140 44.917813 172.20.72.21 149.174.140.39 HTTP 348 GET / HTTP/1.1
143 44.948309 149.174.140.39 172.20.72.21 TCP 60 80 ? 10570 [ACK] Seq=1 Ack=295 Win=10816 Len=0
147 45.100552 149.174.140.39 172.20.72.21 TCP 1514 80 ? 10570 [ACK] Seq=1 Ack=295 Win=19000 Len=1460 [TCP segment of a reassembled PDU]
148 45.100553 149.174.140.39 172.20.72.21 TCP 293 80 ? 10570 [PSH, ACK] Seq=1461 Ack=295 Win=19000 Len=239 [TCP segment of a reassembled PDU]
149 45.100988 172.20.72.21 149.174.140.39 TCP 54 10570 ? 80 [ACK] Seq=295 Ack=1700 Win=65536 Len=0
2517 46.976307 152.163.66.141 172.20.72.21 TCP 1514 443 ? 10654 [PSH, ACK] Seq=1 Ack=191 Win=35304 Len=1460 [TCP segment of a reassembled PDU]
2518 46.976308 152.163.66.141 172.20.72.21 TCP 1514 443 ? 10654 [PSH, ACK] Seq=1461 Ack=191 Win=35304 Len=1460 [TCP segment of a reassembled PDU]
2519 46.976311 152.163.66.141 172.20.72.21 TLSv1.2 1084 Server Hello, Certificate, Server Hello Done
2520 46.976541 172.20.72.21 152.163.66.141 TCP 54 10654 ? 443 [ACK] Seq=191 Ack=3951 Win=65536 Len=0
2521 46.977661 172.20.72.21 152.163.66.141 TLSv1.2 396 Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
Analyze the dialog between the client and the server and respond to the following questions in a Word doc.
1. Describe what is happening in frames 140 and 143.
2. Describe what is happening in frames 140, 147, 148, and 149.
a) Describe what is occurring in frames 147 and 148. What is their relationship?
b) Describe what is happening in frame 149. Why is this happening?
3. Describe what is happening in frames 2517 to 2521.
4. After the initial packets are received from the server, the client automatically sends a new request as seen in packet 2555 without any user interaction. Describe why this occurs.
5. Explain what is occurring in packets 3912, 3942, 3943 and 3944.
6. Briefly describe what the user is doing (e.g., reading an email, uploading a document, using FTP, etc.).