No.

Time Source Destination Protocol Length

Info
6 0.003987 10.147.110.13 10.128.172.9 HTTP 632
POST /adm/.php HTTP/1.1 (application/x-www-form-urlencoded)

Frame 6: 632 bytes on wire (5056 bits), 632 bytes captured (5056
bits)
Encapsulation type: Linux cooked-mode capture (25)
Arrival Time: Dec 3, 2018 09:02:23.382186000 Middle East
Standard Time
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1543820543.382186000 seconds
[Time delta from previous captured frame: 0.000031000 seconds]
[Time delta from previous displayed frame: 0.000031000 seconds]
[Time since reference or first frame: 0.003987000 seconds]
Frame Number: 6
Frame Length: 632 bytes (5056 bits)
Capture Length: 632 bytes (5056 bits)
[Frame is marked: True]
[Frame is ignored: False]
[Protocols in frame: sll:ethertype:ip:tcp:http:urlencoded-form]
[Number of per-protocol-data: 1]
[Hypertext Transfer Protocol, key 0]
[Coloring Rule Name: HTTP]
[Coloring Rule String: http || tcp.port == 80 || http2]
Linux cooked capture
Packet type: Sent by us (4)
Link-layer address type: 1
Link-layer address length: 6
Source: Vmware_86:96:a2 (00:50:56:86:96:a2)
Protocol: IP (0x0800)
Internet Protocol Version 4, Src: 10.147.110.13 (10.147.110.13), Dst:
10.19.12.102 (10.19.12.102)
Version: 4
Header Length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN:
0x00: Not-ECT (Not ECN-Capable Transport))
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-
Capable Transport) (0x00)
Total Length: 616
Identification: 0x8ed7 (36567)
Flags: 0x02 (Don't Fragment)
 0... .... = Reserved bit: Not set
.1.. .... = Don't fragment: Set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (6)
Header checksum: 0x1aa0 [correct]
[Good: True]
[Bad: False]
Source: 10.147.110.13 (10.147.110.13)
Destination: 10.19.12.102 (10.19.12.102)
[Source GeoIP: Unknown]
[Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: speedtrace (33334), Dst
Port: http (80), Seq: 5473, Ack: 1, Len: 564
Source Port: speedtrace (33334)
Destination Port: http (80)
[Stream index: 0]
[TCP Segment Len: 564]
Sequence number: 5473 (relative sequence number)
[Next sequence number: 6037 (relative sequence number)]
Acknowledgment number: 1 (relative ack number)
Header Length: 32 bytes
.... 0000 0001 1000 = Flags: 0x018 (PSH, ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Nonce: Not set
.... 0... .... = Congestion Window Reduced (CWR): Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 1... = Push: Set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
Window size value: 115
[Calculated window size: 14720]
[Window size scaling factor: 128]
Checksum: 0x9173 [validation disabled]
[Good Checksum: False]
[Bad Checksum: False]
Urgent pointer: 0
Options: (12 bytes), No-Operation (NOP), No-Operation (NOP),
Timestamps
 No-Operation (NOP)
Type: 1
0... .... = Copy on fragmentation: No
.00. .... = Class: Control (0)
...0 0001 = Number: No-Operation (NOP) (1)
No-Operation (NOP)
Type: 1
0... .... = Copy on fragmentation: No
.00. .... = Class: Control (0)
...0 0001 = Number: No-Operation (NOP) (1)
Timestamps: TSval 3333860384, TSecr 2830572507
Kind: Timestamp (8)
Length: 10
Timestamp value: 3333860384
Timestamp echo reply: 2830572507
[SEQ/ACK analysis]
[Bytes in flight: 6036]
TCP segment data (564 bytes)
[3 Reassembled TCP Segments (6036 bytes): #4(2736), #5(2736),
#6(564)]
[Frame: 4, payload: 0-2735 (2736 bytes)]
[Frame: 5, payload: 2736-5471 (2736 bytes)]
[Frame: 6, payload: 5472-6035 (564 bytes)]
[Segment count: 3]
[Reassembled TCP length: 6036]
[Reassembled TCP Data:
504f5354202f61646d2f61646d5f747269676765722e7068...]
Hypertext Transfer Protocol
POST /adm/.php HTTP/1.1\r\n
[Expert Info (Chat/Sequence): POST /adm/.php HTTP/1.1\r\n]
[POST /adm/.php HTTP/1.1\r\n]
[Severity level: Chat]
[Group: Sequence]
Request Method: POST
Request URI: /adm/.php
Request Version: HTTP/1.1
TE: deflate,gzip;q=0.3\r\n
Connection: TE, close\r\n
Host: 10.19.12.102\r\n
User-Agent: libwww-perl/5.833\r\n
Content-Length: 5829\r\n
[Content length: 5829]
Content-Type: application/x-www-form-urlencoded\r\n
 \r\n
[Full request URI: http://10.19.12.102/adm/.php]
[HTTP request 1/1]
[Response in frame: 8]
HTML Form URL Encoded: application/x-www-form-urlencoded
Form item: "data" =
"[{"msisdn":"6285893358890","imsi":"510019330393443","imei":"868
14803821920","lacci":"15f010407f56c400","source":"7","timestamp":
"2018-12-13 11:07:18"},
{"msisdn":"6285706826270","imsi":"510010645888408","imei":"3597
390
Key: data
Value [truncated]:
[{"msisdn":"6285893358890","imsi":"510019330393443","imei":"868
14803821920","lacci":"15f010407f56c400","source":"7","timestamp":
"2018-12-13
11:07:18"},\n{"msisdn":"6285706826270","imsi":"510010645888408","
imei":"35973904

No. Time Source Destination Protocol Length

Info
16 0.676544 10.147.110.13 10.19.12.102 HTTP 164
POST /adm/.php HTTP/1.1 (application/x-www-form-urlencoded)

Frame 16: 164 bytes on wire (1312 bits), 164 bytes captured (1312
bits)
Encapsulation type: Linux cooked-mode capture (25)
Arrival Time: Dec 3, 2018 09:02:24.054743000 Middle East
Standard Time
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1543820544.054743000 seconds
[Time delta from previous captured frame: 0.000021000 seconds]
[Time delta from previous displayed frame: 0.000021000 seconds]
[Time since reference or first frame: 0.676544000 seconds]
Frame Number: 16
Frame Length: 164 bytes (1312 bits)
Capture Length: 164 bytes (1312 bits)
[Frame is marked: True]
[Frame is ignored: False]
[Protocols in frame: sll:ethertype:ip:tcp:http:urlencoded-form]
[Number of per-protocol-data: 1]
[Hypertext Transfer Protocol, key 0]
[Coloring Rule Name: HTTP]
 [Coloring Rule String: http || tcp.port == 80 || http2]
Linux cooked capture
Packet type: Sent by us (4)
Link-layer address type: 1
Link-layer address length: 6
Source: Vmware_86:96:a2 (00:50:56:86:96:a2)
Protocol: IP (0x0800)
Internet Protocol Version 4, Src: 10.147.110.13 (10.147.110.13), Dst:
10.19.12.102 (10.19.12.102)
Version: 4
Header Length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN:
0x00: Not-ECT (Not ECN-Capable Transport))
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-
Capable Transport) (0x00)
Total Length: 148
Identification: 0x6cef (27887)
Flags: 0x02 (Don't Fragment)
0... .... = Reserved bit: Not set
.1.. .... = Don't fragment: Set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (6)
Header checksum: 0x3e5c [correct]
[Good: True]
[Bad: False]
Source: 10.147.110.13 (10.147.110.13)
Destination: 10.19.12.102 (10.19.12.102)
[Source GeoIP: Unknown]
[Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: 33336 (33336), Dst Port:
http (80), Seq: 5473, Ack: 1, Len: 96
Source Port: 33336 (33336)
Destination Port: http (80)
[Stream index: 1]
[TCP Segment Len: 96]
Sequence number: 5473 (relative sequence number)
[Next sequence number: 5569 (relative sequence number)]
Acknowledgment number: 1 (relative ack number)
Header Length: 32 bytes
.... 0000 0001 1000 = Flags: 0x018 (PSH, ACK)
 000. .... .... = Reserved: Not set
...0 .... .... = Nonce: Not set
.... 0... .... = Congestion Window Reduced (CWR): Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 1... = Push: Set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
Window size value: 115
[Calculated window size: 14720]
[Window size scaling factor: 128]
Checksum: 0x8f9f [validation disabled]
[Good Checksum: False]
[Bad Checksum: False]
Urgent pointer: 0
Options: (12 bytes), No-Operation (NOP), No-Operation (NOP),
Timestamps
No-Operation (NOP)
Type: 1
0... .... = Copy on fragmentation: No
.00. .... = Class: Control (0)
...0 0001 = Number: No-Operation (NOP) (1)
No-Operation (NOP)
Type: 1
0... .... = Copy on fragmentation: No
.00. .... = Class: Control (0)
...0 0001 = Number: No-Operation (NOP) (1)
Timestamps: TSval 3333861057, TSecr 2830573180
Kind: Timestamp (8)
Length: 10
Timestamp value: 3333861057
Timestamp echo reply: 2830573180
[SEQ/ACK analysis]
[Bytes in flight: 5568]
TCP segment data (96 bytes)
[3 Reassembled TCP Segments (5568 bytes): #14(4104), #15(1368),
#16(96)]
[Frame: 14, payload: 0-4103 (4104 bytes)]
[Frame: 15, payload: 4104-5471 (1368 bytes)]
[Frame: 16, payload: 5472-5567 (96 bytes)]
[Segment count: 3]
 [Reassembled TCP length: 5568]
[Reassembled TCP Data:
504f5354202f61646d2f61646d5f747269676765722e7068...]
Hypertext Transfer Protocol
POST /adm/.php HTTP/1.1\r\n
[Expert Info (Chat/Sequence): POST /adm/.php HTTP/1.1\r\n]
[POST /adm/.php HTTP/1.1\r\n]
[Severity level: Chat]
[Group: Sequence]
Request Method: POST
Request URI: /adm/.php
Request Version: HTTP/1.1
TE: deflate,gzip;q=0.3\r\n
Connection: TE, close\r\n
Host: 10.19.12.102\r\n
User-Agent: libwww-perl/5.833\r\n
Content-Length: 5361\r\n
[Content length: 5361]
Content-Type: application/x-www-form-urlencoded\r\n
\r\n
[Full request URI: http://10.19.12.102/adm/.php]
[HTTP request 1/1]
[Response in frame: 19]
HTML Form URL Encoded: application/x-www-form-urlencoded
Form item: "data" =
"[{"msisdn":"6285871677208","imsi":"510017133510418","imei":"354
85308223585","lacci":"15f01023c3907700","source":"1","timestamp
":"2018-12-13 14:02:19"},
{"msisdn":"6285745572780","imsi":"510014545910527","imei":"11111
11
Key: data
Value [truncated]:
[{"msisdn":"6285871677208","imsi":"510017133510418","imei":"3548
5308223585","lacci":"15f01023c3907700","source":"1","timestamp":
"2018-12-13
14:02:19"},\n{"msisdn":"6285745572780","imsi":"510014545910527","
imei":"11111111

No. Time Source Destination Protocol Length

Info
34 1.242994 10.147.110.13 10.19.12.102 HTTP 165
POST /adm/.php HTTP/1.1 (application/x-www-form-urlencoded)
Frame 34: 165 bytes on wire (1320 bits), 165 bytes captured (1320
bits)
Encapsulation type: Linux cooked-mode capture (25)
Arrival Time: Dec 3, 2018 09:02:24.621193000 Middle East
Standard Time
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1543820544.621193000 seconds
[Time delta from previous captured frame: 0.000017000 seconds]
[Time delta from previous displayed frame: 0.000017000 seconds]
[Time since reference or first frame: 1.242994000 seconds]
Frame Number: 34
Frame Length: 165 bytes (1320 bits)
Capture Length: 165 bytes (1320 bits)
[Frame is marked: True]
[Frame is ignored: False]
[Protocols in frame: sll:ethertype:ip:tcp:http:urlencoded-form]
[Number of per-protocol-data: 1]
[Hypertext Transfer Protocol, key 0]
[Coloring Rule Name: HTTP]
[Coloring Rule String: http || tcp.port == 80 || http2]
Linux cooked capture
Packet type: Sent by us (4)
Link-layer address type: 1
Link-layer address length: 6
Source: Vmware_86:96:a2 (00:50:56:86:96:a2)
Protocol: IP (0x0800)
Internet Protocol Version 4, Src: 10.147.110.13 (10.147.110.13), Dst:
10.19.12.102 (10.19.12.102)
Version: 4
Header Length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN:
0x00: Not-ECT (Not ECN-Capable Transport))
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-
Capable Transport) (0x00)
Total Length: 149
Identification: 0x962b (38443)
Flags: 0x02 (Don't Fragment)
0... .... = Reserved bit: Not set
.1.. .... = Don't fragment: Set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
 Protocol: TCP (6)
Header checksum: 0x151f [correct]
[Good: True]
[Bad: False]
Source: 10.147.110.13 (10.147.110.13)
Destination: 10.19.12.102 (10.19.12.102)
[Source GeoIP: Unknown]
[Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: 33340 (33340), Dst Port:
http (80), Seq: 5473, Ack: 1, Len: 97
Source Port: 33340 (33340)
Destination Port: http (80)
[Stream index: 3]
[TCP Segment Len: 97]
Sequence number: 5473 (relative sequence number)
[Next sequence number: 5570 (relative sequence number)]
Acknowledgment number: 1 (relative ack number)
Header Length: 32 bytes
.... 0000 0001 1000 = Flags: 0x018 (PSH, ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Nonce: Not set
.... 0... .... = Congestion Window Reduced (CWR): Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 1... = Push: Set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
Window size value: 115
[Calculated window size: 14720]
[Window size scaling factor: 128]
Checksum: 0x8fa0 [validation disabled]
[Good Checksum: False]
[Bad Checksum: False]
Urgent pointer: 0
Options: (12 bytes), No-Operation (NOP), No-Operation (NOP),
Timestamps
No-Operation (NOP)
Type: 1
0... .... = Copy on fragmentation: No
.00. .... = Class: Control (0)
...0 0001 = Number: No-Operation (NOP) (1)
 No-Operation (NOP)
Type: 1
0... .... = Copy on fragmentation: No
.00. .... = Class: Control (0)
...0 0001 = Number: No-Operation (NOP) (1)
Timestamps: TSval 3333861623, TSecr 2830573747
Kind: Timestamp (8)
Length: 10
Timestamp value: 3333861623
Timestamp echo reply: 2830573747
[SEQ/ACK analysis]
[Bytes in flight: 5569]
TCP segment data (97 bytes)
[3 Reassembled TCP Segments (5569 bytes): #32(4104), #33(1368),
#34(97)]
[Frame: 32, payload: 0-4103 (4104 bytes)]
[Frame: 33, payload: 4104-5471 (1368 bytes)]
[Frame: 34, payload: 5472-5568 (97 bytes)]
[Segment count: 3]
[Reassembled TCP length: 5569]
[Reassembled TCP Data:
504f5354202f61646d2f61646d5f747269676765722e7068...]
Hypertext Transfer Protocol
POST /adm/.php HTTP/1.1\r\n
[Expert Info (Chat/Sequence): POST /adm/.php HTTP/1.1\r\n]
[POST /adm/.php HTTP/1.1\r\n]
[Severity level: Chat]
[Group: Sequence]
Request Method: POST
Request URI: /adm/.php
Request Version: HTTP/1.1
TE: deflate,gzip;q=0.3\r\n
Connection: TE, close\r\n
Host: 10.19.12.102\r\n
User-Agent: libwww-perl/5.833\r\n
Content-Length: 5362\r\n
[Content length: 5362]
Content-Type: application/x-www-form-urlencoded\r\n
\r\n
[Full request URI: http://10.19.12.102/adm/.php]
[HTTP request 1/1]
[Response in frame: 40]
HTML Form URL Encoded: application/x-www-form-urlencoded
 Form item: "data" =
"[{"msisdn":"6281556547882","imsi":"510015612355422","imei":"867
81503859112","lacci":"0000000000000000","source":"7","timestamp
":"2018-12-13 14:02:19"},
{"msisdn":"6281542143508","imsi":"510014215683592","imei":"11111
11
Key: data
Value [truncated]:
[{"msisdn":"6281556547882","imsi":"510015612355422","imei":"8678
1503859112","lacci":"0000000000000000","source":"7","timestamp"
:"2018-12-13
14:02:19"},\n{"msisdn":"6281542143508","imsi":"510014215683592","
imei":"11111111

No. Time Source Destination Protocol Length

Info
57 1.889763 10.147.110.13 10.19.12.102 HTTP 630
POST /adm/.php HTTP/1.1 (application/x-www-form-urlencoded)

Frame 57: 630 bytes on wire (5040 bits), 630 bytes captured (5040
bits)
Encapsulation type: Linux cooked-mode capture (25)
Arrival Time: Dec 3, 2018 09:02:25.267962000 Middle East
Standard Time
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1543820545.267962000 seconds
[Time delta from previous captured frame: 0.000013000 seconds]
[Time delta from previous displayed frame: 0.000013000 seconds]
[Time since reference or first frame: 1.889763000 seconds]
Frame Number: 57
Frame Length: 630 bytes (5040 bits)
Capture Length: 630 bytes (5040 bits)
[Frame is marked: True]
[Frame is ignored: False]
[Protocols in frame: sll:ethertype:ip:tcp:http:urlencoded-form]
[Number of per-protocol-data: 1]
[Hypertext Transfer Protocol, key 0]
[Coloring Rule Name: HTTP]
[Coloring Rule String: http || tcp.port == 80 || http2]
Linux cooked capture
Packet type: Sent by us (4)
Link-layer address type: 1
Link-layer address length: 6
 Source: Vmware_86:96:a2 (00:50:56:86:96:a2)
Protocol: IP (0x0800)
Internet Protocol Version 4, Src: 10.147.110.13 (10.147.110.13), Dst:
10.19.12.102 (10.19.12.102)
Version: 4
Header Length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN:
0x00: Not-ECT (Not ECN-Capable Transport))
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-
Capable Transport) (0x00)
Total Length: 614
Identification: 0xa5db (42459)
Flags: 0x02 (Don't Fragment)
0... .... = Reserved bit: Not set
.1.. .... = Don't fragment: Set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (6)
Header checksum: 0x039e [correct]
[Good: True]
[Bad: False]
Source: 10.147.110.13 (10.147.110.13)
Destination: 10.19.12.102 (10.19.12.102)
[Source GeoIP: Unknown]
[Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: 33344 (33344), Dst Port:
http (80), Seq: 5473, Ack: 1, Len: 562
Source Port: 33344 (33344)
Destination Port: http (80)
[Stream index: 5]
[TCP Segment Len: 562]
Sequence number: 5473 (relative sequence number)
[Next sequence number: 6035 (relative sequence number)]
Acknowledgment number: 1 (relative ack number)
Header Length: 32 bytes
.... 0000 0001 1000 = Flags: 0x018 (PSH, ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Nonce: Not set
.... 0... .... = Congestion Window Reduced (CWR): Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
 .... ...1 .... = Acknowledgment: Set
.... .... 1... = Push: Set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
Window size value: 115
[Calculated window size: 14720]
[Window size scaling factor: 128]
Checksum: 0x9171 [validation disabled]
[Good Checksum: False]
[Bad Checksum: False]
Urgent pointer: 0
Options: (12 bytes), No-Operation (NOP), No-Operation (NOP),
Timestamps
No-Operation (NOP)
Type: 1
0... .... = Copy on fragmentation: No
.00. .... = Class: Control (0)
...0 0001 = Number: No-Operation (NOP) (1)
No-Operation (NOP)
Type: 1
0... .... = Copy on fragmentation: No
.00. .... = Class: Control (0)
...0 0001 = Number: No-Operation (NOP) (1)
Timestamps: TSval 3333862270, TSecr 2830574393
Kind: Timestamp (8)
Length: 10
Timestamp value: 3333862270
Timestamp echo reply: 2830574393
[SEQ/ACK analysis]
[Bytes in flight: 6034]
TCP segment data (562 bytes)
[3 Reassembled TCP Segments (6034 bytes): #55(4104), #56(1368),
#57(562)]
[Frame: 55, payload: 0-4103 (4104 bytes)]
[Frame: 56, payload: 4104-5471 (1368 bytes)]
[Frame: 57, payload: 5472-6033 (562 bytes)]
[Segment count: 3]
[Reassembled TCP length: 6034]
[Reassembled TCP Data:
504f5354202f61646d2f61646d5f747269676765722e7068...]
Hypertext Transfer Protocol
POST /adm/.php HTTP/1.1\r\n
 [Expert Info (Chat/Sequence): POST /adm/.php HTTP/1.1\r\n]
[POST /adm/.php HTTP/1.1\r\n]
[Severity level: Chat]
[Group: Sequence]
Request Method: POST
Request URI: /adm/.php
Request Version: HTTP/1.1
TE: deflate,gzip;q=0.3\r\n
Connection: TE, close\r\n
Host: 10.19.12.102\r\n
User-Agent: libwww-perl/5.833\r\n
Content-Length: 5827\r\n
[Content length: 5827]
Content-Type: application/x-www-form-urlencoded\r\n
\r\n
[Full request URI: http://10.19.12.102/adm/.php]
[HTTP request 1/1]
[Response in frame: 59]
HTML Form URL Encoded: application/x-www-form-urlencoded
Form item: "data" =
"[{"msisdn":"628567213123","imsi":"510017260431446","imei":"3543
2204248805","lacci":"15f010406c558300","source":"3","timestamp":
"2018-12-13 14:02:20"},
{"msisdn":"6285591350045","imsi":"510019150335653","imei":"3518
0309
Key: data
Value [truncated]:
[{"msisdn":"628567213123","imsi":"510017260431446","imei":"35432
204248805","lacci":"15f010406c558300","source":"3","timestamp":"
2018-12-13
14:02:20"},\n{"msisdn":"6285591350045","imsi":"510019150335653","
imei":"351803092

No. Time Source Destination Protocol Length

Info
67 2.659411 10.147.110.13 10.19.12.102 HTTP 167
POST /adm/.php HTTP/1.1 (application/x-www-form-urlencoded)

Frame 67: 167 bytes on wire (1336 bits), 167 bytes captured (1336
bits)
Encapsulation type: Linux cooked-mode capture (25)
Arrival Time: Dec 3, 2018 09:02:26.037610000 Middle East
Standard Time
 [Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1543820546.037610000 seconds
[Time delta from previous captured frame: 0.000011000 seconds]
[Time delta from previous displayed frame: 0.000011000 seconds]
[Time since reference or first frame: 2.659411000 seconds]
Frame Number: 67
Frame Length: 167 bytes (1336 bits)
Capture Length: 167 bytes (1336 bits)
[Frame is marked: True]
[Frame is ignored: False]
[Protocols in frame: sll:ethertype:ip:tcp:http:urlencoded-form]
[Number of per-protocol-data: 1]
[Hypertext Transfer Protocol, key 0]
[Coloring Rule Name: HTTP]
[Coloring Rule String: http || tcp.port == 80 || http2]
Linux cooked capture
Packet type: Sent by us (4)
Link-layer address type: 1
Link-layer address length: 6
Source: Vmware_86:96:a2 (00:50:56:86:96:a2)
Protocol: IP (0x0800)
Internet Protocol Version 4, Src: 10.147.110.13 (10.147.110.13), Dst:
10.19.12.102 (10.19.12.102)
Version: 4
Header Length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN:
0x00: Not-ECT (Not ECN-Capable Transport))
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-
Capable Transport) (0x00)
Total Length: 151
Identification: 0xc284 (49796)
Flags: 0x02 (Don't Fragment)
0... .... = Reserved bit: Not set
.1.. .... = Don't fragment: Set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (6)
Header checksum: 0xe8c3 [correct]
[Good: True]
[Bad: False]
Source: 10.147.110.13 (10.147.110.13)
 Destination: 10.19.12.102 (10.19.12.102)
[Source GeoIP: Unknown]
[Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: 33346 (33346), Dst Port:
http (80), Seq: 5473, Ack: 1, Len: 99
Source Port: 33346 (33346)
Destination Port: http (80)
[Stream index: 6]
[TCP Segment Len: 99]
Sequence number: 5473 (relative sequence number)
[Next sequence number: 5572 (relative sequence number)]
Acknowledgment number: 1 (relative ack number)
Header Length: 32 bytes
.... 0000 0001 1000 = Flags: 0x018 (PSH, ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Nonce: Not set
.... 0... .... = Congestion Window Reduced (CWR): Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 1... = Push: Set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
Window size value: 115
[Calculated window size: 14720]
[Window size scaling factor: 128]
Checksum: 0x8fa2 [validation disabled]
[Good Checksum: False]
[Bad Checksum: False]
Urgent pointer: 0
Options: (12 bytes), No-Operation (NOP), No-Operation (NOP),
Timestamps
No-Operation (NOP)
Type: 1
0... .... = Copy on fragmentation: No
.00. .... = Class: Control (0)
...0 0001 = Number: No-Operation (NOP) (1)
No-Operation (NOP)
Type: 1
0... .... = Copy on fragmentation: No
.00. .... = Class: Control (0)
...0 0001 = Number: No-Operation (NOP) (1)
 Timestamps: TSval 3333863039, TSecr 2830575163
Kind: Timestamp (8)
Length: 10
Timestamp value: 3333863039
Timestamp echo reply: 2830575163
[SEQ/ACK analysis]
[Bytes in flight: 5571]
TCP segment data (99 bytes)
[3 Reassembled TCP Segments (5571 bytes): #65(4104), #66(1368),
#67(99)]
[Frame: 65, payload: 0-4103 (4104 bytes)]
[Frame: 66, payload: 4104-5471 (1368 bytes)]
[Frame: 67, payload: 5472-5570 (99 bytes)]
[Segment count: 3]
[Reassembled TCP length: 5571]
[Reassembled TCP Data:
504f5354202f61646d2f61646d5f747269676765722e7068...]
Hypertext Transfer Protocol
POST /adm/.php HTTP/1.1\r\n
[Expert Info (Chat/Sequence): POST /adm/.php HTTP/1.1\r\n]
[POST /adm/.php HTTP/1.1\r\n]
[Severity level: Chat]
[Group: Sequence]
Request Method: POST
Request URI: /adm/.php
Request Version: HTTP/1.1
TE: deflate,gzip;q=0.3\r\n
Connection: TE, close\r\n
Host: 10.19.12.102\r\n
User-Agent: libwww-perl/5.833\r\n
Content-Length: 5364\r\n
[Content length: 5364]
Content-Type: application/x-www-form-urlencoded\r\n
\r\n
[Full request URI: http://10.19.12.102/adm/.php]
[HTTP request 1/1]
[Response in frame: 69]
HTML Form URL Encoded: application/x-www-form-urlencoded
Form item: "data" =
"[{"msisdn":"6285842994015","imsi":"510014231710473","imei":"868
41703063854","lacci":"15f0100bf8233500","source":"7","timestamp"
:"2018-12-13 14:02:21"},
{"msisdn":"6285830811601","imsi":"510013032646210","imei":"3548
440
Key: data
Value [truncated]:
[{"msisdn":"6285842994015","imsi":"510014231710473","imei":"8684
1703063854","lacci":"15f0100bf8233500","source":"7","timestamp":"
2018-12-13
14:02:21"},\n{"msisdn":"6285830811601","imsi":"510013032646210","
imei":"35484404

No. Time Source Destination Protocol Length

Info
87 3.711012 10.147.110.13 10.19.12.102 HTTP 396
POST /adm/.php HTTP/1.1 (application/x-www-form-urlencoded)

Frame 87: 396 bytes on wire (3168 bits), 396 bytes captured (3168
bits)
Encapsulation type: Linux cooked-mode capture (25)
Arrival Time: Dec 3, 2018 09:02:27.089211000 Middle East
Standard Time
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1543820547.089211000 seconds
[Time delta from previous captured frame: 0.000020000 seconds]
[Time delta from previous displayed frame: 0.000020000 seconds]
[Time since reference or first frame: 3.711012000 seconds]
Frame Number: 87
Frame Length: 396 bytes (3168 bits)
Capture Length: 396 bytes (3168 bits)
[Frame is marked: True]
[Frame is ignored: False]
[Protocols in frame: sll:ethertype:ip:tcp:http:urlencoded-form]
[Number of per-protocol-data: 1]
[Hypertext Transfer Protocol, key 0]
[Coloring Rule Name: HTTP]
[Coloring Rule String: http || tcp.port == 80 || http2]
Linux cooked capture
Packet type: Sent by us (4)
Link-layer address type: 1
Link-layer address length: 6
Source: Vmware_86:96:a2 (00:50:56:86:96:a2)
Protocol: IP (0x0800)
Internet Protocol Version 4, Src: 10.147.110.13 (10.147.110.13), Dst:
10.19.12.102 (10.19.12.102)
Version: 4
 Header Length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN:
0x00: Not-ECT (Not ECN-Capable Transport))
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-
Capable Transport) (0x00)
Total Length: 380
Identification: 0xdcda (56538)
Flags: 0x02 (Don't Fragment)
0... .... = Reserved bit: Not set
.1.. .... = Don't fragment: Set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (6)
Header checksum: 0xcd88 [correct]
[Good: True]
[Bad: False]
Source: 10.147.110.13 (10.147.110.13)
Destination: 10.19.12.102 (10.19.12.102)
[Source GeoIP: Unknown]
[Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: 33350 (33350), Dst Port:
http (80), Seq: 5473, Ack: 1, Len: 328
Source Port: 33350 (33350)
Destination Port: http (80)
[Stream index: 8]
[TCP Segment Len: 328]
Sequence number: 5473 (relative sequence number)
[Next sequence number: 5801 (relative sequence number)]
Acknowledgment number: 1 (relative ack number)
Header Length: 32 bytes
.... 0000 0001 1000 = Flags: 0x018 (PSH, ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Nonce: Not set
.... 0... .... = Congestion Window Reduced (CWR): Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 1... = Push: Set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
 Window size value: 115
[Calculated window size: 14720]
[Window size scaling factor: 128]
Checksum: 0x9087 [validation disabled]
[Good Checksum: False]
[Bad Checksum: False]
Urgent pointer: 0
Options: (12 bytes), No-Operation (NOP), No-Operation (NOP),
Timestamps
No-Operation (NOP)
Type: 1
0... .... = Copy on fragmentation: No
.00. .... = Class: Control (0)
...0 0001 = Number: No-Operation (NOP) (1)
No-Operation (NOP)
Type: 1
0... .... = Copy on fragmentation: No
.00. .... = Class: Control (0)
...0 0001 = Number: No-Operation (NOP) (1)
Timestamps: TSval 3333864091, TSecr 2830576214
Kind: Timestamp (8)
Length: 10
Timestamp value: 3333864091
Timestamp echo reply: 2830576214
[SEQ/ACK analysis]
[Bytes in flight: 5800]
TCP segment data (328 bytes)
[3 Reassembled TCP Segments (5800 bytes): #85(2736), #86(2736),
#87(328)]
[Frame: 85, payload: 0-2735 (2736 bytes)]
[Frame: 86, payload: 2736-5471 (2736 bytes)]
[Frame: 87, payload: 5472-5799 (328 bytes)]
[Segment count: 3]
[Reassembled TCP length: 5800]
[Reassembled TCP Data:
504f5354202f61646d2f61646d5f747269676765722e7068...]
Hypertext Transfer Protocol
POST /adm/.php HTTP/1.1\r\n
[Expert Info (Chat/Sequence): POST /adm/.php HTTP/1.1\r\n]
[POST /adm/.php HTTP/1.1\r\n]
[Severity level: Chat]
[Group: Sequence]
Request Method: POST
 Request URI: /adm/.php
Request Version: HTTP/1.1
TE: deflate,gzip;q=0.3\r\n
Connection: TE, close\r\n
Host: 10.19.12.102\r\n
User-Agent: libwww-perl/5.833\r\n
Content-Length: 5593\r\n
[Content length: 5593]
Content-Type: application/x-www-form-urlencoded\r\n
\r\n
[Full request URI: http://10.19.12.102/adm/.php]
[HTTP request 1/1]
[Response in frame: 90]
HTML Form URL Encoded: application/x-www-form-urlencoded
Form item: "data" =
"[{"msisdn":"628558325448","imsi":"510018350118863","imei":"3519
2808584254","lacci":"15f0100c7755d500","source":"7","timestamp":
"2018-12-13 14:02:22"},
{"msisdn":"6285886087610","imsi":"510018631715432","imei":"11111
111
Key: data
Value [truncated]:
[{"msisdn":"628558325448","imsi":"510018350118863","imei":"35192
808584254","lacci":"15f0100c7755d500","source":"7","timestamp":"
2018-12-13
14:02:22"},\n{"msisdn":"6285886087610","imsi":"510018631715432","
imei":"111111111

No. Time Source Destination Protocol Length

Info
97 4.979174 10.147.110.13 10.19.12.102 HTTP 1299
POST /adm/.php HTTP/1.1 (application/x-www-form-urlencoded)

Frame 97: 1299 bytes on wire (10392 bits), 1299 bytes captured
(10392 bits)
Encapsulation type: Linux cooked-mode capture (25)
Arrival Time: Dec 3, 2018 09:02:28.357373000 Middle East
Standard Time
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1543820548.357373000 seconds
[Time delta from previous captured frame: 0.000064000 seconds]
[Time delta from previous displayed frame: 0.000064000 seconds]
[Time since reference or first frame: 4.979174000 seconds]
 Frame Number: 97
Frame Length: 1299 bytes (10392 bits)
Capture Length: 1299 bytes (10392 bits)
[Frame is marked: True]
[Frame is ignored: False]
[Protocols in frame: sll:ethertype:ip:tcp:http:urlencoded-form]
[Number of per-protocol-data: 1]
[Hypertext Transfer Protocol, key 0]
[Coloring Rule Name: HTTP]
[Coloring Rule String: http || tcp.port == 80 || http2]
Linux cooked capture
Packet type: Sent by us (4)
Link-layer address type: 1
Link-layer address length: 6
Source: Vmware_86:96:a2 (00:50:56:86:96:a2)
Protocol: IP (0x0800)
Internet Protocol Version 4, Src: 10.147.110.13 (10.147.110.13), Dst:
10.19.12.102 (10.19.12.102)
Version: 4
Header Length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN:
0x00: Not-ECT (Not ECN-Capable Transport))
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-
Capable Transport) (0x00)
Total Length: 1283
Identification: 0xf2c5 (62149)
Flags: 0x02 (Don't Fragment)
0... .... = Reserved bit: Not set
.1.. .... = Don't fragment: Set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (6)
Header checksum: 0xb416 [correct]
[Good: True]
[Bad: False]
Source: 10.147.110.13 (10.147.110.13)
Destination: 10.19.12.102 (10.19.12.102)
[Source GeoIP: Unknown]
[Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: 33354 (33354), Dst Port:
http (80), Seq: 4105, Ack: 1, Len: 1231
 Source Port: 33354 (33354)
Destination Port: http (80)
[Stream index: 9]
[TCP Segment Len: 1231]
Sequence number: 4105 (relative sequence number)
[Next sequence number: 5336 (relative sequence number)]
Acknowledgment number: 1 (relative ack number)
Header Length: 32 bytes
.... 0000 0001 1000 = Flags: 0x018 (PSH, ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Nonce: Not set
.... 0... .... = Congestion Window Reduced (CWR): Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 1... = Push: Set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
Window size value: 115
[Calculated window size: 14720]
[Window size scaling factor: 128]
Checksum: 0x940e [validation disabled]
[Good Checksum: False]
[Bad Checksum: False]
Urgent pointer: 0
Options: (12 bytes), No-Operation (NOP), No-Operation (NOP),
Timestamps
No-Operation (NOP)
Type: 1
0... .... = Copy on fragmentation: No
.00. .... = Class: Control (0)
...0 0001 = Number: No-Operation (NOP) (1)
No-Operation (NOP)
Type: 1
0... .... = Copy on fragmentation: No
.00. .... = Class: Control (0)
...0 0001 = Number: No-Operation (NOP) (1)
Timestamps: TSval 3333865359, TSecr 2830577483
Kind: Timestamp (8)
Length: 10
Timestamp value: 3333865359
Timestamp echo reply: 2830577483
 [SEQ/ACK analysis]
[Bytes in flight: 5335]
TCP segment data (1231 bytes)
[2 Reassembled TCP Segments (5335 bytes): #96(4104), #97(1231)]
[Frame: 96, payload: 0-4103 (4104 bytes)]
[Frame: 97, payload: 4104-5334 (1231 bytes)]
[Segment count: 2]
[Reassembled TCP length: 5335]
[Reassembled TCP Data:
504f5354202f61646d2f61646d5f747269676765722e7068...]
Hypertext Transfer Protocol
POST /adm/.php HTTP/1.1\r\n
[Expert Info (Chat/Sequence): POST /adm/.php HTTP/1.1\r\n]
[POST /adm/.php HTTP/1.1\r\n]
[Severity level: Chat]
[Group: Sequence]
Request Method: POST
Request URI: /adm/.php
Request Version: HTTP/1.1
TE: deflate,gzip;q=0.3\r\n
Connection: TE, close\r\n
Host: 10.19.12.102\r\n
User-Agent: libwww-perl/5.833\r\n
Content-Length: 5128\r\n
[Content length: 5128]
Content-Type: application/x-www-form-urlencoded\r\n
\r\n
[Full request URI: http://10.19.12.102/adm/.php]
[HTTP request 1/1]
[Response in frame: 99]
HTML Form URL Encoded: application/x-www-form-urlencoded
Form item: "data" =
"[{"msisdn":"6285607058415","imsi":"510010765066636","imei":"111
11111111111","lacci":"15f0100c8d5dec00","source":"3","timestamp":"
2018-12-13 14:02:23"},
{"msisdn":"6285706464750","imsi":"510010645497583","imei":"3562
820
Key: data
Value [truncated]:
[{"msisdn":"6285607058415","imsi":"510010765066636","imei":"1111
1111111111","lacci":"15f0100c8d5dec00","source":"3","timestamp":"
2018-12-13
14:02:23"},\n{"msisdn":"6285706464750","imsi":"510010645497583",
"imei":"35628208

No. Time Source Destination Protocol Length

Info
108 6.243838 10.147.110.13 10.19.12.102 HTTP 1070
POST /adm/.php HTTP/1.1 (application/x-www-form-urlencoded)

Frame 108: 1070 bytes on wire (8560 bits), 1070 bytes captured
(8560 bits)
Encapsulation type: Linux cooked-mode capture (25)
Arrival Time: Dec 3, 2018 09:02:29.622037000 Middle East
Standard Time
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1543820549.622037000 seconds
[Time delta from previous captured frame: 0.000018000 seconds]
[Time delta from previous displayed frame: 0.000018000 seconds]
[Time since reference or first frame: 6.243838000 seconds]
Frame Number: 108
Frame Length: 1070 bytes (8560 bits)
Capture Length: 1070 bytes (8560 bits)
[Frame is marked: True]
[Frame is ignored: False]
[Protocols in frame: sll:ethertype:ip:tcp:http:urlencoded-form]
[Number of per-protocol-data: 1]
[Hypertext Transfer Protocol, key 0]
[Coloring Rule Name: HTTP]
[Coloring Rule String: http || tcp.port == 80 || http2]
Linux cooked capture
Packet type: Sent by us (4)
Link-layer address type: 1
Link-layer address length: 6
Source: Vmware_86:96:a2 (00:50:56:86:96:a2)
Protocol: IP (0x0800)
Internet Protocol Version 4, Src: 10.147.110.13 (10.147.110.13), Dst:
10.19.12.102 (10.19.12.102)
Version: 4
Header Length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN:
0x00: Not-ECT (Not ECN-Capable Transport))
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-
Capable Transport) (0x00)
Total Length: 1054
 Identification: 0x93c5 (37829)
Flags: 0x02 (Don't Fragment)
0... .... = Reserved bit: Not set
.1.. .... = Don't fragment: Set
..0. .... = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (6)
Header checksum: 0x13fc [correct]
[Good: True]
[Bad: False]
Source: 10.147.110.13 (10.147.110.13)
Destination: 10.19.12.102 (10.19.12.102)
[Source GeoIP: Unknown]
[Destination GeoIP: Unknown]
Transmission Control Protocol, Src Port: 33356 (33356), Dst Port:
http (80), Seq: 4105, Ack: 1, Len: 1002
Source Port: 33356 (33356)
Destination Port: http (80)
[Stream index: 10]
[TCP Segment Len: 1002]
Sequence number: 4105 (relative sequence number)
[Next sequence number: 5107 (relative sequence number)]
Acknowledgment number: 1 (relative ack number)
Header Length: 32 bytes
.... 0000 0001 1000 = Flags: 0x018 (PSH, ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Nonce: Not set
.... 0... .... = Congestion Window Reduced (CWR): Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 1... = Push: Set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
Window size value: 115
[Calculated window size: 14720]
[Window size scaling factor: 128]
Checksum: 0x9329 [validation disabled]
[Good Checksum: False]
[Bad Checksum: False]
Urgent pointer: 0
 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP),
Timestamps
No-Operation (NOP)
Type: 1
0... .... = Copy on fragmentation: No
.00. .... = Class: Control (0)
...0 0001 = Number: No-Operation (NOP) (1)
No-Operation (NOP)
Type: 1
0... .... = Copy on fragmentation: No
.00. .... = Class: Control (0)
...0 0001 = Number: No-Operation (NOP) (1)
Timestamps: TSval 3333866624, TSecr 2830578747
Kind: Timestamp (8)
Length: 10
Timestamp value: 3333866624
Timestamp echo reply: 2830578747
[SEQ/ACK analysis]
[Bytes in flight: 5106]
TCP segment data (1002 bytes)
[3 Reassembled TCP Segments (5106 bytes): #105(2736),
#107(1368), #108(1002)]
[Frame: 105, payload: 0-2735 (2736 bytes)]
[Frame: 107, payload: 2736-4103 (1368 bytes)]
[Frame: 108, payload: 4104-5105 (1002 bytes)]
[Segment count: 3]
[Reassembled TCP length: 5106]
[Reassembled TCP Data:
504f5354202f61646d2f61646d5f747269676765722e7068...]
Hypertext Transfer Protocol
POST /adm/.php HTTP/1.1\r\n
[Expert Info (Chat/Sequence): POST /adm/.php HTTP/1.1\r\n]
[POST /adm/.php HTTP/1.1\r\n]
[Severity level: Chat]
[Group: Sequence]
Request Method: POST
Request URI: /adm/.php
Request Version: HTTP/1.1
TE: deflate,gzip;q=0.3\r\n
Connection: TE, close\r\n
Host: 10.19.12.102\r\n
User-Agent: libwww-perl/5.833\r\n
Content-Length: 4899\r\n
 [Content length: 4899]
Content-Type: application/x-www-form-urlencoded\r\n
\r\n
[Full request URI: http://10.19.12.102/adm/.php]
[HTTP request 1/1]
[Response in frame: 116]
HTML Form URL Encoded: application/x-www-form-urlencoded
Form item: "data" =
"[{"msisdn":"6281555319868","imsi":"510015512433211","imei":"1111
1111111111","lacci":"15f0100bc434c800","source":"3","timestamp":"
2018-12-13 14:02:24"},
{"msisdn":"6285838817623","imsi":"510013833226206","imei":"11111
11
Key: data
Value [truncated]:
[{"msisdn":"6281555319868","imsi":"510015512433211","imei":"11111
111111111","lacci":"15f0100bc434c800","source":"3","timestamp":"2
018-12-13
14:02:24"},\n{"msisdn":"6285838817623","imsi":"510013833226206","
imei":"11111111