds] [Time since reference or first frame: 0.053760000 seconds] Frame Number: 853 Frame Length: 284 bytes (2272 bits) Capture Length: 284 bytes (2272 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 119.233.146.186 (119.233.146.186), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 270 Identification: 0x8dbb (36283) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xaff9 [correct] [Good: True] [Bad: False] Source: 119.233.146.186 (119.233.146.186) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 250 Checksum: 0x7b01 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: upnp:rootdevice\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 854 0.053805000 14.115.26.201 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 854: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.654905000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.654905000 seconds [Time delta from previous captured frame: 0.000045000 seconds] [Time delta from previous displayed frame: 0.000045000 seconds] [Time since reference or first frame: 0.053805000 seconds] Frame Number: 854 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 14.115.26.201 (14.115.26.201), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0x8707 (34567) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x97cd [correct] [Good: True] [Bad: False] Source: 14.115.26.201 (14.115.26.201) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0xed6a [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 855 0.053837000 211.199.112.66 [CENSORED] SSDP 352 HTTP/1.1 200 OK Frame 855: 352 bytes on wire (2816 bits), 352 bytes captured (2816 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.654937000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.654937000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.053837000 seconds] Frame Number: 855 Frame Length: 352 bytes (2816 bits) Capture Length: 352 bytes (2816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 211.199.112.66 (211.199.112.66), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x28 (DSCP 0x0a: Assured Forwarding 11; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 10.. = Differentiated Services Codepoint: Assured Forwarding 11 (0x0a) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 338 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 250 Protocol: UDP (17) Header checksum: 0xbfe2 [correct] [Good: True] [Bad: False] Source: 211.199.112.66 (211.199.112.66) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 318 Checksum: 0x530e [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:2048/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 856 0.053868000 24.205.39.121 [CENSORED] SSDP 360 HTTP/1.1 200 OK Frame 856: 360 bytes on wire (2880 bits), 360 bytes captured (2880 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.654968000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.654968000 seconds [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.053868000 seconds] Frame Number: 856 Frame Length: 360 bytes (2880 bits) Capture Length: 360 bytes (2880 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 24.205.39.121 (24.205.39.121), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 346 Identification: 0x4ed7 (20183) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 248 Protocol: UDP (17) Header checksum: 0x76ef [correct] [Good: True] [Bad: False] Source: 24.205.39.121 (24.205.39.121) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 326 Checksum: 0x7c50 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.10.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-wifialliance-org:service:WFAWLANConfig:\r\n USN: uuid:565aa949-67c1-4c0e-aa8f-f349e6f59311::urn:schemas-wifialliance-org:service:WFAWLANConfig:\r\n \r\n No. Time Source Destination Protocol Length Info 857 0.053899000 211.199.112.66 [CENSORED] SSDP 334 HTTP/1.1 200 OK Frame 857: 334 bytes on wire (2672 bits), 334 bytes captured (2672 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.654999000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.654999000 seconds [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.053899000 seconds] Frame Number: 857 Frame Length: 334 bytes (2672 bits) Capture Length: 334 bytes (2672 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 211.199.112.66 (211.199.112.66), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x28 (DSCP 0x0a: Assured Forwarding 11; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 10.. = Differentiated Services Codepoint: Assured Forwarding 11 (0x0a) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 320 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 250 Protocol: UDP (17) Header checksum: 0xbff4 [correct] [Good: True] [Bad: False] Source: 211.199.112.66 (211.199.112.66) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 300 Checksum: 0x7d5d [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:service:WANIPConnection:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:2048/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 858 0.053924000 24.205.39.121 [CENSORED] SSDP 288 HTTP/1.1 200 OK Frame 858: 288 bytes on wire (2304 bits), 288 bytes captured (2304 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.655024000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.655024000 seconds [Time delta from previous captured frame: 0.000025000 seconds] [Time delta from previous displayed frame: 0.000025000 seconds] [Time since reference or first frame: 0.053924000 seconds] Frame Number: 858 Frame Length: 288 bytes (2304 bits) Capture Length: 288 bytes (2304 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 24.205.39.121 (24.205.39.121), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 274 Identification: 0x4ed8 (20184) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 248 Protocol: UDP (17) Header checksum: 0x7736 [correct] [Good: True] [Bad: False] Source: 24.205.39.121 (24.205.39.121) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 254 Checksum: 0x8a10 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.10.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: upnp:rootdevice\r\n USN: uuid:11111111-1111-1111-1111-111111111111::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 859 0.053968000 24.205.39.121 [CENSORED] SSDP 358 HTTP/1.1 200 OK Frame 859: 358 bytes on wire (2864 bits), 358 bytes captured (2864 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.655068000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.655068000 seconds [Time delta from previous captured frame: 0.000044000 seconds] [Time delta from previous displayed frame: 0.000044000 seconds] [Time since reference or first frame: 0.053968000 seconds] Frame Number: 859 Frame Length: 358 bytes (2864 bits) Capture Length: 358 bytes (2864 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 24.205.39.121 (24.205.39.121), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 344 Identification: 0x4ed9 (20185) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 248 Protocol: UDP (17) Header checksum: 0x76ef [correct] [Good: True] [Bad: False] Source: 24.205.39.121 (24.205.39.121) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 324 Checksum: 0xb5dd [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.10.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n USN: uuid:11111111-1111-1111-1111-111111111111::urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 860 0.053996000 24.205.39.121 [CENSORED] SSDP 334 HTTP/1.1 200 OK Frame 860: 334 bytes on wire (2672 bits), 334 bytes captured (2672 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.655096000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.655096000 seconds [Time delta from previous captured frame: 0.000028000 seconds] [Time delta from previous displayed frame: 0.000028000 seconds] [Time since reference or first frame: 0.053996000 seconds] Frame Number: 860 Frame Length: 334 bytes (2672 bits) Capture Length: 334 bytes (2672 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 24.205.39.121 (24.205.39.121), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 320 Identification: 0x4eda (20186) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 248 Protocol: UDP (17) Header checksum: 0x7706 [correct] [Good: True] [Bad: False] Source: 24.205.39.121 (24.205.39.121) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 300 Checksum: 0xdf38 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.10.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:WANDevice:\r\n USN: uuid:22222222-2222-2222-2222-222222222222::urn:schemas-upnp-org:device:WANDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 861 0.054029000 211.199.112.66 [CENSORED] SSDP 336 HTTP/1.1 200 OK Frame 861: 336 bytes on wire (2688 bits), 336 bytes captured (2688 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.655129000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.655129000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.054029000 seconds] Frame Number: 861 Frame Length: 336 bytes (2688 bits) Capture Length: 336 bytes (2688 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 211.199.112.66 (211.199.112.66), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x28 (DSCP 0x0a: Assured Forwarding 11; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 10.. = Differentiated Services Codepoint: Assured Forwarding 11 (0x0a) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 322 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 250 Protocol: UDP (17) Header checksum: 0xbff2 [correct] [Good: True] [Bad: False] Source: 211.199.112.66 (211.199.112.66) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 302 Checksum: 0xa681 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANPPPConnection:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:service:WANPPPConnection:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:2048/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 862 0.054056000 71.95.72.146 [CENSORED] SSDP 287 HTTP/1.1 200 OK Frame 862: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.655156000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.655156000 seconds [Time delta from previous captured frame: 0.000027000 seconds] [Time delta from previous displayed frame: 0.000027000 seconds] [Time since reference or first frame: 0.054056000 seconds] Frame Number: 862 Frame Length: 287 bytes (2296 bits) Capture Length: 287 bytes (2296 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 71.95.72.146 (71.95.72.146), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 273 Identification: 0x046e (1134) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x6ef6 [correct] [Good: True] [Bad: False] Source: 71.95.72.146 (71.95.72.146) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 253 Checksum: 0x214b [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: upnp:rootdevice\r\n USN: uuid:4675d3a4-1dd2-11b2-b5f5-fb4e12a99800::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 863 0.054098000 71.95.72.146 [CENSORED] SSDP 357 HTTP/1.1 200 OK Frame 863: 357 bytes on wire (2856 bits), 357 bytes captured (2856 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.655198000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.655198000 seconds [Time delta from previous captured frame: 0.000042000 seconds] [Time delta from previous displayed frame: 0.000042000 seconds] [Time since reference or first frame: 0.054098000 seconds] Frame Number: 863 Frame Length: 357 bytes (2856 bits) Capture Length: 357 bytes (2856 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 71.95.72.146 (71.95.72.146), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 343 Identification: 0x046f (1135) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x6eaf [correct] [Good: True] [Bad: False] Source: 71.95.72.146 (71.95.72.146) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 323 Checksum: 0xa5bf [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n USN: uuid:4675d3a4-1dd2-11b2-b5f5-fb4e12a99800::urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 864 0.054127000 71.95.72.146 [CENSORED] SSDP 333 HTTP/1.1 200 OK Frame 864: 333 bytes on wire (2664 bits), 333 bytes captured (2664 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.655227000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.655227000 seconds [Time delta from previous captured frame: 0.000029000 seconds] [Time delta from previous displayed frame: 0.000029000 seconds] [Time since reference or first frame: 0.054127000 seconds] Frame Number: 864 Frame Length: 333 bytes (2664 bits) Capture Length: 333 bytes (2664 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 71.95.72.146 (71.95.72.146), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 319 Identification: 0x0470 (1136) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x6ec6 [correct] [Good: True] [Bad: False] Source: 71.95.72.146 (71.95.72.146) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 299 Checksum: 0x3016 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:WANDevice:\r\n USN: uuid:46796d98-1dd2-11b2-9e43-91f8c7079be4::urn:schemas-upnp-org:device:WANDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 865 0.054165000 71.95.72.146 [CENSORED] SSDP 365 HTTP/1.1 200 OK Frame 865: 365 bytes on wire (2920 bits), 365 bytes captured (2920 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.655265000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.655265000 seconds [Time delta from previous captured frame: 0.000038000 seconds] [Time delta from previous displayed frame: 0.000038000 seconds] [Time since reference or first frame: 0.054165000 seconds] Frame Number: 865 Frame Length: 365 bytes (2920 bits) Capture Length: 365 bytes (2920 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 71.95.72.146 (71.95.72.146), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 351 Identification: 0x0471 (1137) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x6ea5 [correct] [Good: True] [Bad: False] Source: 71.95.72.146 (71.95.72.146) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 331 Checksum: 0x23d3 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:\r\n USN: uuid:46796d98-1dd2-11b2-9e43-91f8c7079be4::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:\r\n \r\n No. Time Source Destination Protocol Length Info 866 0.054195000 71.95.72.146 [CENSORED] SSDP 353 HTTP/1.1 200 OK Frame 866: 353 bytes on wire (2824 bits), 353 bytes captured (2824 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.655295000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.655295000 seconds [Time delta from previous captured frame: 0.000030000 seconds] [Time delta from previous displayed frame: 0.000030000 seconds] [Time since reference or first frame: 0.054195000 seconds] Frame Number: 866 Frame Length: 353 bytes (2824 bits) Capture Length: 353 bytes (2824 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 71.95.72.146 (71.95.72.146), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 339 Identification: 0x0472 (1138) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x6eb0 [correct] [Good: True] [Bad: False] Source: 71.95.72.146 (71.95.72.146) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 319 Checksum: 0xb729 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:\r\n USN: uuid:467d1894-1dd2-11b2-b0a9-b436fe3f2961::urn:schemas-upnp-org:device:WANConnectionDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 867 0.054225000 27.203.122.146 [CENSORED] SSDP 348 HTTP/1.1 200 OK Frame 867: 348 bytes on wire (2784 bits), 348 bytes captured (2784 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.655325000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.655325000 seconds [Time delta from previous captured frame: 0.000030000 seconds] [Time delta from previous displayed frame: 0.000030000 seconds] [Time since reference or first frame: 0.054225000 seconds] Frame Number: 867 Frame Length: 348 bytes (2784 bits) Capture Length: 348 bytes (2784 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 27.203.122.146 (27.203.122.146), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 334 Identification: 0x8db7 (36279) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x2404 [correct] [Good: True] [Bad: False] Source: 27.203.122.146 (27.203.122.146) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 314 Checksum: 0x2902 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n \r\n No. Time Source Destination Protocol Length Info 868 0.054261000 179.209.58.45 [CENSORED] SSDP 359 HTTP/1.1 200 OK Frame 868: 359 bytes on wire (2872 bits), 359 bytes captured (2872 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.655361000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.655361000 seconds [Time delta from previous captured frame: 0.000036000 seconds] [Time delta from previous displayed frame: 0.000036000 seconds] [Time since reference or first frame: 0.054261000 seconds] Frame Number: 868 Frame Length: 359 bytes (2872 bits) Capture Length: 359 bytes (2872 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 179.209.58.45 (179.209.58.45), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 345 Identification: 0x89e8 (35304) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 55 Protocol: UDP (17) Header checksum: 0x8f27 [correct] [Good: True] [Bad: False] Source: 179.209.58.45 (179.209.58.45) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 325 Checksum: 0x43aa [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-wifialliance-org:service:WFAWLANConfig:\r\n USN: uuid:28214aa4-1dd2-11b2-9526-eb5a640d7e51::urn:schemas-wifialliance-org:service:WFAWLANConfig:\r\n \r\n No. Time Source Destination Protocol Length Info 869 0.054291000 71.95.72.146 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 869: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.655391000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.655391000 seconds [Time delta from previous captured frame: 0.000030000 seconds] [Time delta from previous displayed frame: 0.000030000 seconds] [Time since reference or first frame: 0.054291000 seconds] Frame Number: 869 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 71.95.72.146 (71.95.72.146), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0x0473 (1139) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x6eb3 [correct] [Good: True] [Bad: False] Source: 71.95.72.146 (71.95.72.146) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0x1296 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANPPPConnection:\r\n USN: uuid:467d1894-1dd2-11b2-b0a9-b436fe3f2961::urn:schemas-upnp-org:service:WANPPPConnection:\r\n \r\n No. Time Source Destination Protocol Length Info 870 0.054316000 179.209.58.45 [CENSORED] SSDP 287 HTTP/1.1 200 OK Frame 870: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.655416000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.655416000 seconds [Time delta from previous captured frame: 0.000025000 seconds] [Time delta from previous displayed frame: 0.000025000 seconds] [Time since reference or first frame: 0.054316000 seconds] Frame Number: 870 Frame Length: 287 bytes (2296 bits) Capture Length: 287 bytes (2296 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 179.209.58.45 (179.209.58.45), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 273 Identification: 0x89e9 (35305) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 55 Protocol: UDP (17) Header checksum: 0x8f6e [correct] [Good: True] [Bad: False] Source: 179.209.58.45 (179.209.58.45) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 253 Checksum: 0x34db [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: upnp:rootdevice\r\n USN: uuid:2810cce2-1dd2-11b2-be30-c88fdfbfec77::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 871 0.054351000 14.115.26.201 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 871: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.655451000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.655451000 seconds [Time delta from previous captured frame: 0.000035000 seconds] [Time delta from previous displayed frame: 0.000035000 seconds] [Time since reference or first frame: 0.054351000 seconds] Frame Number: 871 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 14.115.26.201 (14.115.26.201), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0x870a (34570) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x97f8 [correct] [Good: True] [Bad: False] Source: 14.115.26.201 (14.115.26.201) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0xc846 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 872 0.054387000 211.199.112.66 [CENSORED] SSDP 336 HTTP/1.1 200 OK Frame 872: 336 bytes on wire (2688 bits), 336 bytes captured (2688 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.655487000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.655487000 seconds [Time delta from previous captured frame: 0.000036000 seconds] [Time delta from previous displayed frame: 0.000036000 seconds] [Time since reference or first frame: 0.054387000 seconds] Frame Number: 872 Frame Length: 336 bytes (2688 bits) Capture Length: 336 bytes (2688 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 211.199.112.66 (211.199.112.66), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x28 (DSCP 0x0a: Assured Forwarding 11; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 10.. = Differentiated Services Codepoint: Assured Forwarding 11 (0x0a) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 322 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 250 Protocol: UDP (17) Header checksum: 0xbff2 [correct] [Good: True] [Bad: False] Source: 211.199.112.66 (211.199.112.66) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 302 Checksum: 0x4924 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:2048/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 873 0.054419000 14.115.26.201 [CENSORED] SSDP 332 HTTP/1.1 200 OK Frame 873: 332 bytes on wire (2656 bits), 332 bytes captured (2656 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.655519000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.655519000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.054419000 seconds] Frame Number: 873 Frame Length: 332 bytes (2656 bits) Capture Length: 332 bytes (2656 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 14.115.26.201 (14.115.26.201), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 318 Identification: 0x870b (34571) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x97e1 [correct] [Good: True] [Bad: False] Source: 14.115.26.201 (14.115.26.201) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 298 Checksum: 0x0469 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000::urn:schemas-upnp-org:device:WANDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 874 0.054451000 175.165.25.72 [CENSORED] SSDP 330 HTTP/1.1 200 OK Frame 874: 330 bytes on wire (2640 bits), 330 bytes captured (2640 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.655551000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.655551000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.054451000 seconds] Frame Number: 874 Frame Length: 330 bytes (2640 bits) Capture Length: 330 bytes (2640 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 175.165.25.72 (175.165.25.72), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 316 Identification: 0x6ab5 (27317) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x1488 [correct] [Good: True] [Bad: False] Source: 175.165.25.72 (175.165.25.72) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 296 Checksum: 0x5e96 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 875 0.054486000 218.150.107.38 [CENSORED] SSDP 341 HTTP/1.1 200 OK Frame 875: 341 bytes on wire (2728 bits), 341 bytes captured (2728 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.655586000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.655586000 seconds [Time delta from previous captured frame: 0.000035000 seconds] [Time delta from previous displayed frame: 0.000035000 seconds] [Time since reference or first frame: 0.054486000 seconds] Frame Number: 875 Frame Length: 341 bytes (2728 bits) Capture Length: 341 bytes (2728 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 218.150.107.38 (218.150.107.38), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x28 (DSCP 0x0a: Assured Forwarding 11; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 10.. = Differentiated Services Codepoint: Assured Forwarding 11 (0x0a) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 327 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 250 Protocol: UDP (17) Header checksum: 0xbe3a [correct] [Good: True] [Bad: False] Source: 218.150.107.38 (218.150.107.38) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 307 Checksum: 0x748f [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n USN: uuid:959907c1-35a1-4483-9561-994a4b287f8d::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n EXT:\r\n SERVER: AxlerV1 UPnP/1.0 MiniUPnPd/1.4\r\n LOCATION: http://192.168.0.1:5555/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 876 0.054517000 218.150.107.38 [CENSORED] SSDP 337 HTTP/1.1 200 OK Frame 876: 337 bytes on wire (2696 bits), 337 bytes captured (2696 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.655617000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.655617000 seconds [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.054517000 seconds] Frame Number: 876 Frame Length: 337 bytes (2696 bits) Capture Length: 337 bytes (2696 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 218.150.107.38 (218.150.107.38), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x28 (DSCP 0x0a: Assured Forwarding 11; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 10.. = Differentiated Services Codepoint: Assured Forwarding 11 (0x0a) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 323 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 250 Protocol: UDP (17) Header checksum: 0xbe3e [correct] [Good: True] [Bad: False] Source: 218.150.107.38 (218.150.107.38) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 303 Checksum: 0x9abd [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n USN: uuid:959907c1-35a1-4483-9561-994a4b287f8d::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n EXT:\r\n SERVER: AxlerV1 UPnP/1.0 MiniUPnPd/1.4\r\n LOCATION: http://192.168.0.1:5555/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 877 0.054554000 184.167.193.168 [CENSORED] SSDP 359 HTTP/1.1 200 OK Frame 877: 359 bytes on wire (2872 bits), 359 bytes captured (2872 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.655654000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.655654000 seconds [Time delta from previous captured frame: 0.000037000 seconds] [Time delta from previous displayed frame: 0.000037000 seconds] [Time since reference or first frame: 0.054554000 seconds] Frame Number: 877 Frame Length: 359 bytes (2872 bits) Capture Length: 359 bytes (2872 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 184.167.193.168 (184.167.193.168), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 345 Identification: 0x75ef (30191) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0x18ce [correct] [Good: True] [Bad: False] Source: 184.167.193.168 (184.167.193.168) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 325 Checksum: 0x9775 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-wifialliance-org:service:WFAWLANConfig:\r\n USN: uuid:ccb1fca2-1dd1-11b2-9f8e-d6d547941f4f::urn:schemas-wifialliance-org:service:WFAWLANConfig:\r\n \r\n No. Time Source Destination Protocol Length Info 878 0.054566000 110.203.65.50 [CENSORED] ICMP 160 Destination unreachable (Port unreachable) Frame 878: 160 bytes on wire (1280 bits), 160 bytes captured (1280 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.655666000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.655666000 seconds [Time delta from previous captured frame: 0.000012000 seconds] [Time delta from previous displayed frame: 0.000012000 seconds] [Time since reference or first frame: 0.054566000 seconds] Frame Number: 878 Frame Length: 160 bytes (1280 bits) Capture Length: 160 bytes (1280 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:icmp:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 110.203.65.50 (110.203.65.50), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0xc0 (DSCP 0x30: Class Selector 6; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 1100 00.. = Differentiated Services Codepoint: Class Selector 6 (0x30) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 146 Identification: 0xc2c7 (49863) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 250 Protocol: ICMP (1) Header checksum: 0xd15f [correct] [Good: True] [Bad: False] Source: 110.203.65.50 (110.203.65.50) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] Internet Control Message Protocol Type: 3 (Destination unreachable) Code: 3 (Port unreachable) Checksum: 0xad4d [correct] Internet Protocol Version 4, Src: [CENSORED] ([CENSORED]), Dst: 110.203.65.50 (110.203.65.50) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 118 Identification: 0xf75f (63327) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: UDP (17) Header checksum: 0xa793 [correct] [Good: True] [Bad: False] Source: [CENSORED] ([CENSORED]) Destination: 110.203.65.50 (110.203.65.50) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: http (80), Dst Port: ssdp (1900) Source port: http (80) Destination port: ssdp (1900) Length: 98 Checksum: 0x8737 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol M-SEARCH * HTTP/1.1\r\n [Expert Info (Chat/Sequence): M-SEARCH * HTTP/1.1\r\n] [Message: M-SEARCH * HTTP/1.1\r\n] [Severity level: Chat] [Group: Sequence] Request Method: M-SEARCH Request URI: * Request Version: HTTP/1.1 Host:239.255.255.250:1900\r\n ST:ssdp:all\r\n Man:"ssdp:discover"\r\n MX:3\r\n \r\n [Full request URI: http://239.255.255.250:1900*] No. Time Source Destination Protocol Length Info 879 0.054611000 73.44.182.148 [CENSORED] SSDP 320 HTTP/1.1 200 OK Frame 879: 320 bytes on wire (2560 bits), 320 bytes captured (2560 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.655711000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.655711000 seconds [Time delta from previous captured frame: 0.000045000 seconds] [Time delta from previous displayed frame: 0.000045000 seconds] [Time since reference or first frame: 0.054611000 seconds] Frame Number: 879 Frame Length: 320 bytes (2560 bits) Capture Length: 320 bytes (2560 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 73.44.182.148 (73.44.182.148), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 306 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x0374 [correct] [Good: True] [Bad: False] Source: 73.44.182.148 (73.44.182.148) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 286 Checksum: 0x9b6d [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:WANDevice:1\r\n USN: uuid:18de43f8-677c-4d3a-8920-88DC961DFA14::urn:schemas-upnp-org:device:WANDevice:1\r\n EXT:\r\n SERVER: Fedora/10 UPnP/1.0 MiniUPnPd/1.4\r\n LOCATION: http://192.168.1.1:63196/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 880 0.054649000 67.8.85.141 [CENSORED] SSDP 354 HTTP/1.1 200 OK Frame 880: 354 bytes on wire (2832 bits), 354 bytes captured (2832 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.655749000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.655749000 seconds [Time delta from previous captured frame: 0.000038000 seconds] [Time delta from previous displayed frame: 0.000038000 seconds] [Time since reference or first frame: 0.054649000 seconds] Frame Number: 880 Frame Length: 354 bytes (2832 bits) Capture Length: 354 bytes (2832 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 67.8.85.141 (67.8.85.141), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 340 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 247 Protocol: UDP (17) Header checksum: 0x6e7d [correct] [Good: True] [Bad: False] Source: 67.8.85.141 (67.8.85.141) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 320 Checksum: 0x7f4e [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-wifialliance-org:service:WFAWLANConfig:1\r\n USN: uuid:613c1948-1dd2-11b2-8233-a343a81fe81f::urn:schemas-wifialliance-org:service:WFAWLANConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 881 0.054681000 110.47.177.193 [CENSORED] SSDP 340 HTTP/1.1 200 OK Frame 881: 340 bytes on wire (2720 bits), 340 bytes captured (2720 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.655781000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.655781000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.054681000 seconds] Frame Number: 881 Frame Length: 340 bytes (2720 bits) Capture Length: 340 bytes (2720 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 110.47.177.193 (110.47.177.193), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 326 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0xe92f [correct] [Good: True] [Bad: False] Source: 110.47.177.193 (110.47.177.193) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 306 Checksum: 0xe5b1 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:4376/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 882 0.054709000 110.47.177.193 [CENSORED] SSDP 320 HTTP/1.1 200 OK Frame 882: 320 bytes on wire (2560 bits), 320 bytes captured (2560 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.655809000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.655809000 seconds [Time delta from previous captured frame: 0.000028000 seconds] [Time delta from previous displayed frame: 0.000028000 seconds] [Time since reference or first frame: 0.054709000 seconds] Frame Number: 882 Frame Length: 320 bytes (2560 bits) Capture Length: 320 bytes (2560 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 110.47.177.193 (110.47.177.193), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 306 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0xe943 [correct] [Good: True] [Bad: False] Source: 110.47.177.193 (110.47.177.193) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 286 Checksum: 0xf9ed [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:WANDevice:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:device:WANDevice:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:4376/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 883 0.054749000 110.47.177.193 [CENSORED] SSDP 352 HTTP/1.1 200 OK Frame 883: 352 bytes on wire (2816 bits), 352 bytes captured (2816 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.655849000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.655849000 seconds [Time delta from previous captured frame: 0.000040000 seconds] [Time delta from previous displayed frame: 0.000040000 seconds] [Time since reference or first frame: 0.054749000 seconds] Frame Number: 883 Frame Length: 352 bytes (2816 bits) Capture Length: 352 bytes (2816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 110.47.177.193 (110.47.177.193), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 338 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0xe923 [correct] [Good: True] [Bad: False] Source: 110.47.177.193 (110.47.177.193) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 318 Checksum: 0x7226 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:4376/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 884 0.054780000 174.134.85.33 [CENSORED] SSDP 357 HTTP/1.1 200 OK Frame 884: 357 bytes on wire (2856 bits), 357 bytes captured (2856 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.655880000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.655880000 seconds [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.054780000 seconds] Frame Number: 884 Frame Length: 357 bytes (2856 bits) Capture Length: 357 bytes (2856 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 174.134.85.33 (174.134.85.33), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 343 Identification: 0xd0dd (53469) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 248 Protocol: UDP (17) Header checksum: 0x318a [correct] [Good: True] [Bad: False] Source: 174.134.85.33 (174.134.85.33) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 323 Checksum: 0x0279 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n USN: uuid:2a78a7c8-1dd2-11b2-9e20-f3eab5ba5c9c::urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 885 0.054809000 110.47.177.193 [CENSORED] SSDP 334 HTTP/1.1 200 OK Frame 885: 334 bytes on wire (2672 bits), 334 bytes captured (2672 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.655909000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.655909000 seconds [Time delta from previous captured frame: 0.000029000 seconds] [Time delta from previous displayed frame: 0.000029000 seconds] [Time since reference or first frame: 0.054809000 seconds] Frame Number: 885 Frame Length: 334 bytes (2672 bits) Capture Length: 334 bytes (2672 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 110.47.177.193 (110.47.177.193), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 320 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0xe935 [correct] [Good: True] [Bad: False] Source: 110.47.177.193 (110.47.177.193) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 300 Checksum: 0x9c75 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:service:WANIPConnection:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:4376/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 886 0.054854000 211.199.112.66 [CENSORED] SSDP 272 HTTP/1.1 200 OK Frame 886: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.655954000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.655954000 seconds [Time delta from previous captured frame: 0.000045000 seconds] [Time delta from previous displayed frame: 0.000045000 seconds] [Time since reference or first frame: 0.054854000 seconds] Frame Number: 886 Frame Length: 272 bytes (2176 bits) Capture Length: 272 bytes (2176 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 211.199.112.66 (211.199.112.66), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x28 (DSCP 0x0a: Assured Forwarding 11; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 10.. = Differentiated Services Codepoint: Assured Forwarding 11 (0x0a) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 258 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 250 Protocol: UDP (17) Header checksum: 0xc032 [correct] [Good: True] [Bad: False] Source: 211.199.112.66 (211.199.112.66) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 238 Checksum: 0x0f6a [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: upnp:rootdevice\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::upnp:rootdevice\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:2048/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 887 0.054901000 211.199.112.66 [CENSORED] SSDP 344 HTTP/1.1 200 OK Frame 887: 344 bytes on wire (2752 bits), 344 bytes captured (2752 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.656001000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.656001000 seconds [Time delta from previous captured frame: 0.000047000 seconds] [Time delta from previous displayed frame: 0.000047000 seconds] [Time since reference or first frame: 0.054901000 seconds] Frame Number: 887 Frame Length: 344 bytes (2752 bits) Capture Length: 344 bytes (2752 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 211.199.112.66 (211.199.112.66), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x28 (DSCP 0x0a: Assured Forwarding 11; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 10.. = Differentiated Services Codepoint: Assured Forwarding 11 (0x0a) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 330 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 250 Protocol: UDP (17) Header checksum: 0xbfea [correct] [Good: True] [Bad: False] Source: 211.199.112.66 (211.199.112.66) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 310 Checksum: 0xa06b [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:2048/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 888 0.054936000 182.204.244.205 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 888: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.656036000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.656036000 seconds [Time delta from previous captured frame: 0.000035000 seconds] [Time delta from previous displayed frame: 0.000035000 seconds] [Time since reference or first frame: 0.054936000 seconds] Frame Number: 888 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 182.204.244.205 (182.204.244.205), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0xc0fb (49403) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0xdc6a [correct] [Good: True] [Bad: False] Source: 182.204.244.205 (182.204.244.205) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0x6b0c [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 889 0.054960000 182.204.244.205 [CENSORED] SSDP 284 HTTP/1.1 200 OK Frame 889: 284 bytes on wire (2272 bits), 284 bytes captured (2272 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.656060000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.656060000 seconds [Time delta from previous captured frame: 0.000024000 seconds] [Time delta from previous displayed frame: 0.000024000 seconds] [Time since reference or first frame: 0.054960000 seconds] Frame Number: 889 Frame Length: 284 bytes (2272 bits) Capture Length: 284 bytes (2272 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 182.204.244.205 (182.204.244.205), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 270 Identification: 0xc0fc (49404) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0xdcb1 [correct] [Good: True] [Bad: False] Source: 182.204.244.205 (182.204.244.205) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 250 Checksum: 0xda0a [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: upnp:rootdevice\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 890 0.054998000 182.204.244.205 [CENSORED] SSDP 348 HTTP/1.1 200 OK Frame 890: 348 bytes on wire (2784 bits), 348 bytes captured (2784 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.656098000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.656098000 seconds [Time delta from previous captured frame: 0.000038000 seconds] [Time delta from previous displayed frame: 0.000038000 seconds] [Time since reference or first frame: 0.054998000 seconds] Frame Number: 890 Frame Length: 348 bytes (2784 bits) Capture Length: 348 bytes (2784 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 182.204.244.205 (182.204.244.205), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 334 Identification: 0xc0fd (49405) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0xdc80 [correct] [Good: True] [Bad: False] Source: 182.204.244.205 (182.204.244.205) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 314 Checksum: 0x13c5 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n \r\n No. Time Source Destination Protocol Length Info 891 0.055027000 182.204.244.205 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 891: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.656127000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.656127000 seconds [Time delta from previous captured frame: 0.000029000 seconds] [Time delta from previous displayed frame: 0.000029000 seconds] [Time since reference or first frame: 0.055027000 seconds] Frame Number: 891 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 182.204.244.205 (182.204.244.205), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0xc0fe (49406) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0xdc95 [correct] [Good: True] [Bad: False] Source: 182.204.244.205 (182.204.244.205) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0x45e8 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 892 0.058952000 24.159.181.60 [CENSORED] SSDP 354 HTTP/1.1 200 OK Frame 892: 354 bytes on wire (2832 bits), 354 bytes captured (2832 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.660052000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.660052000 seconds [Time delta from previous captured frame: 0.003925000 seconds] [Time delta from previous displayed frame: 0.003925000 seconds] [Time since reference or first frame: 0.058952000 seconds] Frame Number: 892 Frame Length: 354 bytes (2832 bits) Capture Length: 354 bytes (2832 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 24.159.181.60 (24.159.181.60), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 340 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 247 Protocol: UDP (17) Header checksum: 0x3917 [correct] [Good: True] [Bad: False] Source: 24.159.181.60 (24.159.181.60) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 320 Checksum: 0x31e9 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-wifialliance-org:service:WFAWLANConfig:1\r\n USN: uuid:613b088c-1dd2-11b2-9374-8cb0a69b83d5::urn:schemas-wifialliance-org:service:WFAWLANConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 893 0.058973000 24.159.181.60 [CENSORED] SSDP 289 HTTP/1.1 200 OK Frame 893: 289 bytes on wire (2312 bits), 289 bytes captured (2312 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.660073000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.660073000 seconds [Time delta from previous captured frame: 0.000021000 seconds] [Time delta from previous displayed frame: 0.000021000 seconds] [Time since reference or first frame: 0.058973000 seconds] Frame Number: 893 Frame Length: 289 bytes (2312 bits) Capture Length: 289 bytes (2312 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 24.159.181.60 (24.159.181.60), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 275 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 247 Protocol: UDP (17) Header checksum: 0x3958 [correct] [Good: True] [Bad: False] Source: 24.159.181.60 (24.159.181.60) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 255 Checksum: 0x35b0 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: uuid:612efcea-1dd2-11b2-8c5b-d67ffee487ae\r\n USN: uuid:612efcea-1dd2-11b2-8c5b-d67ffee487ae\r\n \r\n No. Time Source Destination Protocol Length Info 894 0.059003000 24.159.181.60 [CENSORED] SSDP 289 HTTP/1.1 200 OK Frame 894: 289 bytes on wire (2312 bits), 289 bytes captured (2312 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.660103000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.660103000 seconds [Time delta from previous captured frame: 0.000030000 seconds] [Time delta from previous displayed frame: 0.000030000 seconds] [Time since reference or first frame: 0.059003000 seconds] Frame Number: 894 Frame Length: 289 bytes (2312 bits) Capture Length: 289 bytes (2312 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 24.159.181.60 (24.159.181.60), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 275 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 247 Protocol: UDP (17) Header checksum: 0x3958 [correct] [Good: True] [Bad: False] Source: 24.159.181.60 (24.159.181.60) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 255 Checksum: 0xb58c [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: uuid:612ff80c-1dd2-11b2-a2d7-90793174b0fd\r\n USN: uuid:612ff80c-1dd2-11b2-a2d7-90793174b0fd\r\n \r\n No. Time Source Destination Protocol Length Info 895 0.059035000 73.45.79.116 [CENSORED] SSDP 287 HTTP/1.1 200 OK Frame 895: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.660135000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.660135000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.059035000 seconds] Frame Number: 895 Frame Length: 287 bytes (2296 bits) Capture Length: 287 bytes (2296 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 73.45.79.116 (73.45.79.116), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 273 Identification: 0x96eb (38635) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0xd3c8 [correct] [Good: True] [Bad: False] Source: 73.45.79.116 (73.45.79.116) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 253 Checksum: 0x8640 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: upnp:rootdevice\r\n USN: uuid:b1d505dc-1dd1-11b2-b743-bbf86c7ddfe3::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 896 0.059071000 24.159.181.60 [CENSORED] SSDP 289 HTTP/1.1 200 OK Frame 896: 289 bytes on wire (2312 bits), 289 bytes captured (2312 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.660171000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.660171000 seconds [Time delta from previous captured frame: 0.000036000 seconds] [Time delta from previous displayed frame: 0.000036000 seconds] [Time since reference or first frame: 0.059071000 seconds] Frame Number: 896 Frame Length: 289 bytes (2312 bits) Capture Length: 289 bytes (2312 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 24.159.181.60 (24.159.181.60), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 275 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 247 Protocol: UDP (17) Header checksum: 0x3958 [correct] [Good: True] [Bad: False] Source: 24.159.181.60 (24.159.181.60) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 255 Checksum: 0x64d6 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: uuid:6130eb7c-1dd2-11b2-bb3b-fb593a60cf44\r\n USN: uuid:6130eb7c-1dd2-11b2-bb3b-fb593a60cf44\r\n \r\n No. Time Source Destination Protocol Length Info 897 0.059114000 119.182.123.216 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 897: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.660214000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.660214000 seconds [Time delta from previous captured frame: 0.000043000 seconds] [Time delta from previous displayed frame: 0.000043000 seconds] [Time since reference or first frame: 0.059114000 seconds] Frame Number: 897 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 119.182.123.216 (119.182.123.216), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0xe53f (58687) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x6f42 [correct] [Good: True] [Bad: False] Source: 119.182.123.216 (119.182.123.216) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0x23f2 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANIPConnection:1\r\n \r\n No. Time Source Destination Protocol Length Info 898 0.059147000 123.128.152.18 [CENSORED] SSDP 348 HTTP/1.1 200 OK Frame 898: 348 bytes on wire (2784 bits), 348 bytes captured (2784 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.660247000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.660247000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.059147000 seconds] Frame Number: 898 Frame Length: 348 bytes (2784 bits) Capture Length: 348 bytes (2784 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 123.128.152.18 (123.128.152.18), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 334 Identification: 0x9314 (37652) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xa171 [correct] [Good: True] [Bad: False] Source: 123.128.152.18 (123.128.152.18) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 314 Checksum: 0xabcc [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n \r\n No. Time Source Destination Protocol Length Info 899 0.059177000 60.212.72.52 [CENSORED] SSDP 340 HTTP/1.1 200 OK Frame 899: 340 bytes on wire (2720 bits), 340 bytes captured (2720 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.660277000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.660277000 seconds [Time delta from previous captured frame: 0.000030000 seconds] [Time delta from previous displayed frame: 0.000030000 seconds] [Time since reference or first frame: 0.059177000 seconds] Frame Number: 899 Frame Length: 340 bytes (2720 bits) Capture Length: 340 bytes (2720 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 60.212.72.52 (60.212.72.52), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 326 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x8318 [correct] [Good: True] [Bad: False] Source: 60.212.72.52 (60.212.72.52) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 306 Checksum: 0x7e94 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:4996/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 900 0.059210000 123.15.147.78 [CENSORED] SSDP 330 HTTP/1.1 200 OK Frame 900: 330 bytes on wire (2640 bits), 330 bytes captured (2640 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.660310000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.660310000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.059210000 seconds] Frame Number: 900 Frame Length: 330 bytes (2640 bits) Capture Length: 330 bytes (2640 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 123.15.147.78 (123.15.147.78), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 316 Identification: 0x57c4 (22468) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xe208 [correct] [Good: True] [Bad: False] Source: 123.15.147.78 (123.15.147.78) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 296 Checksum: 0x1926 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 901 0.059233000 218.150.107.38 [CENSORED] SSDP 269 HTTP/1.1 200 OK Frame 901: 269 bytes on wire (2152 bits), 269 bytes captured (2152 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.660333000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.660333000 seconds [Time delta from previous captured frame: 0.000023000 seconds] [Time delta from previous displayed frame: 0.000023000 seconds] [Time since reference or first frame: 0.059233000 seconds] Frame Number: 901 Frame Length: 269 bytes (2152 bits) Capture Length: 269 bytes (2152 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 218.150.107.38 (218.150.107.38), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x28 (DSCP 0x0a: Assured Forwarding 11; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 10.. = Differentiated Services Codepoint: Assured Forwarding 11 (0x0a) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 255 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 250 Protocol: UDP (17) Header checksum: 0xbe82 [correct] [Good: True] [Bad: False] Source: 218.150.107.38 (218.150.107.38) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 235 Checksum: 0xe38d [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: upnp:rootdevice\r\n USN: uuid:959907c1-35a1-4483-9561-994a4b287f8d::upnp:rootdevice\r\n EXT:\r\n SERVER: AxlerV1 UPnP/1.0 MiniUPnPd/1.4\r\n LOCATION: http://192.168.0.1:5555/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 902 0.059277000 218.150.107.38 [CENSORED] SSDP 341 HTTP/1.1 200 OK Frame 902: 341 bytes on wire (2728 bits), 341 bytes captured (2728 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.660377000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.660377000 seconds [Time delta from previous captured frame: 0.000044000 seconds] [Time delta from previous displayed frame: 0.000044000 seconds] [Time since reference or first frame: 0.059277000 seconds] Frame Number: 902 Frame Length: 341 bytes (2728 bits) Capture Length: 341 bytes (2728 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 218.150.107.38 (218.150.107.38), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x28 (DSCP 0x0a: Assured Forwarding 11; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 10.. = Differentiated Services Codepoint: Assured Forwarding 11 (0x0a) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 327 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 250 Protocol: UDP (17) Header checksum: 0xbe3a [correct] [Good: True] [Bad: False] Source: 218.150.107.38 (218.150.107.38) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 307 Checksum: 0x748f [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n USN: uuid:959907c1-35a1-4483-9561-994a4b287f8d::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n EXT:\r\n SERVER: AxlerV1 UPnP/1.0 MiniUPnPd/1.4\r\n LOCATION: http://192.168.0.1:5555/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 903 0.059307000 218.150.107.38 [CENSORED] SSDP 337 HTTP/1.1 200 OK Frame 903: 337 bytes on wire (2696 bits), 337 bytes captured (2696 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.660407000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.660407000 seconds [Time delta from previous captured frame: 0.000030000 seconds] [Time delta from previous displayed frame: 0.000030000 seconds] [Time since reference or first frame: 0.059307000 seconds] Frame Number: 903 Frame Length: 337 bytes (2696 bits) Capture Length: 337 bytes (2696 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 218.150.107.38 (218.150.107.38), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x28 (DSCP 0x0a: Assured Forwarding 11; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 10.. = Differentiated Services Codepoint: Assured Forwarding 11 (0x0a) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 323 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 250 Protocol: UDP (17) Header checksum: 0xbe3e [correct] [Good: True] [Bad: False] Source: 218.150.107.38 (218.150.107.38) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 303 Checksum: 0x9abd [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n USN: uuid:959907c1-35a1-4483-9561-994a4b287f8d::urn:schemas-upnp-org:device:WANConnectionDevice:1\r\n EXT:\r\n SERVER: AxlerV1 UPnP/1.0 MiniUPnPd/1.4\r\n LOCATION: http://192.168.0.1:5555/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 904 0.059345000 119.182.123.216 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 904: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.660445000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.660445000 seconds [Time delta from previous captured frame: 0.000038000 seconds] [Time delta from previous displayed frame: 0.000038000 seconds] [Time since reference or first frame: 0.059345000 seconds] Frame Number: 904 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 119.182.123.216 (119.182.123.216), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0xe541 (58689) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x6f30 [correct] [Good: True] [Bad: False] Source: 119.182.123.216 (119.182.123.216) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0x2318 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 905 0.059377000 119.182.123.216 [CENSORED] SSDP 364 HTTP/1.1 200 OK Frame 905: 364 bytes on wire (2912 bits), 364 bytes captured (2912 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.660477000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.660477000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.059377000 seconds] Frame Number: 905 Frame Length: 364 bytes (2912 bits) Capture Length: 364 bytes (2912 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 119.182.123.216 (119.182.123.216), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 350 Identification: 0xe546 (58694) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x6f33 [correct] [Good: True] [Bad: False] Source: 119.182.123.216 (119.182.123.216) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 330 Checksum: 0xb24e [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 906 0.059401000 124.130.60.167 [CENSORED] SSDP 284 HTTP/1.1 200 OK Frame 906: 284 bytes on wire (2272 bits), 284 bytes captured (2272 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.660501000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.660501000 seconds [Time delta from previous captured frame: 0.000024000 seconds] [Time delta from previous displayed frame: 0.000024000 seconds] [Time since reference or first frame: 0.059401000 seconds] Frame Number: 906 Frame Length: 284 bytes (2272 bits) Capture Length: 284 bytes (2272 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 124.130.60.167 (124.130.60.167), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 270 Identification: 0xd951 (55633) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xb5cd [correct] [Good: True] [Bad: False] Source: 124.130.60.167 (124.130.60.167) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 250 Checksum: 0xcc7b [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: upnp:rootdevice\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 907 0.059439000 124.130.60.167 [CENSORED] SSDP 348 HTTP/1.1 200 OK Frame 907: 348 bytes on wire (2784 bits), 348 bytes captured (2784 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.660539000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.660539000 seconds [Time delta from previous captured frame: 0.000038000 seconds] [Time delta from previous displayed frame: 0.000038000 seconds] [Time since reference or first frame: 0.059439000 seconds] Frame Number: 907 Frame Length: 348 bytes (2784 bits) Capture Length: 348 bytes (2784 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 124.130.60.167 (124.130.60.167), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 334 Identification: 0xd952 (55634) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xb58c [correct] [Good: True] [Bad: False] Source: 124.130.60.167 (124.130.60.167) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 314 Checksum: 0x0636 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n \r\n No. Time Source Destination Protocol Length Info 908 0.059473000 27.205.201.80 [CENSORED] SSDP 348 HTTP/1.1 200 OK Frame 908: 348 bytes on wire (2784 bits), 348 bytes captured (2784 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.660573000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.660573000 seconds [Time delta from previous captured frame: 0.000034000 seconds] [Time delta from previous displayed frame: 0.000034000 seconds] [Time since reference or first frame: 0.059473000 seconds] Frame Number: 908 Frame Length: 348 bytes (2784 bits) Capture Length: 348 bytes (2784 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 27.205.201.80 (27.205.201.80), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 334 Identification: 0x7a89 (31369) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xe871 [correct] [Good: True] [Bad: False] Source: 27.205.201.80 (27.205.201.80) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 314 Checksum: 0xda41 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n \r\n No. Time Source Destination Protocol Length Info 909 0.059499000 27.205.201.80 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 909: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.660599000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.660599000 seconds [Time delta from previous captured frame: 0.000026000 seconds] [Time delta from previous displayed frame: 0.000026000 seconds] [Time since reference or first frame: 0.059499000 seconds] Frame Number: 909 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 27.205.201.80 (27.205.201.80), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0x7a8a (31370) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xe896 [correct] [Good: True] [Bad: False] Source: 27.205.201.80 (27.205.201.80) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0x0c65 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 910 0.059536000 27.205.201.80 [CENSORED] SSDP 332 HTTP/1.1 200 OK Frame 910: 332 bytes on wire (2656 bits), 332 bytes captured (2656 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.660636000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.660636000 seconds [Time delta from previous captured frame: 0.000037000 seconds] [Time delta from previous displayed frame: 0.000037000 seconds] [Time since reference or first frame: 0.059536000 seconds] Frame Number: 910 Frame Length: 332 bytes (2656 bits) Capture Length: 332 bytes (2656 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 27.205.201.80 (27.205.201.80), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 318 Identification: 0x7a8b (31371) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xe87f [correct] [Good: True] [Bad: False] Source: 27.205.201.80 (27.205.201.80) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 298 Checksum: 0x4887 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000::urn:schemas-upnp-org:device:WANDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 911 0.059566000 27.205.201.80 [CENSORED] SSDP 330 HTTP/1.1 200 OK Frame 911: 330 bytes on wire (2640 bits), 330 bytes captured (2640 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.660666000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.660666000 seconds [Time delta from previous captured frame: 0.000030000 seconds] [Time delta from previous displayed frame: 0.000030000 seconds] [Time since reference or first frame: 0.059566000 seconds] Frame Number: 911 Frame Length: 330 bytes (2640 bits) Capture Length: 330 bytes (2640 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 27.205.201.80 (27.205.201.80), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 316 Identification: 0x7a8d (31373) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xe86f [correct] [Good: True] [Bad: False] Source: 27.205.201.80 (27.205.201.80) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 296 Checksum: 0x4266 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 912 0.059606000 27.205.201.80 [CENSORED] SSDP 368 HTTP/1.1 200 OK Frame 912: 368 bytes on wire (2944 bits), 368 bytes captured (2944 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.660706000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.660706000 seconds [Time delta from previous captured frame: 0.000040000 seconds] [Time delta from previous displayed frame: 0.000040000 seconds] [Time since reference or first frame: 0.059606000 seconds] Frame Number: 912 Frame Length: 368 bytes (2944 bits) Capture Length: 368 bytes (2944 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 27.205.201.80 (27.205.201.80), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 354 Identification: 0x7a8f (31375) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xe857 [correct] [Good: True] [Bad: False] Source: 27.205.201.80 (27.205.201.80) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 334 Checksum: 0x0381 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 913 0.059629000 211.199.112.66 [CENSORED] SSDP 272 HTTP/1.1 200 OK Frame 913: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.660729000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.660729000 seconds [Time delta from previous captured frame: 0.000023000 seconds] [Time delta from previous displayed frame: 0.000023000 seconds] [Time since reference or first frame: 0.059629000 seconds] Frame Number: 913 Frame Length: 272 bytes (2176 bits) Capture Length: 272 bytes (2176 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 211.199.112.66 (211.199.112.66), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x28 (DSCP 0x0a: Assured Forwarding 11; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 10.. = Differentiated Services Codepoint: Assured Forwarding 11 (0x0a) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 258 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 250 Protocol: UDP (17) Header checksum: 0xc032 [correct] [Good: True] [Bad: False] Source: 211.199.112.66 (211.199.112.66) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 238 Checksum: 0x0f6a [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: upnp:rootdevice\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::upnp:rootdevice\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:2048/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 914 0.059667000 211.199.112.66 [CENSORED] SSDP 344 HTTP/1.1 200 OK Frame 914: 344 bytes on wire (2752 bits), 344 bytes captured (2752 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.660767000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.660767000 seconds [Time delta from previous captured frame: 0.000038000 seconds] [Time delta from previous displayed frame: 0.000038000 seconds] [Time since reference or first frame: 0.059667000 seconds] Frame Number: 914 Frame Length: 344 bytes (2752 bits) Capture Length: 344 bytes (2752 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 211.199.112.66 (211.199.112.66), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x28 (DSCP 0x0a: Assured Forwarding 11; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 10.. = Differentiated Services Codepoint: Assured Forwarding 11 (0x0a) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 330 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 250 Protocol: UDP (17) Header checksum: 0xbfea [correct] [Good: True] [Bad: False] Source: 211.199.112.66 (211.199.112.66) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 310 Checksum: 0xa06b [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:2048/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 915 0.059698000 60.212.72.52 [CENSORED] SSDP 336 HTTP/1.1 200 OK Frame 915: 336 bytes on wire (2688 bits), 336 bytes captured (2688 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.660798000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.660798000 seconds [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.059698000 seconds] Frame Number: 915 Frame Length: 336 bytes (2688 bits) Capture Length: 336 bytes (2688 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 60.212.72.52 (60.212.72.52), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 322 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x831c [correct] [Good: True] [Bad: False] Source: 60.212.72.52 (60.212.72.52) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 302 Checksum: 0x5e7c [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANPPPConnection:1\r\n USN: uuid:fc4ec57e-b051-11db-88f8-0060085db3f6::urn:schemas-upnp-org:service:WANPPPConnection:1\r\n EXT:\r\n SERVER: Net-OS 5.xx UPnP/1.0\r\n LOCATION: http://192.168.0.1:4996/etc/linuxigd/gatedesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 916 0.059746000 218.150.107.38 [CENSORED] SSDP 331 HTTP/1.1 200 OK Frame 916: 331 bytes on wire (2648 bits), 331 bytes captured (2648 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.660846000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.660846000 seconds [Time delta from previous captured frame: 0.000048000 seconds] [Time delta from previous displayed frame: 0.000048000 seconds] [Time since reference or first frame: 0.059746000 seconds] Frame Number: 916 Frame Length: 331 bytes (2648 bits) Capture Length: 331 bytes (2648 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 218.150.107.38 (218.150.107.38), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x28 (DSCP 0x0a: Assured Forwarding 11; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 10.. = Differentiated Services Codepoint: Assured Forwarding 11 (0x0a) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 317 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 250 Protocol: UDP (17) Header checksum: 0xbe44 [correct] [Good: True] [Bad: False] Source: 218.150.107.38 (218.150.107.38) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 297 Checksum: 0xf4dd [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n USN: uuid:959907c1-35a1-4483-9561-994a4b287f8d::urn:schemas-upnp-org:service:WANIPConnection:1\r\n EXT:\r\n SERVER: AxlerV1 UPnP/1.0 MiniUPnPd/1.4\r\n LOCATION: http://192.168.0.1:5555/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 917 0.059767000 123.15.147.78 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 917: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.660867000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.660867000 seconds [Time delta from previous captured frame: 0.000021000 seconds] [Time delta from previous displayed frame: 0.000021000 seconds] [Time since reference or first frame: 0.059767000 seconds] Frame Number: 917 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 123.15.147.78 (123.15.147.78), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0x57c7 (22471) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xe1eb [correct] [Good: True] [Bad: False] Source: 123.15.147.78 (123.15.147.78) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0x0923 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANIPConnection:1\r\n \r\n No. Time Source Destination Protocol Length Info 918 0.059793000 104.173.7.225 [CENSORED] SSDP 287 HTTP/1.1 200 OK Frame 918: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.660893000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.660893000 seconds [Time delta from previous captured frame: 0.000026000 seconds] [Time delta from previous displayed frame: 0.000026000 seconds] [Time since reference or first frame: 0.059793000 seconds] Frame Number: 918 Frame Length: 287 bytes (2296 bits) Capture Length: 287 bytes (2296 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 104.173.7.225 (104.173.7.225), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 273 Identification: 0xea51 (59985) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 247 Protocol: UDP (17) Header checksum: 0xac75 [correct] [Good: True] [Bad: False] Source: 104.173.7.225 (104.173.7.225) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 253 Checksum: 0x14d5 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: upnp:rootdevice\r\n USN: uuid:2a8a69f4-1dd2-11b2-814e-a969b7fc0006::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 919 0.059835000 123.157.162.71 [CENSORED] SSDP 364 HTTP/1.1 200 OK Frame 919: 364 bytes on wire (2912 bits), 364 bytes captured (2912 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.660935000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.660935000 seconds [Time delta from previous captured frame: 0.000042000 seconds] [Time delta from previous displayed frame: 0.000042000 seconds] [Time since reference or first frame: 0.059835000 seconds] Frame Number: 919 Frame Length: 364 bytes (2912 bits) Capture Length: 364 bytes (2912 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 123.157.162.71 (123.157.162.71), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 350 Identification: 0x0e92 (3730) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x1b92 [correct] [Good: True] [Bad: False] Source: 123.157.162.71 (123.157.162.71) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 330 Checksum: 0x87f8 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 920 0.059867000 104.173.7.225 [CENSORED] SSDP 357 HTTP/1.1 200 OK Frame 920: 357 bytes on wire (2856 bits), 357 bytes captured (2856 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.660967000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.660967000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.059867000 seconds] Frame Number: 920 Frame Length: 357 bytes (2856 bits) Capture Length: 357 bytes (2856 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 104.173.7.225 (104.173.7.225), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 343 Identification: 0xea52 (59986) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 247 Protocol: UDP (17) Header checksum: 0xac2e [correct] [Good: True] [Bad: False] Source: 104.173.7.225 (104.173.7.225) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 323 Checksum: 0xebf6 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n USN: uuid:2a8a69f4-1dd2-11b2-814e-a969b7fc0006::urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 921 0.059896000 104.173.7.225 [CENSORED] SSDP 333 HTTP/1.1 200 OK Frame 921: 333 bytes on wire (2664 bits), 333 bytes captured (2664 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.660996000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.660996000 seconds [Time delta from previous captured frame: 0.000029000 seconds] [Time delta from previous displayed frame: 0.000029000 seconds] [Time since reference or first frame: 0.059896000 seconds] Frame Number: 921 Frame Length: 333 bytes (2664 bits) Capture Length: 333 bytes (2664 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 104.173.7.225 (104.173.7.225), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 319 Identification: 0xea53 (59987) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 247 Protocol: UDP (17) Header checksum: 0xac45 [correct] [Good: True] [Bad: False] Source: 104.173.7.225 (104.173.7.225) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 299 Checksum: 0x0067 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:WANDevice:\r\n USN: uuid:2a8ea2a8-1dd2-11b2-9063-be3784d310cb::urn:schemas-upnp-org:device:WANDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 922 0.059936000 104.173.7.225 [CENSORED] SSDP 365 HTTP/1.1 200 OK Frame 922: 365 bytes on wire (2920 bits), 365 bytes captured (2920 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.661036000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.661036000 seconds [Time delta from previous captured frame: 0.000040000 seconds] [Time delta from previous displayed frame: 0.000040000 seconds] [Time since reference or first frame: 0.059936000 seconds] Frame Number: 922 Frame Length: 365 bytes (2920 bits) Capture Length: 365 bytes (2920 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 104.173.7.225 (104.173.7.225), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 351 Identification: 0xea54 (59988) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 247 Protocol: UDP (17) Header checksum: 0xac24 [correct] [Good: True] [Bad: False] Source: 104.173.7.225 (104.173.7.225) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 331 Checksum: 0xf423 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:\r\n USN: uuid:2a8ea2a8-1dd2-11b2-9063-be3784d310cb::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:\r\n \r\n No. Time Source Destination Protocol Length Info 923 0.059971000 104.173.7.225 [CENSORED] SSDP 353 HTTP/1.1 200 OK Frame 923: 353 bytes on wire (2824 bits), 353 bytes captured (2824 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.661071000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.661071000 seconds [Time delta from previous captured frame: 0.000035000 seconds] [Time delta from previous displayed frame: 0.000035000 seconds] [Time since reference or first frame: 0.059971000 seconds] Frame Number: 923 Frame Length: 353 bytes (2824 bits) Capture Length: 353 bytes (2824 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 104.173.7.225 (104.173.7.225), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 339 Identification: 0xea55 (59989) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 247 Protocol: UDP (17) Header checksum: 0xac2f [correct] [Good: True] [Bad: False] Source: 104.173.7.225 (104.173.7.225) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 319 Checksum: 0xe12c [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:\r\n USN: uuid:2a92d544-1dd2-11b2-b431-9cddd9d2354e::urn:schemas-upnp-org:device:WANConnectionDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 924 0.059996000 24.13.218.67 [CENSORED] SSDP 342 HTTP/1.1 200 OK Frame 924: 342 bytes on wire (2736 bits), 342 bytes captured (2736 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.661096000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.661096000 seconds [Time delta from previous captured frame: 0.000025000 seconds] [Time delta from previous displayed frame: 0.000025000 seconds] [Time since reference or first frame: 0.059996000 seconds] Frame Number: 924 Frame Length: 342 bytes (2736 bits) Capture Length: 342 bytes (2736 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 24.13.218.67 (24.13.218.67), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 328 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x10ce [correct] [Good: True] [Bad: False] Source: 24.13.218.67 (24.13.218.67) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 308 Checksum: 0xb28d [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n USN: uuid:615dc106-1dd2-11b2-812e-96dbc7db9b40::urn:schemas-upnp-org:service:WANIPConnection:1\r\n \r\n No. Time Source Destination Protocol Length Info 925 0.060028000 24.13.218.67 [CENSORED] SSDP 344 HTTP/1.1 200 OK Frame 925: 344 bytes on wire (2752 bits), 344 bytes captured (2752 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.661128000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.661128000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.060028000 seconds] Frame Number: 925 Frame Length: 344 bytes (2752 bits) Capture Length: 344 bytes (2752 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 24.13.218.67 (24.13.218.67), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 330 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x10cc [correct] [Good: True] [Bad: False] Source: 24.13.218.67 (24.13.218.67) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 310 Checksum: 0xa8e4 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-upnp-org:service:WANPPPConnection:1\r\n USN: uuid:615dc106-1dd2-11b2-812e-96dbc7db9b40::urn:schemas-upnp-org:service:WANPPPConnection:1\r\n \r\n No. Time Source Destination Protocol Length Info 926 0.060063000 24.13.218.67 [CENSORED] SSDP 344 HTTP/1.1 200 OK Frame 926: 344 bytes on wire (2752 bits), 344 bytes captured (2752 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.661163000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.661163000 seconds [Time delta from previous captured frame: 0.000035000 seconds] [Time delta from previous displayed frame: 0.000035000 seconds] [Time since reference or first frame: 0.060063000 seconds] Frame Number: 926 Frame Length: 344 bytes (2752 bits) Capture Length: 344 bytes (2752 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 24.13.218.67 (24.13.218.67), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 330 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x10cc [correct] [Good: True] [Bad: False] Source: 24.13.218.67 (24.13.218.67) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 310 Checksum: 0x53b8 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n USN: uuid:6154e36a-1dd2-11b2-82ca-f34a0be69130::urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n \r\n No. Time Source Destination Protocol Length Info 927 0.060095000 24.13.218.67 [CENSORED] SSDP 344 HTTP/1.1 200 OK Frame 927: 344 bytes on wire (2752 bits), 344 bytes captured (2752 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.661195000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.661195000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.060095000 seconds] Frame Number: 927 Frame Length: 344 bytes (2752 bits) Capture Length: 344 bytes (2752 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 24.13.218.67 (24.13.218.67), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 330 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x10cc [correct] [Good: True] [Bad: False] Source: 24.13.218.67 (24.13.218.67) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 310 Checksum: 0xb2fb [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-wifialliance-org:device:WFADevice:1\r\n USN: uuid:6162bcba-1dd2-11b2-9561-ff7130eef918::urn:schemas-wifialliance-org:device:WFADevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 928 0.060129000 24.13.218.67 [CENSORED] SSDP 354 HTTP/1.1 200 OK Frame 928: 354 bytes on wire (2832 bits), 354 bytes captured (2832 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.661229000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.661229000 seconds [Time delta from previous captured frame: 0.000034000 seconds] [Time delta from previous displayed frame: 0.000034000 seconds] [Time since reference or first frame: 0.060129000 seconds] Frame Number: 928 Frame Length: 354 bytes (2832 bits) Capture Length: 354 bytes (2832 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 24.13.218.67 (24.13.218.67), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 340 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x10c2 [correct] [Good: True] [Bad: False] Source: 24.13.218.67 (24.13.218.67) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 320 Checksum: 0xb371 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-wifialliance-org:service:WFAWLANConfig:1\r\n USN: uuid:6162bcba-1dd2-11b2-9561-ff7130eef918::urn:schemas-wifialliance-org:service:WFAWLANConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 929 0.060154000 24.13.218.67 [CENSORED] SSDP 289 HTTP/1.1 200 OK Frame 929: 289 bytes on wire (2312 bits), 289 bytes captured (2312 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.661254000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.661254000 seconds [Time delta from previous captured frame: 0.000025000 seconds] [Time delta from previous displayed frame: 0.000025000 seconds] [Time since reference or first frame: 0.060154000 seconds] Frame Number: 929 Frame Length: 289 bytes (2312 bits) Capture Length: 289 bytes (2312 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 24.13.218.67 (24.13.218.67), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 275 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x1103 [correct] [Good: True] [Bad: False] Source: 24.13.218.67 (24.13.218.67) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 255 Checksum: 0x00c2 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: uuid:6154e36a-1dd2-11b2-82ca-f34a0be69130\r\n USN: uuid:6154e36a-1dd2-11b2-82ca-f34a0be69130\r\n \r\n No. Time Source Destination Protocol Length Info 930 0.060184000 24.13.218.67 [CENSORED] SSDP 289 HTTP/1.1 200 OK Frame 930: 289 bytes on wire (2312 bits), 289 bytes captured (2312 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.661284000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.661284000 seconds [Time delta from previous captured frame: 0.000030000 seconds] [Time delta from previous displayed frame: 0.000030000 seconds] [Time since reference or first frame: 0.060184000 seconds] Frame Number: 930 Frame Length: 289 bytes (2312 bits) Capture Length: 289 bytes (2312 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 24.13.218.67 (24.13.218.67), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 275 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x1103 [correct] [Good: True] [Bad: False] Source: 24.13.218.67 (24.13.218.67) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 255 Checksum: 0xeda8 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: uuid:6155d270-1dd2-11b2-9b1c-a85eb2f927f9\r\n USN: uuid:6155d270-1dd2-11b2-9b1c-a85eb2f927f9\r\n \r\n No. Time Source Destination Protocol Length Info 931 0.060218000 24.13.218.67 [CENSORED] SSDP 289 HTTP/1.1 200 OK Frame 931: 289 bytes on wire (2312 bits), 289 bytes captured (2312 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.661318000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.661318000 seconds [Time delta from previous captured frame: 0.000034000 seconds] [Time delta from previous displayed frame: 0.000034000 seconds] [Time since reference or first frame: 0.060218000 seconds] Frame Number: 931 Frame Length: 289 bytes (2312 bits) Capture Length: 289 bytes (2312 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 24.13.218.67 (24.13.218.67), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 275 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x1103 [correct] [Good: True] [Bad: False] Source: 24.13.218.67 (24.13.218.67) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 255 Checksum: 0xf05f [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: uuid:615dc106-1dd2-11b2-812e-96dbc7db9b40\r\n USN: uuid:615dc106-1dd2-11b2-812e-96dbc7db9b40\r\n \r\n No. Time Source Destination Protocol Length Info 932 0.060264000 50.151.190.25 [CENSORED] SSDP 365 HTTP/1.1 200 OK Frame 932: 365 bytes on wire (2920 bits), 365 bytes captured (2920 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.661364000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.661364000 seconds [Time delta from previous captured frame: 0.000046000 seconds] [Time delta from previous displayed frame: 0.000046000 seconds] [Time since reference or first frame: 0.060264000 seconds] Frame Number: 932 Frame Length: 365 bytes (2920 bits) Capture Length: 365 bytes (2920 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 50.151.190.25 (50.151.190.25), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 351 Identification: 0x250d (9485) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0xed49 [correct] [Good: True] [Bad: False] Source: 50.151.190.25 (50.151.190.25) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 331 Checksum: 0x815f [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:\r\n USN: uuid:22222222-2222-2222-2222-222222222222::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:\r\n \r\n No. Time Source Destination Protocol Length Info 933 0.060295000 118.180.60.164 [CENSORED] SSDP 368 HTTP/1.1 200 OK Frame 933: 368 bytes on wire (2944 bits), 368 bytes captured (2944 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.661395000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.661395000 seconds [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.060295000 seconds] Frame Number: 933 Frame Length: 368 bytes (2944 bits) Capture Length: 368 bytes (2944 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 118.180.60.164 (118.180.60.164), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 354 Identification: 0x5ab7 (23223) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x39f5 [correct] [Good: True] [Bad: False] Source: 118.180.60.164 (118.180.60.164) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 334 Checksum: 0x3546 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 934 0.060322000 182.119.179.248 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 934: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.661422000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.661422000 seconds [Time delta from previous captured frame: 0.000027000 seconds] [Time delta from previous displayed frame: 0.000027000 seconds] [Time since reference or first frame: 0.060322000 seconds] Frame Number: 934 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 182.119.179.248 (182.119.179.248), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0xe3ad (58285) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xfa20 [correct] [Good: True] [Bad: False] Source: 182.119.179.248 (182.119.179.248) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0x5f59 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 935 0.060352000 183.163.38.224 [CENSORED] SSDP 330 HTTP/1.1 200 OK Frame 935: 330 bytes on wire (2640 bits), 330 bytes captured (2640 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.661452000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.661452000 seconds [Time delta from previous captured frame: 0.000030000 seconds] [Time delta from previous displayed frame: 0.000030000 seconds] [Time since reference or first frame: 0.060352000 seconds] Frame Number: 935 Frame Length: 330 bytes (2640 bits) Capture Length: 330 bytes (2640 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 183.163.38.224 (183.163.38.224), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 316 Identification: 0xaf54 (44884) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0xbb52 [correct] [Good: True] [Bad: False] Source: 183.163.38.224 (183.163.38.224) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 296 Checksum: 0x4900 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 936 0.060390000 73.41.120.87 [CENSORED] SSDP 333 HTTP/1.1 200 OK Frame 936: 333 bytes on wire (2664 bits), 333 bytes captured (2664 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.661490000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.661490000 seconds [Time delta from previous captured frame: 0.000038000 seconds] [Time delta from previous displayed frame: 0.000038000 seconds] [Time since reference or first frame: 0.060390000 seconds] Frame Number: 936 Frame Length: 333 bytes (2664 bits) Capture Length: 333 bytes (2664 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 73.41.120.87 (73.41.120.87), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 319 Identification: 0xeffc (61436) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x56aa [correct] [Good: True] [Bad: False] Source: 73.41.120.87 (73.41.120.87) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 299 Checksum: 0xbcd2 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:WANDevice:\r\n USN: uuid:22222222-2222-2222-2222-222222222222::urn:schemas-upnp-org:device:WANDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 937 0.060449000 73.41.120.87 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 937: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.661549000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.661549000 seconds [Time delta from previous captured frame: 0.000059000 seconds] [Time delta from previous displayed frame: 0.000059000 seconds] [Time since reference or first frame: 0.060449000 seconds] Frame Number: 937 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 73.41.120.87 (73.41.120.87), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0xf001 (61441) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x5695 [correct] [Good: True] [Bad: False] Source: 73.41.120.87 (73.41.120.87) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0xc9a2 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:\r\n USN: uuid:11111111-1111-1111-1111-111111111111::urn:schemas-upnp-org:service:Layer3Forwarding:\r\n \r\n No. Time Source Destination Protocol Length Info 938 0.060487000 112.229.28.131 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 938: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.661587000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.661587000 seconds [Time delta from previous captured frame: 0.000038000 seconds] [Time delta from previous displayed frame: 0.000038000 seconds] [Time since reference or first frame: 0.060487000 seconds] Frame Number: 938 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 112.229.28.131 (112.229.28.131), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0x919a (37274) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x290e [correct] [Good: True] [Bad: False] Source: 112.229.28.131 (112.229.28.131) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0x893e [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 939 0.060510000 112.229.28.131 [CENSORED] SSDP 284 HTTP/1.1 200 OK Frame 939: 284 bytes on wire (2272 bits), 284 bytes captured (2272 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.661610000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.661610000 seconds [Time delta from previous captured frame: 0.000023000 seconds] [Time delta from previous displayed frame: 0.000023000 seconds] [Time since reference or first frame: 0.060510000 seconds] Frame Number: 939 Frame Length: 284 bytes (2272 bits) Capture Length: 284 bytes (2272 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 112.229.28.131 (112.229.28.131), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 270 Identification: 0x919b (37275) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x2955 [correct] [Good: True] [Bad: False] Source: 112.229.28.131 (112.229.28.131) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 250 Checksum: 0xf83c [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: upnp:rootdevice\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 940 0.060566000 182.42.182.137 [CENSORED] SSDP 284 HTTP/1.1 200 OK Frame 940: 284 bytes on wire (2272 bits), 284 bytes captured (2272 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.661666000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.661666000 seconds [Time delta from previous captured frame: 0.000056000 seconds] [Time delta from previous displayed frame: 0.000056000 seconds] [Time since reference or first frame: 0.060566000 seconds] Frame Number: 940 Frame Length: 284 bytes (2272 bits) Capture Length: 284 bytes (2272 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 182.42.182.137 (182.42.182.137), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 270 Identification: 0x1aa7 (6823) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xc0ed [correct] [Good: True] [Bad: False] Source: 182.42.182.137 (182.42.182.137) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 250 Checksum: 0x18f1 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: upnp:rootdevice\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 941 0.060597000 72.178.201.62 [CENSORED] SSDP 272 HTTP/1.1 200 OK Frame 941: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.661697000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.661697000 seconds [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.060597000 seconds] Frame Number: 941 Frame Length: 272 bytes (2176 bits) Capture Length: 272 bytes (2176 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 72.178.201.62 (72.178.201.62), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 258 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 248 Protocol: UDP (17) Header checksum: 0xf473 [correct] [Good: True] [Bad: False] Source: 72.178.201.62 (72.178.201.62) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 238 Checksum: 0xcce2 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: upnp:rootdevice\r\n USN: uuid:18de43f8-677c-4d3a-8920-88DC960E11B2::upnp:rootdevice\r\n EXT:\r\n SERVER: Fedora/10 UPnP/1.0 MiniUPnPd/1.4\r\n LOCATION: http://192.168.0.1:33091/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 942 0.060642000 182.42.182.137 [CENSORED] SSDP 348 HTTP/1.1 200 OK Frame 942: 348 bytes on wire (2784 bits), 348 bytes captured (2784 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.661742000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.661742000 seconds [Time delta from previous captured frame: 0.000045000 seconds] [Time delta from previous displayed frame: 0.000045000 seconds] [Time since reference or first frame: 0.060642000 seconds] Frame Number: 942 Frame Length: 348 bytes (2784 bits) Capture Length: 348 bytes (2784 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 182.42.182.137 (182.42.182.137), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 334 Identification: 0x1aa8 (6824) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xc0ac [correct] [Good: True] [Bad: False] Source: 182.42.182.137 (182.42.182.137) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 314 Checksum: 0x52ab [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n \r\n No. Time Source Destination Protocol Length Info 943 0.060669000 182.42.182.137 [CENSORED] SSDP 310 HTTP/1.1 200 OK Frame 943: 310 bytes on wire (2480 bits), 310 bytes captured (2480 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.661769000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.661769000 seconds [Time delta from previous captured frame: 0.000027000 seconds] [Time delta from previous displayed frame: 0.000027000 seconds] [Time since reference or first frame: 0.060669000 seconds] Frame Number: 943 Frame Length: 310 bytes (2480 bits) Capture Length: 310 bytes (2480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 182.42.182.137 (182.42.182.137), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 296 Identification: 0x1aa9 (6825) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xc0d1 [correct] [Good: True] [Bad: False] Source: 182.42.182.137 (182.42.182.137) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 276 Checksum: 0x84ce [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000\r\n \r\n No. Time Source Destination Protocol Length Info 944 0.060706000 182.42.182.137 [CENSORED] SSDP 332 HTTP/1.1 200 OK Frame 944: 332 bytes on wire (2656 bits), 332 bytes captured (2656 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.661806000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.661806000 seconds [Time delta from previous captured frame: 0.000037000 seconds] [Time delta from previous displayed frame: 0.000037000 seconds] [Time since reference or first frame: 0.060706000 seconds] Frame Number: 944 Frame Length: 332 bytes (2656 bits) Capture Length: 332 bytes (2656 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 182.42.182.137 (182.42.182.137), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 318 Identification: 0x1aaa (6826) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xc0ba [correct] [Good: True] [Bad: False] Source: 182.42.182.137 (182.42.182.137) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 298 Checksum: 0xc0f0 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:device:WANDevice:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WAN{84807575-251b-4c02-954b-e8e2ba7216a9}000000000000::urn:schemas-upnp-org:device:WANDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 945 0.060745000 182.36.57.207 [CENSORED] SSDP 356 HTTP/1.1 200 OK Frame 945: 356 bytes on wire (2848 bits), 356 bytes captured (2848 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.661845000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.661845000 seconds [Time delta from previous captured frame: 0.000039000 seconds] [Time delta from previous displayed frame: 0.000039000 seconds] [Time since reference or first frame: 0.060745000 seconds] Frame Number: 945 Frame Length: 356 bytes (2848 bits) Capture Length: 356 bytes (2848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 182.36.57.207 (182.36.57.207), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 342 Identification: 0x1a7a (6778) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x3da3 [correct] [Good: True] [Bad: False] Source: 182.36.57.207 (182.36.57.207) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 322 Checksum: 0x278d [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANIPConnection:1\r\n \r\n No. Time Source Destination Protocol Length Info 946 0.061258000 72.178.201.62 [CENSORED] SSDP 344 HTTP/1.1 200 OK Frame 946: 344 bytes on wire (2752 bits), 344 bytes captured (2752 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.662358000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.662358000 seconds [Time delta from previous captured frame: 0.000513000 seconds] [Time delta from previous displayed frame: 0.000513000 seconds] [Time since reference or first frame: 0.061258000 seconds] Frame Number: 946 Frame Length: 344 bytes (2752 bits) Capture Length: 344 bytes (2752 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 72.178.201.62 (72.178.201.62), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 330 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 248 Protocol: UDP (17) Header checksum: 0xf42b [correct] [Good: True] [Bad: False] Source: 72.178.201.62 (72.178.201.62) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 310 Checksum: 0x5de4 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age=120\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n USN: uuid:18de43f8-677c-4d3a-8920-88DC960E11B2::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\n EXT:\r\n SERVER: Fedora/10 UPnP/1.0 MiniUPnPd/1.4\r\n LOCATION: http://192.168.0.1:33091/rootDesc.xml\r\n \r\n No. Time Source Destination Protocol Length Info 947 0.061291000 73.170.83.129 [CENSORED] SSDP 328 HTTP/1.1 200 OK Frame 947: 328 bytes on wire (2624 bits), 328 bytes captured (2624 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.662391000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.662391000 seconds [Time delta from previous captured frame: 0.000033000 seconds] [Time delta from previous displayed frame: 0.000033000 seconds] [Time since reference or first frame: 0.061291000 seconds] Frame Number: 947 Frame Length: 328 bytes (2624 bits) Capture Length: 328 bytes (2624 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 73.170.83.129 (73.170.83.129), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 314 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x6b01 [correct] [Good: True] [Bad: False] Source: 73.170.83.129 (73.170.83.129) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 294 Checksum: 0x3ac4 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65530/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-upnp-org:device:WANDevice:1\r\n USN: uuid:21507e70-1dd2-11b2-9cb3-89ca0fd00253::urn:schemas-upnp-org:device:WANDevice:1\r\n \r\n No. Time Source Destination Protocol Length Info 948 0.061330000 73.170.83.129 [CENSORED] SSDP 360 HTTP/1.1 200 OK Frame 948: 360 bytes on wire (2880 bits), 360 bytes captured (2880 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.662430000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.662430000 seconds [Time delta from previous captured frame: 0.000039000 seconds] [Time delta from previous displayed frame: 0.000039000 seconds] [Time since reference or first frame: 0.061330000 seconds] Frame Number: 948 Frame Length: 360 bytes (2880 bits) Capture Length: 360 bytes (2880 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 73.170.83.129 (73.170.83.129), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 346 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x6ae1 [correct] [Good: True] [Bad: False] Source: 73.170.83.129 (73.170.83.129) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 326 Checksum: 0xb2fc [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65530/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n USN: uuid:21507e70-1dd2-11b2-9cb3-89ca0fd00253::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 949 0.061362000 73.170.83.129 [CENSORED] SSDP 342 HTTP/1.1 200 OK Frame 949: 342 bytes on wire (2736 bits), 342 bytes captured (2736 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.662462000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.662462000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.061362000 seconds] Frame Number: 949 Frame Length: 342 bytes (2736 bits) Capture Length: 342 bytes (2736 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 73.170.83.129 (73.170.83.129), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 328 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x6af3 [correct] [Good: True] [Bad: False] Source: 73.170.83.129 (73.170.83.129) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 308 Checksum: 0xdb7d [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65530/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:1\r\n USN: uuid:2151e9cc-1dd2-11b2-b661-82f678caceeb::urn:schemas-upnp-org:service:WANIPConnection:1\r\n \r\n No. Time Source Destination Protocol Length Info 950 0.061396000 73.170.83.129 [CENSORED] SSDP 344 HTTP/1.1 200 OK Frame 950: 344 bytes on wire (2752 bits), 344 bytes captured (2752 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.662496000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.662496000 seconds [Time delta from previous captured frame: 0.000034000 seconds] [Time delta from previous displayed frame: 0.000034000 seconds] [Time since reference or first frame: 0.061396000 seconds] Frame Number: 950 Frame Length: 344 bytes (2752 bits) Capture Length: 344 bytes (2752 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 73.170.83.129 (73.170.83.129), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 330 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x6af1 [correct] [Good: True] [Bad: False] Source: 73.170.83.129 (73.170.83.129) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 310 Checksum: 0xcdd8 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65530/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-upnp-org:service:WANPPPConnection:1\r\n USN: uuid:2151e9cc-1dd2-11b2-b661-82f678caceeb::urn:schemas-upnp-org:service:WANPPPConnection:1\r\n \r\n No. Time Source Destination Protocol Length Info 951 0.061428000 73.170.83.129 [CENSORED] SSDP 344 HTTP/1.1 200 OK Frame 951: 344 bytes on wire (2752 bits), 344 bytes captured (2752 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.662528000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.662528000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.061428000 seconds] Frame Number: 951 Frame Length: 344 bytes (2752 bits) Capture Length: 344 bytes (2752 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 73.170.83.129 (73.170.83.129), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 330 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x6af1 [correct] [Good: True] [Bad: False] Source: 73.170.83.129 (73.170.83.129) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 310 Checksum: 0x1ba1 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65530/rootDesc.xml\r\n Server: uClinux/2.6.28.10 UPnP/1.0 MiniUPnPd/1.3\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n USN: uuid:214d90e8-1dd2-11b2-afa3-fd805c8ec6eb::urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n \r\n No. Time Source Destination Protocol Length Info 952 0.061453000 118.180.60.164 [CENSORED] SSDP 284 HTTP/1.1 200 OK Frame 952: 284 bytes on wire (2272 bits), 284 bytes captured (2272 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.662553000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.662553000 seconds [Time delta from previous captured frame: 0.000025000 seconds] [Time delta from previous displayed frame: 0.000025000 seconds] [Time since reference or first frame: 0.061453000 seconds] Frame Number: 952 Frame Length: 284 bytes (2272 bits) Capture Length: 284 bytes (2272 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 118.180.60.164 (118.180.60.164), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 270 Identification: 0x5abb (23227) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0x3a45 [correct] [Good: True] [Bad: False] Source: 118.180.60.164 (118.180.60.164) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 250 Checksum: 0xd24c [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: upnp:rootdevice\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 953 0.061501000 183.163.38.224 [CENSORED] SSDP 368 HTTP/1.1 200 OK Frame 953: 368 bytes on wire (2944 bits), 368 bytes captured (2944 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.662601000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.662601000 seconds [Time delta from previous captured frame: 0.000048000 seconds] [Time delta from previous displayed frame: 0.000048000 seconds] [Time since reference or first frame: 0.061501000 seconds] Frame Number: 953 Frame Length: 368 bytes (2944 bits) Capture Length: 368 bytes (2944 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 183.163.38.224 (183.163.38.224), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 354 Identification: 0xaf56 (44886) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 245 Protocol: UDP (17) Header checksum: 0xbb2a [correct] [Good: True] [Bad: False] Source: 183.163.38.224 (183.163.38.224) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 334 Checksum: 0x0a1b [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:WANConnection{9679d566-230a-49d3-92e5-421e9223eaef}000000000000::urn:schemas-upnp-org:service:WANEthernetLinkConfig:1\r\n \r\n No. Time Source Destination Protocol Length Info 954 0.061525000 42.85.145.162 [CENSORED] SSDP 284 HTTP/1.1 200 OK Frame 954: 284 bytes on wire (2272 bits), 284 bytes captured (2272 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.662625000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.662625000 seconds [Time delta from previous captured frame: 0.000024000 seconds] [Time delta from previous displayed frame: 0.000024000 seconds] [Time since reference or first frame: 0.061525000 seconds] Frame Number: 954 Frame Length: 284 bytes (2272 bits) Capture Length: 284 bytes (2272 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 42.85.145.162 (42.85.145.162), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 270 Identification: 0xbff1 (49137) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xcc6f [correct] [Good: True] [Bad: False] Source: 42.85.145.162 (42.85.145.162) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 250 Checksum: 0xc9ad [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: upnp:rootdevice\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 955 0.061569000 42.85.145.162 [CENSORED] SSDP 348 HTTP/1.1 200 OK Frame 955: 348 bytes on wire (2784 bits), 348 bytes captured (2784 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.662669000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.662669000 seconds [Time delta from previous captured frame: 0.000044000 seconds] [Time delta from previous displayed frame: 0.000044000 seconds] [Time since reference or first frame: 0.061569000 seconds] Frame Number: 955 Frame Length: 348 bytes (2784 bits) Capture Length: 348 bytes (2784 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 42.85.145.162 (42.85.145.162), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 334 Identification: 0xbff2 (49138) Flags: 0x00 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 246 Protocol: UDP (17) Header checksum: 0xcc2e [correct] [Good: True] [Bad: False] Source: 42.85.145.162 (42.85.145.162) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 314 Checksum: 0x0368 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK CACHE-CONTROL: max-age = 120\r\n EXT: \r\n LOCATION: http://192.168.1.1:80/UPnP/IGD.xml\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n SERVER: System/1.0 UPnP/1.0 IGD/1.0\r\n USN: uuid:IGD{8c80f73f-4ba0-45fa-835d-042505d052be}000000000000::urn:schemas-upnp-org:service:Layer3Forwarding:1\r\n \r\n No. Time Source Destination Protocol Length Info 956 0.061605000 97.81.227.41 [CENSORED] SSDP 357 HTTP/1.1 200 OK Frame 956: 357 bytes on wire (2856 bits), 357 bytes captured (2856 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.662705000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.662705000 seconds [Time delta from previous captured frame: 0.000036000 seconds] [Time delta from previous displayed frame: 0.000036000 seconds] [Time since reference or first frame: 0.061605000 seconds] Frame Number: 956 Frame Length: 357 bytes (2856 bits) Capture Length: 357 bytes (2856 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 97.81.227.41 (97.81.227.41), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 343 Identification: 0x18b1 (6321) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 247 Protocol: UDP (17) Header checksum: 0xa9c3 [correct] [Good: True] [Bad: False] Source: 97.81.227.41 (97.81.227.41) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 323 Checksum: 0x12cb [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n USN: uuid:add0e744-1dd1-11b2-86d5-947dc8d9f856::urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 957 0.061642000 97.81.227.41 [CENSORED] SSDP 359 HTTP/1.1 200 OK Frame 957: 359 bytes on wire (2872 bits), 359 bytes captured (2872 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.662742000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.662742000 seconds [Time delta from previous captured frame: 0.000037000 seconds] [Time delta from previous displayed frame: 0.000037000 seconds] [Time since reference or first frame: 0.061642000 seconds] Frame Number: 957 Frame Length: 359 bytes (2872 bits) Capture Length: 359 bytes (2872 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 97.81.227.41 (97.81.227.41), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 345 Identification: 0x18b9 (6329) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 247 Protocol: UDP (17) Header checksum: 0xa9b9 [correct] [Good: True] [Bad: False] Source: 97.81.227.41 (97.81.227.41) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 325 Checksum: 0x9dc5 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-wifialliance-org:service:WFAWLANConfig:\r\n USN: uuid:addbcc7c-1dd1-11b2-b66a-b7c955f1fbde::urn:schemas-wifialliance-org:service:WFAWLANConfig:\r\n \r\n No. Time Source Destination Protocol Length Info 958 0.061665000 107.5.31.131 [CENSORED] SSDP 287 HTTP/1.1 200 OK Frame 958: 287 bytes on wire (2296 bits), 287 bytes captured (2296 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.662765000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.662765000 seconds [Time delta from previous captured frame: 0.000023000 seconds] [Time delta from previous displayed frame: 0.000023000 seconds] [Time since reference or first frame: 0.061665000 seconds] Frame Number: 958 Frame Length: 287 bytes (2296 bits) Capture Length: 287 bytes (2296 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 107.5.31.131 (107.5.31.131), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 273 Identification: 0x3b9c (15260) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x3d31 [correct] [Good: True] [Bad: False] Source: 107.5.31.131 (107.5.31.131) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 253 Checksum: 0xf356 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: upnp:rootdevice\r\n USN: uuid:add0bf3a-1dd1-11b2-80f7-8aa4924fe279::upnp:rootdevice\r\n \r\n No. Time Source Destination Protocol Length Info 959 0.061709000 107.5.31.131 [CENSORED] SSDP 357 HTTP/1.1 200 OK Frame 959: 357 bytes on wire (2856 bits), 357 bytes captured (2856 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.662809000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.662809000 seconds [Time delta from previous captured frame: 0.000044000 seconds] [Time delta from previous displayed frame: 0.000044000 seconds] [Time since reference or first frame: 0.061709000 seconds] Frame Number: 959 Frame Length: 357 bytes (2856 bits) Capture Length: 357 bytes (2856 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 107.5.31.131 (107.5.31.131), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 343 Identification: 0x3b9d (15261) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x3cea [correct] [Good: True] [Bad: False] Source: 107.5.31.131 (107.5.31.131) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 323 Checksum: 0x4df5 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n USN: uuid:add0bf3a-1dd1-11b2-80f7-8aa4924fe279::urn:schemas-upnp-org:device:InternetGatewayDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 960 0.061740000 107.5.31.131 [CENSORED] SSDP 333 HTTP/1.1 200 OK Frame 960: 333 bytes on wire (2664 bits), 333 bytes captured (2664 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.662840000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.662840000 seconds [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.061740000 seconds] Frame Number: 960 Frame Length: 333 bytes (2664 bits) Capture Length: 333 bytes (2664 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 107.5.31.131 (107.5.31.131), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 319 Identification: 0x3b9e (15262) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x3d01 [correct] [Good: True] [Bad: False] Source: 107.5.31.131 (107.5.31.131) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 299 Checksum: 0xe601 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:WANDevice:\r\n USN: uuid:add46bb2-1dd1-11b2-841c-89e9138bdcb5::urn:schemas-upnp-org:device:WANDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 961 0.061779000 107.5.31.131 [CENSORED] SSDP 365 HTTP/1.1 200 OK Frame 961: 365 bytes on wire (2920 bits), 365 bytes captured (2920 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.662879000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.662879000 seconds [Time delta from previous captured frame: 0.000039000 seconds] [Time delta from previous displayed frame: 0.000039000 seconds] [Time since reference or first frame: 0.061779000 seconds] Frame Number: 961 Frame Length: 365 bytes (2920 bits) Capture Length: 365 bytes (2920 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 107.5.31.131 (107.5.31.131), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 351 Identification: 0x3b9f (15263) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x3ce0 [correct] [Good: True] [Bad: False] Source: 107.5.31.131 (107.5.31.131) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 331 Checksum: 0xd9be [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:\r\n USN: uuid:add46bb2-1dd1-11b2-841c-89e9138bdcb5::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:\r\n \r\n No. Time Source Destination Protocol Length Info 962 0.061810000 107.5.31.131 [CENSORED] SSDP 353 HTTP/1.1 200 OK Frame 962: 353 bytes on wire (2824 bits), 353 bytes captured (2824 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.662910000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.662910000 seconds [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.061810000 seconds] Frame Number: 962 Frame Length: 353 bytes (2824 bits) Capture Length: 353 bytes (2824 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 107.5.31.131 (107.5.31.131), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 339 Identification: 0x3ba0 (15264) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x3ceb [correct] [Good: True] [Bad: False] Source: 107.5.31.131 (107.5.31.131) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 319 Checksum: 0x5f11 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:device:WANConnectionDevice:\r\n USN: uuid:add80dd0-1dd1-11b2-81e5-b55d7f2bd43c::urn:schemas-upnp-org:device:WANConnectionDevice:\r\n \r\n No. Time Source Destination Protocol Length Info 963 0.061844000 107.5.31.131 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 963: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.662944000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.662944000 seconds [Time delta from previous captured frame: 0.000034000 seconds] [Time delta from previous displayed frame: 0.000034000 seconds] [Time since reference or first frame: 0.061844000 seconds] Frame Number: 963 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 107.5.31.131 (107.5.31.131), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0x3ba1 (15265) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x3cee [correct] [Good: True] [Bad: False] Source: 107.5.31.131 (107.5.31.131) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0xba7d [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANPPPConnection:\r\n USN: uuid:add80dd0-1dd1-11b2-81e5-b55d7f2bd43c::urn:schemas-upnp-org:service:WANPPPConnection:\r\n \r\n No. Time Source Destination Protocol Length Info 964 0.061876000 107.5.31.131 [CENSORED] SSDP 347 HTTP/1.1 200 OK Frame 964: 347 bytes on wire (2776 bits), 347 bytes captured (2776 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.662976000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.662976000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.061876000 seconds] Frame Number: 964 Frame Length: 347 bytes (2776 bits) Capture Length: 347 bytes (2776 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 107.5.31.131 (107.5.31.131), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 333 Identification: 0x3ba2 (15266) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x3cef [correct] [Good: True] [Bad: False] Source: 107.5.31.131 (107.5.31.131) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 313 Checksum: 0x1fcb [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:WANIPConnection:\r\n USN: uuid:add80dd0-1dd1-11b2-81e5-b55d7f2bd43c::urn:schemas-upnp-org:service:WANIPConnection:\r\n \r\n No. Time Source Destination Protocol Length Info 965 0.061911000 107.5.31.131 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 965: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.663011000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.663011000 seconds [Time delta from previous captured frame: 0.000035000 seconds] [Time delta from previous displayed frame: 0.000035000 seconds] [Time since reference or first frame: 0.061911000 seconds] Frame Number: 965 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 107.5.31.131 (107.5.31.131), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0x3ba3 (15267) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x3cec [correct] [Good: True] [Bad: False] Source: 107.5.31.131 (107.5.31.131) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0x861e [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:\r\n USN: uuid:add0bf3a-1dd1-11b2-80f7-8aa4924fe279::urn:schemas-upnp-org:service:Layer3Forwarding:\r\n \r\n No. Time Source Destination Protocol Length Info 966 0.061943000 98.213.81.212 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 966: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.663043000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.663043000 seconds [Time delta from previous captured frame: 0.000032000 seconds] [Time delta from previous displayed frame: 0.000032000 seconds] [Time since reference or first frame: 0.061943000 seconds] Frame Number: 966 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 98.213.81.212 (98.213.81.212), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0xb857 (47191) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x9616 [correct] [Good: True] [Bad: False] Source: 98.213.81.212 (98.213.81.212) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0x97a5 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-upnp-org:service:Layer3Forwarding:\r\n USN: uuid:cc963dc8-1dd1-11b2-ba00-fb76aaf011c4::urn:schemas-upnp-org:service:Layer3Forwarding:\r\n \r\n No. Time Source Destination Protocol Length Info 967 0.061979000 98.213.81.212 [CENSORED] SSDP 349 HTTP/1.1 200 OK Frame 967: 349 bytes on wire (2792 bits), 349 bytes captured (2792 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.663079000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.663079000 seconds [Time delta from previous captured frame: 0.000036000 seconds] [Time delta from previous displayed frame: 0.000036000 seconds] [Time since reference or first frame: 0.061979000 seconds] Frame Number: 967 Frame Length: 349 bytes (2792 bits) Capture Length: 349 bytes (2792 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 98.213.81.212 (98.213.81.212), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 335 Identification: 0xb858 (47192) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x9615 [correct] [Good: True] [Bad: False] Source: 98.213.81.212 (98.213.81.212) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 315 Checksum: 0x8791 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-wifialliance-org:device:WFADevice:\r\n USN: uuid:cca2e4f6-1dd1-11b2-bec9-c0c18c08e700::urn:schemas-wifialliance-org:device:WFADevice:\r\n \r\n No. Time Source Destination Protocol Length Info 968 0.062010000 98.213.81.212 [CENSORED] SSDP 359 HTTP/1.1 200 OK Frame 968: 359 bytes on wire (2872 bits), 359 bytes captured (2872 bits) on interface 0 Interface id: 0 WTAP_ENCAP: 1 Arrival Time: Nov 23, 2014 12:41:55.663110000 EST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1416764515.663110000 seconds [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.062010000 seconds] Frame Number: 968 Frame Length: 359 bytes (2872 bits) Capture Length: 359 bytes (2872 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ip:udp:http] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Unispher_a1:5f:25 (00:90:1a:a1:5f:25), Dst: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Destination: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) Address: Actionte_ab:3c:5c (xx:xx:xx:xx:xx:xx) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) Address: Unispher_a1:5f:25 (00:90:1a:a1:5f:25) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IP (0x0800) Internet Protocol Version 4, Src: 98.213.81.212 (98.213.81.212), Dst: [CENSORED] ([CENSORED]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 345 Identification: 0xb859 (47193) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 251 Protocol: UDP (17) Header checksum: 0x960a [correct] [Good: True] [Bad: False] Source: 98.213.81.212 (98.213.81.212) Destination: [CENSORED] ([CENSORED]) [Source GeoIP: Unknown] [Destination GeoIP: Unknown] User Datagram Protocol, Src Port: ssdp (1900), Dst Port: http (80) Source port: ssdp (1900) Destination port: http (80) Length: 325 Checksum: 0x5e31 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [Message: HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: max-age=120\r\n EXT:\r\n Location: http://192.168.0.1:65535/rootDesc.xml\r\n Server: Linux/2.4.22-1.2115.nptl UPnP/1.0 miniupnpd/1.0\r\n ST: urn:schemas-wifialliance-org:service:WFAWLANConfig:\r\n USN: uuid:cca2e4f6-1dd1-11b2-bec9-c0c18c08e700::urn:schemas-wifialliance-org:service:WFAWLANConfig:\r\n \r\n