18:55:10.933340 henley.stephenson.co.uk.1064 > quaking.stephenson.co.uk.domain: 33324+ (41)
18:55:10.950614 henley.stephenson.co.uk.1064 > quaking.stephenson.co.uk.domain: 33325+ (42)
18:55:10.955226 henley.stephenson.co.uk.1064 > quaking.stephenson.co.uk.domain: 33326+ (43)
18:55:14.185327 henley.stephenson.co.uk.1083 > quaking.stephenson.co.uk.dialmon: . ack 920502842 win 32120 <nop,nop,timestamp 19197844 9080007> (DF)
18:55:14.205304 henley.stephenson.co.uk.1083 > quaking.stephenson.co.uk.dialmon: . ack 11 win 32120 <nop,nop,timestamp 19197846 9080008> (DF)
18:55:19.185169 henley.stephenson.co.uk.1083 > quaking.stephenson.co.uk.dialmon: . ack 23 win 32120 <nop,nop,timestamp 19198344 9080507> (DF)
18:55:19.205142 henley.stephenson.co.uk.1083 > quaking.stephenson.co.uk.dialmon: . ack 33 win 32120 <nop,nop,timestamp 19198346 9080508> (DF)
18:55:21.105374 henley.stephenson.co.uk.1064 > quaking.stephenson.co.uk.domain: 57549+ (42)
18:55:21.110804 henley.stephenson.co.uk > quaking.stephenson.co.uk: icmp: echo request
18:55:21.252885 henley.stephenson.co.uk.ntp > sandford.stephenson.co.uk.3971: v3 server strat 0 poll 0 prec -18
18:55:21.253921 henley.stephenson.co.uk.1064 > quaking.stephenson.co.uk.domain: 33327+ (43)
18:55:22.105121 henley.stephenson.co.uk > quaking.stephenson.co.uk: icmp: echo request
18:55:23.105346 henley.stephenson.co.uk > quaking.stephenson.co.uk: icmp: echo request
18:55:23.685437 henley.stephenson.co.uk.netbios-dgm > 192.168.0.255.netbios-dgm: udp 213
18:55:23.685773 henley.stephenson.co.uk.netbios-dgm > 192.168.0.255.netbios-dgm: udp 207
18:55:24.105066 henley.stephenson.co.uk > quaking.stephenson.co.uk: icmp: echo request
18:55:24.185023 henley.stephenson.co.uk.1083 > quaking.stephenson.co.uk.dialmon: . ack 45 win 32120 <nop,nop,timestamp 19198844 9081007> (DF)
18:55:24.204999 henley.stephenson.co.uk.1083 > quaking.stephenson.co.uk.dialmon: . ack 55 win 32120 <nop,nop,timestamp 19198846 9081008> (DF)
18:55:25.105051 henley.stephenson.co.uk > quaking.stephenson.co.uk: icmp: echo request
18:55:26.104997 henley.stephenson.co.uk > quaking.stephenson.co.uk: icmp: echo request
18:55:26.244925 arp who-has sandford.stephenson.co.uk tell henley.stephenson.co.uk
18:55:27.104988 henley.stephenson.co.uk > quaking.stephenson.co.uk: icmp: echo request
18:55:28.104943 henley.stephenson.co.uk > quaking.stephenson.co.uk: icmp: echo request
18:55:29.184852 henley.stephenson.co.uk.1083 > quaking.stephenson.co.uk.dialmon: . ack 67 win 32120 <nop,nop,timestamp 19199344 9081507> (DF)
18:55:29.204824 henley.stephenson.co.uk.1083 > quaking.stephenson.co.uk.dialmon: . ack 77 win 32120 <nop,nop,timestamp 19199346 9081509> (DF)
