timestamp s-port sc-http-status sc-bytes sc-header-bytes c-port cs-bytes cs-header-bytes cs-method cs-url s-ip c-ip connection.time request.time response.time close.time idle.time0 idle.time1 cs-mime-type cs(Referer) cs(User-Agent) 914.170954 80 200 2119 1763 49214 235 0 GET http://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBS56bKHAoUD%2BOyl%2B0LhPg9JxyQm4gQUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMCEFIA5aolVvwahu2WydRLM8c%3D 23.55.155.27 192.168.1.106 0.035552 0.000000 0.035996 - 0.000152 0.014324 "application/ocsp-response" "-" "Microsoft-CryptoAPI/6.1" 929.757924 80 200 1951 1595 49224 230 0 GET http://sr.symcd.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBR0JBRnBp%2F14Jg%2FXj4aa6BlKlQVdQQUAVmr5906C1mmZGPWzyAHV9WR52oCEB8AC4suGGDADBOTgwigBIE%3D 23.51.123.27 192.168.1.106 0.022782 0.000000 0.023924 - 0.002524 3.854211 "application/ocsp-response" "-" "Microsoft-CryptoAPI/6.1" 914.221274 80 200 2016 1660 49214 237 0 GET http://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTSqZMG5M8TA9rdzkbCnNwuMAd5VgQUz5mp6nsm9EvJjo%2FX8AUm7%2BPSp50CEFHKAJgW%2Fb2A8SDgFe51gj4%3D 23.55.155.27 192.168.1.106 - 0.000000 0.036071 23.643701 - 23.643701 "application/ocsp-response" "-" "Microsoft-CryptoAPI/6.1" 933.636059 80 200 1951 1595 49224 230 0 GET http://sr.symcd.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBR0JBRnBp%2F14Jg%2FXj4aa6BlKlQVdQQUAVmr5906C1mmZGPWzyAHV9WR52oCEDTKPGchWeoyehsku7qiRZE%3D 23.51.123.27 192.168.1.106 - 0.000000 0.023459 - - 4.252527 "application/ocsp-response" "-" "Microsoft-CryptoAPI/6.1" 943.442778 80 200 796 471 49272 233 0 GET http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTfqhLjKLEJQZPin0KCzkdAQpVYowQUsT7DaQP4v0cB1JgmGggC72NkK8MCEAx5qUSwjBGVIJJhX%2BJrHYM%3D 93.184.220.29 192.168.1.106 0.007967 0.000000 0.010258 - 0.000158 0.016255 "application/ocsp-response" "-" "Microsoft-CryptoAPI/6.1" 945.182397 80 304 226 0 49286 258 0 GET http://crl.microsoft.com/pki/crl/products/tspca.crl 195.113.232.75 192.168.1.106 0.000930 0.000000 0.001283 - 0.000217 0.012331 "application/pkix-crl" "-" "Microsoft-CryptoAPI/6.1" 945.196011 80 304 226 0 49286 265 0 GET http://crl.microsoft.com/pki/crl/products/CodeSignPCA2.crl 195.113.232.75 192.168.1.106 - 0.000000 0.001195 - - 0.012777 "application/pkix-crl" "-" "Microsoft-CryptoAPI/6.1" 945.323425 80 200 2266 1776 49288 363 0 GET http://ocsp.godaddy.com//MEkwRzBFMEMwQTAJBgUrDgMCGgUABBS2CA1fbGt26xPkOKX4ZguoUjM0TgQUQMK9J47MNIMwojPX%2B2yz8LQsgM4CCFA%2B2Yq04zEW 188.121.36.239 192.168.1.106 0.014707 0.000000 0.014942 0.014548 0.000158 0.014548 "application/ocsp-response" "-" "Microsoft-CryptoAPI/6.1" 945.390072 80 200 796 471 49289 345 0 GET http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTfqhLjKLEJQZPin0KCzkdAQpVYowQUsT7DaQP4v0cB1JgmGggC72NkK8MCEATh56TcXPLzbcArQrhdFZ8%3D 93.184.220.29 192.168.1.106 0.007722 0.000000 0.008298 - 0.000457 0.012757 "application/ocsp-response" "-" "Microsoft-CryptoAPI/6.1" 929.453925 80 200 2119 1763 49220 234 0 GET http://s2.symcb.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBS56bKHAoUD%2BOyl%2B0LhPg9JxyQm4gQUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMCEH7hSm9v7%2FLTfz%2BtZU062rQ%3D 23.51.123.27 192.168.1.106 0.022850 0.000000 0.023343 18.417658 0.000241 18.417658 "application/ocsp-response" "-" "Microsoft-CryptoAPI/6.1" 943.491692 80 200 1783 1427 49273 228 0 GET http://g2.symcb.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBR6EHhJ4XUaQA4N26wwyKpLEnXRrAQULNVQQZcVi%2FCPNmFbSvtr2ZnJM5ICEG6KkOvP8ESKcg0IBdCCpUQ%3D 23.51.123.27 192.168.1.106 0.022636 0.000000 0.023068 8.212941 0.000165 8.212941 "application/ocsp-response" "-" "Microsoft-CryptoAPI/6.1" 937.912045 80 200 1951 1595 49224 230 0 GET http://sr.symcd.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBR0JBRnBp%2F14Jg%2FXj4aa6BlKlQVdQQUAVmr5906C1mmZGPWzyAHV9WR52oCEBnuRvIx0ln9o9yG9DAwZTI%3D 23.51.123.27 192.168.1.106 - 0.000000 0.023362 28.044638 - 28.044638 "application/ocsp-response" "-" "Microsoft-CryptoAPI/6.1" 946.156062 80 200 2119 1763 49292 312 0 GET http://s.symcd.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBS56bKHAoUD%2BOyl%2B0LhPg9JxyQm4gQUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMCEBkaMst1nJe4z6wRjdUSf0k%3D 23.51.123.27 192.168.1.106 0.022304 0.000000 0.022934 20.156280 0.000177 20.156280 "application/ocsp-response" "-" "Microsoft-CryptoAPI/6.1" 848.614880 80 200 2853 2138 49211 335 0 GET http://config.office.microsoft.com/config/?UILCID=1033&CLCID=1033&ILCID=1033&HelpLCID=1033&App={0638C49D-BB8B-4CD1-B191-051E8F325736}&build=12.0.4518 23.97.178.173 192.168.1.106 0.015840 0.000000 0.019291 120.477459 0.000219 120.477459 "text/xml" "-" "Microsoft Office/12.0 (Windows NT 6.1; Microsoft Office Word 12.0.4518; Pro)" 943.640070 80 200 1781 1425 49274 230 0 GET http://gm.symcd.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSqKwMUr2QuEw7WkiXj%2Fyq61z1iMAQU3s9cULeuAh8VF6oW6A21KJ1qWvMCEBsp4lwbFodPd9%2Fy4LHtUkI%3D 23.51.123.27 192.168.1.106 0.022331 0.000000 0.022898 26.416968 0.000155 26.416968 "application/ocsp-response" "-" "Microsoft-CryptoAPI/6.1" 914.36934 80 200 1793 1550 49213 139 0 GET http://csc3-2010-aia.verisign.com/CSC3-2010.cer 23.55.149.163 192.168.1.106 0.032725 0.000000 0.033104 60.232353 0.000198 60.232353 "text/plain" "-" "Microsoft-CryptoAPI/6.1" 945.518876 80 200 1980 1624 49290 315 0 GET http://sw.symcd.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSbgiNwvmjR4M%2B9oE39sZR%2FxyzMPwQUFmbeSjTjUKcRhgOxbKnGrM1ZbpsCEBD7cTMZAn8%2FHxwGZ7PDjKk%3D 23.51.123.27 192.168.1.106 0.022762 0.000000 0.023149 29.102201 0.000166 29.102201 "application/ocsp-response" "-" "Microsoft-CryptoAPI/6.1" 943.337340 80 200 52471 52122 49270 301 0 GET http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab 195.113.232.82 192.168.1.106 0.000821 0.000000 0.003040 - 0.000171 46.238052 "application/vnd.ms-cab-compressed" "-" "Microsoft-CryptoAPI/6.1" 943.469291 80 200 796 471 49272 233 0 GET http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRJ9L2KGL92BpjF3kAtaDtxauTmhgQUPdNQpdagre7zSmAKZdMh1Pj41g8CEAxZqYy%2B4LY6VknLzEtXLRg%3D 93.184.220.29 192.168.1.106 - 0.000000 0.008610 105.978398 - 105.978398 "application/ocsp-response" "-" "Microsoft-CryptoAPI/6.1" 945.411127 80 200 796 471 49289 353 0 GET http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTPJvUY%2Bsl%2Bj4yzQuAcL2oQno5fCgQUUWj%2FkK8CB3U8zNllZGKiErhZcjsCEAL6f%2BVpFDwlPlE8SWYKekk%3D 93.184.220.29 192.168.1.106 - 0.000000 0.008392 119.714067 - 119.714067 "application/ocsp-response" "-" "Microsoft-CryptoAPI/6.1" 945.209983 80 200 1595 1141 49286 281 0 GET http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl 195.113.232.75 192.168.1.106 - 0.000000 0.001431 119.922293 - 119.922293 "application/pkix-crl" "-" "Microsoft-CryptoAPI/6.1" 945.270916 80 304 248 0 49287 275 0 GET http://www.microsoft.com/pkiops/crl/MicCodSigPCA2011_2011-07-08.crl 23.4.249.223 192.168.1.106 0.001039 0.000000 0.007173 119.855717 0.004508 119.855717 "application/pkix-crl" "-" "Microsoft-CryptoAPI/6.1" 989.578432 80 200 1445 1090 49270 214 0 GET http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/8CF427FD790C3AD166068DE81E57EFBB932272D4.crt 195.113.232.82 192.168.1.106 - 0.000000 0.001701 106.046936 - 106.046936 "application/x-x509-ca-cert" "-" "Microsoft-CryptoAPI/6.1" 989.551027 80 200 1346 956 49357 133 0 GET http://ssl.trustwave.com/issuers/STCA.crt 104.123.200.36 192.168.1.106 0.001012 0.000000 0.001988 106.074179 0.000158 106.074179 "application/pkix-cert" "-" "Microsoft-CryptoAPI/6.1" 1400.298202 80 302 719 653 49366 203 0 HEAD http://redirector.gvt1.com/edgedl/release2/bZrirscUJVg/18.100.0_win_SoftwareReporter.crx 172.217.23.206 192.168.1.106 0.001603 0.000000 0.020946 - 0.000180 0.087662 "text/html; charset=UTF-8" "-" "Microsoft BITS/7.5" 1400.360700 80 200 399 977156 49367 515 0 HEAD http://r3---sn-jxnoxu-2gbe.gvt1.com/edgedl/release2/bZrirscUJVg/18.100.0_win_SoftwareReporter.crx?cms_redirect=yes&expire=1492714630&ip=147.32.83.56&ipbits=0&mm=28&mn=sn-jxnoxu-2gbe&ms=nvh&mt=1492700168&mv=m&pcm2cms=yes&pl=15&shardbypass=yes&sparams=expire,ip,ipbits,mm,mn,ms,mv,pcm2cms,pl,shardbypass&signature=BBE7176115F19B63E79255DA6647EED3C190E6.2C7BF485720089F52454741C9EDB1A2A10E76A6E&key=cms1 195.113.214.206 192.168.1.106 0.000877 0.000000 0.002974 - 0.000157 0.063645 "application/octet-stream" "-" "Microsoft BITS/7.5" 1400.406810 80 302 1332 631 49366 275 0 GET http://redirector.gvt1.com/edgedl/release2/bZrirscUJVg/18.100.0_win_SoftwareReporter.crx 172.217.23.206 192.168.1.106 - 0.000000 0.020160 - - 2.112276 "text/html; charset=UTF-8" "-" "Microsoft BITS/7.5" 1400.427319 80 206 2798 2352 49367 569 0 GET http://r3---sn-jxnoxu-2gbe.gvt1.com/edgedl/release2/bZrirscUJVg/18.100.0_win_SoftwareReporter.crx?cms_redirect=yes&expire=1492714630&ip=147.32.83.56&ipbits=0&mm=28&mn=sn-jxnoxu-2gbe&ms=nvh&mt=1492700168&mv=m&pl=15&shardbypass=yes&sparams=expire,ip,ipbits,mm,mn,ms,mv,pl,shardbypass&signature=4644CA24CCE1A5EAA9F36C27726A6DD170B9942D.15F1739C6E1967916937931F2000698A2B30AD23&key=cms1 195.113.214.206 192.168.1.106 - 0.000000 0.002134 - - 2.130679 "application/octet-stream" "-" "Microsoft BITS/7.5" 1402.539246 80 302 1376 655 49366 278 0 GET http://redirector.gvt1.com/edgedl/release2/bZrirscUJVg/18.100.0_win_SoftwareReporter.crx 172.217.23.206 192.168.1.106 - 0.000000 0.020484 - - 1.131573 "text/html; charset=UTF-8" "-" "Microsoft BITS/7.5" 1402.560132 80 206 3061 2612 49367 592 0 GET http://r3---sn-jxnoxu-2gbe.gvt1.com/edgedl/release2/bZrirscUJVg/18.100.0_win_SoftwareReporter.crx?cms_redirect=yes&expire=1492714632&ip=147.32.83.56&ipbits=0&mm=28&mn=sn-jxnoxu-2gbe&ms=nvh&mt=1492700168&mv=m&pcm2cms=yes&pl=15&shardbypass=yes&sparams=expire,ip,ipbits,mm,mn,ms,mv,pcm2cms,pl,shardbypass&signature=2A4F5B9FF9EFD63B7CCA17105F0063DCE9BD06A2.4C5F1D33479614FA4D60413A867A24E586EE69B8&key=cms1 195.113.214.206 192.168.1.106 - 0.000000 0.002338 - - 1.149628 "application/octet-stream" "-" "Microsoft BITS/7.5" 1403.691303 80 302 1376 655 49366 279 0 GET http://redirector.gvt1.com/edgedl/release2/bZrirscUJVg/18.100.0_win_SoftwareReporter.crx 172.217.23.206 192.168.1.106 - 0.000000 0.020336 - - 1.055232 "text/html; charset=UTF-8" "-" "Microsoft BITS/7.5" 1403.712098 80 206 6262 5812 49367 593 0 GET http://r3---sn-jxnoxu-2gbe.gvt1.com/edgedl/release2/bZrirscUJVg/18.100.0_win_SoftwareReporter.crx?cms_redirect=yes&expire=1492714633&ip=147.32.83.56&ipbits=0&mm=28&mn=sn-jxnoxu-2gbe&ms=nvh&mt=1492700168&mv=m&pcm2cms=yes&pl=15&shardbypass=yes&sparams=expire,ip,ipbits,mm,mn,ms,mv,pcm2cms,pl,shardbypass&signature=0918F1A69CB6BF4B34F037F54C1ECB9AC85A5E9F.1A799F72D8EE5DDA7E698B6565203913395398D9&key=cms1 195.113.214.206 192.168.1.106 - 0.000000 0.002106 - - 1.073453 "application/octet-stream" "-" "Microsoft BITS/7.5" 1404.766871 80 302 1376 655 49366 280 0 GET http://redirector.gvt1.com/edgedl/release2/bZrirscUJVg/18.100.0_win_SoftwareReporter.crx 172.217.23.206 192.168.1.106 - 0.000000 0.020375 - - 1.020978 "text/html; charset=UTF-8" "-" "Microsoft BITS/7.5" 1404.787657 80 206 12664 12212 49367 594 0 GET http://r3---sn-jxnoxu-2gbe.gvt1.com/edgedl/release2/bZrirscUJVg/18.100.0_win_SoftwareReporter.crx?cms_redirect=yes&expire=1492714634&ip=147.32.83.56&ipbits=0&mm=28&mn=sn-jxnoxu-2gbe&ms=nvh&mt=1492700168&mv=m&pcm2cms=yes&pl=15&shardbypass=yes&sparams=expire,ip,ipbits,mm,mn,ms,mv,pcm2cms,pl,shardbypass&signature=4ADA52540859D98D69D9A0D526BE4A53A5DE10F8.70E557C7DFA97FA9E781D89FC5A60F2A03176719&key=cms1 195.113.214.206 192.168.1.106 - 0.000000 0.002497 - - 1.039443 "application/octet-stream" "-" "Microsoft BITS/7.5" 1405.808224 80 302 1376 655 49366 280 0 GET http://redirector.gvt1.com/edgedl/release2/bZrirscUJVg/18.100.0_win_SoftwareReporter.crx 172.217.23.206 192.168.1.106 - 0.000000 0.020982 - - 1.000056 "text/html; charset=UTF-8" "-" "Microsoft BITS/7.5" 1405.829597 80 206 25464 25012 49367 594 0 GET http://r3---sn-jxnoxu-2gbe.gvt1.com/edgedl/release2/bZrirscUJVg/18.100.0_win_SoftwareReporter.crx?cms_redirect=yes&expire=1492714635&ip=147.32.83.56&ipbits=0&mm=28&mn=sn-jxnoxu-2gbe&ms=nvh&mt=1492700168&mv=m&pcm2cms=yes&pl=15&shardbypass=yes&sparams=expire,ip,ipbits,mm,mn,ms,mv,pcm2cms,pl,shardbypass&signature=0861ED55F833CB869B54851BBD2DFD2991BFF438.7B668FC80B10AEDAFE2B380B0294F6813A704078&key=cms1 195.113.214.206 192.168.1.106 - 0.000000 0.002896 - - 1.018509 "application/octet-stream" "-" "Microsoft BITS/7.5" 1406.829262 80 302 1376 655 49366 280 0 GET http://redirector.gvt1.com/edgedl/release2/bZrirscUJVg/18.100.0_win_SoftwareReporter.crx 172.217.23.206 192.168.1.106 - 0.000000 0.021319 - - 0.990346 "text/html; charset=UTF-8" "-" "Microsoft BITS/7.5" 1406.851002 80 206 51064 50612 49367 594 0 GET http://r3---sn-jxnoxu-2gbe.gvt1.com/edgedl/release2/bZrirscUJVg/18.100.0_win_SoftwareReporter.crx?cms_redirect=yes&expire=1492714636&ip=147.32.83.56&ipbits=0&mm=28&mn=sn-jxnoxu-2gbe&ms=nvh&mt=1492700168&mv=m&pcm2cms=yes&pl=15&shardbypass=yes&sparams=expire,ip,ipbits,mm,mn,ms,mv,pcm2cms,pl,shardbypass&signature=0654A8C223E571619C28CC9A13DC9F9D3EB7F2B4.4BE3D7C1D0784FEEDE21AB28A7BA47B9E4D3AB5F&key=cms1 195.113.214.206 192.168.1.106 - 0.000000 0.004213 - - 1.007410 "application/octet-stream" "-" "Microsoft BITS/7.5" 1407.840927 80 302 1376 655 49366 281 0 GET http://redirector.gvt1.com/edgedl/release2/bZrirscUJVg/18.100.0_win_SoftwareReporter.crx 172.217.23.206 192.168.1.106 - 0.000000 0.021324 - - 0.990321 "text/html; charset=UTF-8" "-" "Microsoft BITS/7.5" 1407.862625 80 206 102266 101812 49367 595 0 GET http://r3---sn-jxnoxu-2gbe.gvt1.com/edgedl/release2/bZrirscUJVg/18.100.0_win_SoftwareReporter.crx?cms_redirect=yes&expire=1492714638&ip=147.32.83.56&ipbits=0&mm=28&mn=sn-jxnoxu-2gbe&ms=nvh&mt=1492700168&mv=m&pcm2cms=yes&pl=15&shardbypass=yes&sparams=expire,ip,ipbits,mm,mn,ms,mv,pcm2cms,pl,shardbypass&signature=2CD2A2663F26FD1D248EBC21DE1531B02D14B715.7D0B81F6FEA7B9AC5392B30F84D04B71CE005F05&key=cms1 195.113.214.206 192.168.1.106 - 0.000000 0.005571 - - 1.129057 "application/octet-stream" "-" "Microsoft BITS/7.5" 1408.852572 80 302 1376 655 49366 282 0 GET http://redirector.gvt1.com/edgedl/release2/bZrirscUJVg/18.100.0_win_SoftwareReporter.crx 172.217.23.206 192.168.1.106 - 0.000000 0.144259 - - 1.869570 "text/html; charset=UTF-8" "-" "Microsoft BITS/7.5" 1408.997253 80 206 204667 204212 49367 596 0 GET http://r3---sn-jxnoxu-2gbe.gvt1.com/edgedl/release2/bZrirscUJVg/18.100.0_win_SoftwareReporter.crx?cms_redirect=yes&expire=1492714639&ip=147.32.83.56&ipbits=0&mm=28&mn=sn-jxnoxu-2gbe&ms=nvh&mt=1492700168&mv=m&pcm2cms=yes&pl=15&shardbypass=yes&sparams=expire,ip,ipbits,mm,mn,ms,mv,pcm2cms,pl,shardbypass&signature=23648E07DA91FE4791A208DE3370891087D988FF.791907AAD6A0E3519B29BC33E5894C19E32C4E82&key=cms1 195.113.214.206 192.168.1.106 - 0.000000 0.009131 - - 1.880701 "application/octet-stream" "-" "Microsoft BITS/7.5"