17:53:13.936760 10.3.1.1.1034 > 10.3.4.1.5003: S 1348859702:1348859702(0) win 5840 <mss 1460,sackOK,timestamp 471847 0,nop,wscale 0> (DF)
17:53:13.936827 10.3.4.1.5003 > 10.3.1.1.1034: S 2400215165:2400215165(0) ack 1348859703 win 5792 <mss 1460,sackOK,timestamp 77491 471847,nop,wscale 0> (DF)
17:53:13.937209 10.3.1.1.1034 > 10.3.4.1.5003: . ack 1 win 5840 <nop,nop,timestamp 471847 77491> (DF)
17:53:13.938005 10.3.4.1.32769 > 10.3.1.1.domain:  62599+ PTR? 1.4.3.10.in-addr.arpa. (39) (DF)
17:53:13.939844 10.3.1.1.domain > 10.3.4.1.32769:  62599 NXDomain 0/1/0 (116) (DF)
17:53:13.940175 10.3.4.1.32769 > 10.3.1.1.domain:  62600+ PTR? 1.1.3.10.in-addr.arpa. (39) (DF)
17:53:13.941900 10.3.1.1.domain > 10.3.4.1.32769:  62600 NXDomain 0/1/0 (116) (DF)
17:53:13.954064 10.3.1.1.1034 > 10.3.4.1.5003: P 1:449(448) ack 1 win 5840 <nop,nop,timestamp 471849 77491> (DF)
17:53:13.954105 10.3.4.1.5003 > 10.3.1.1.1034: . ack 449 win 6432 <nop,nop,timestamp 77492 471849> (DF)
17:53:42.876842 10.3.4.1.5003 > 10.3.1.1.1034: P 1:8(7) ack 449 win 6432 <nop,nop,timestamp 80385 471849> (DF)
17:53:42.877288 10.3.1.1.1034 > 10.3.4.1.5003: . ack 8 win 5840 <nop,nop,timestamp 474742 80385> (DF)
17:54:10.822268 10.3.4.1.5003 > 10.3.1.1.1034: P 8:32(24) ack 449 win 6432 <nop,nop,timestamp 83179 474742> (DF)
17:54:10.822718 10.3.1.1.1034 > 10.3.4.1.5003: . ack 32 win 5840 <nop,nop,timestamp 477537 83179> (DF)
17:54:14.627932 10.3.4.1.5003 > 10.3.1.1.1034: P 32:36(4) ack 449 win 6432 <nop,nop,timestamp 83560 477537> (DF)
17:54:14.628356 10.3.1.1.1034 > 10.3.4.1.5003: . ack 36 win 5840 <nop,nop,timestamp 477917 83560> (DF)
17:54:15.821254 arp who-has 10.3.4.1 tell 10.3.1.1
17:54:15.821282 arp reply 10.3.4.1 is-at 0:2:55:3b:f6:4d
17:54:22.609958 10.3.4.1.5003 > 10.3.1.1.1034: P 36:57(21) ack 449 win 6432 <nop,nop,timestamp 84358 477917> (DF)
17:54:22.610390 10.3.1.1.1034 > 10.3.4.1.5003: . ack 57 win 5840 <nop,nop,timestamp 478715 84358> (DF)
17:54:24.881252 10.3.4.1.5003 > 10.3.1.1.1034: P 57:61(4) ack 449 win 6432 <nop,nop,timestamp 84585 478715> (DF)
17:54:24.881670 10.3.1.1.1034 > 10.3.4.1.5003: . ack 61 win 5840 <nop,nop,timestamp 478943 84585> (DF)
17:54:46.434150 10.3.4.1.5003 > 10.3.1.1.1034: P 61:94(33) ack 449 win 6432 <nop,nop,timestamp 86740 478943> (DF)
17:54:46.434596 10.3.1.1.1034 > 10.3.4.1.5003: . ack 94 win 5840 <nop,nop,timestamp 481098 86740> (DF)
17:55:01.536115 10.3.4.1.5003 > 10.3.1.1.1034: P 94:102(8) ack 449 win 6432 <nop,nop,timestamp 88251 481098> (DF)
17:55:01.536545 10.3.1.1.1034 > 10.3.4.1.5003: . ack 102 win 5840 <nop,nop,timestamp 482608 88251> (DF)
17:55:04.229875 10.3.4.1.5003 > 10.3.1.1.1034: F 102:102(0) ack 449 win 6432 <nop,nop,timestamp 88520 482608> (DF)
17:55:04.266340 10.3.1.1.1034 > 10.3.4.1.5003: . ack 103 win 5840 <nop,nop,timestamp 482882 88520> (DF)
17:55:04.580410 10.3.1.1.1034 > 10.3.4.1.5003: F 449:449(0) ack 103 win 5840 <nop,nop,timestamp 482913 88520> (DF)
17:55:04.580453 10.3.4.1.5003 > 10.3.1.1.1034: . ack 450 win 6432 <nop,nop,timestamp 88555 482913> (DF)