04:29:06.287551 IP 192.168.1.1.67 > 192.168.1.103.68: BOOTP/DHCP, Reply, length 300 04:29:10.286357 IP 192.168.1.1.67 > 192.168.1.103.68: BOOTP/DHCP, Reply, length 300 04:29:10.294216 IP 192.168.1.1.67 > 192.168.1.103.68: BOOTP/DHCP, Reply, length 300 04:29:10.296363 ARP, Request who-has 192.168.1.103 tell 0.0.0.0, length 28 04:29:10.296454 ARP, Request who-has 192.168.1.103 tell 0.0.0.0, length 28 04:29:10.769112 ARP, Request who-has 192.168.1.103 tell 0.0.0.0, length 28 04:29:10.769206 ARP, Request who-has 192.168.1.103 tell 0.0.0.0, length 28 04:29:11.268958 ARP, Request who-has 192.168.1.103 tell 192.168.1.103, length 28 04:29:11.269046 ARP, Request who-has 192.168.1.103 tell 192.168.1.103, length 28 04:29:13.573906 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:29:13.573980 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:29:13.574469 ARP, Request who-has 192.168.1.1 tell 192.168.1.103, length 28 04:29:13.574528 ARP, Request who-has 192.168.1.1 tell 192.168.1.103, length 28 04:29:13.574787 ARP, Reply 192.168.1.1 is-at c4:6e:1f:11:2f:9d, length 28 04:29:13.615561 IP 192.168.1.103.49153 > 192.168.1.1.53: 0+ A? mq.gw.tuyaus.com. (34) 04:29:13.618315 IP 192.168.1.1.53 > 192.168.1.103.49153: 0* 1/0/0 A 10.1.2.54 (50) 04:29:13.642678 IP 192.168.1.103.4573 > 10.1.2.54.1883: Flags [S], seq 6509, win 5840, options [mss 1440], length 0 04:29:13.643927 IP 10.1.2.54.1883 > 192.168.1.103.4573: Flags [S.], seq 1877495306, ack 6510, win 29200, options [mss 1460], length 0 04:29:13.661529 IP 192.168.1.103.4573 > 10.1.2.54.1883: Flags [.], ack 1, win 5840, length 0 04:29:13.662273 IP 192.168.1.103.4573 > 10.1.2.54.1883: Flags [P.], seq 1:204, ack 1, win 5840, length 203 04:29:13.663245 IP 10.1.2.54.1883 > 192.168.1.103.4573: Flags [.], ack 204, win 30016, length 0 04:29:13.663875 IP 10.1.2.54.1883 > 192.168.1.103.17327: Flags [F.], seq 2368477632, ack 6983, win 31088, length 0 04:29:13.664119 IP 10.1.2.54.1883 > 192.168.1.103.4573: Flags [P.], seq 1:5, ack 204, win 30016, length 4 04:29:13.688400 IP 192.168.1.103.17327 > 10.1.2.54.1883: Flags [R.], seq 1, ack 1, win 5840, length 0 04:29:13.696665 IP 192.168.1.103.4573 > 10.1.2.54.1883: Flags [P.], seq 204:247, ack 5, win 5836, length 43 04:29:13.697780 IP 10.1.2.54.1883 > 192.168.1.103.4573: Flags [P.], seq 5:10, ack 247, win 30016, length 5 04:29:13.863025 IP 192.168.1.103.4573 > 10.1.2.54.1883: Flags [.], ack 10, win 5831, length 0 04:29:14.574395 IP 192.168.1.103.4573 > 10.1.2.54.1883: Flags [P.], seq 247:462, ack 10, win 5831, length 215 04:29:14.575611 IP 10.1.2.54.1883 > 192.168.1.103.4573: Flags [P.], seq 10:14, ack 462, win 31088, length 4 04:29:14.815097 IP 10.1.2.54.1883 > 192.168.1.103.4573: Flags [P.], seq 10:14, ack 462, win 31088, length 4 04:29:14.818859 IP 192.168.1.103.4573 > 10.1.2.54.1883: Flags [.], ack 14, win 5827, length 0 04:29:14.821850 IP 192.168.1.103.4573 > 10.1.2.54.1883: Flags [.], ack 14, win 5827, length 0 04:29:15.351078 ARP, Request who-has 192.168.1.103 tell 192.168.1.1, length 28 04:29:15.518600 IP 192.168.1.103.49153 > 192.168.1.1.53: 0+ A? a.tuyaus.com. (30) 04:29:15.520213 IP 192.168.1.1.53 > 192.168.1.103.49153: 0* 1/0/0 A 10.1.2.54 (46) 04:29:15.526362 ARP, Reply 192.168.1.103 is-at cc:50:e3:12:31:8a, length 28 04:29:15.533338 IP 192.168.1.103.49051 > 10.1.2.54.80: Flags [S], seq 6517, win 5840, options [mss 1440], length 0 04:29:15.534486 IP 10.1.2.54.80 > 192.168.1.103.49051: Flags [S.], seq 2898722670, ack 6518, win 29200, options [mss 1460], length 0 04:29:15.560229 IP 192.168.1.103.49051 > 10.1.2.54.80: Flags [.], ack 1, win 5840, length 0 04:29:15.562725 IP 192.168.1.103.49051 > 10.1.2.54.80: Flags [P.], seq 1:260, ack 1, win 5840, length 259: HTTP: POST /gw.json?a=atop.online.debug.log&gwId=18313406cc50e312318a&t=15&sign=3ffba2615766e8a5e8153bc453d9614f HTTP/1.1 04:29:15.563674 IP 10.1.2.54.80 > 192.168.1.103.49051: Flags [.], ack 260, win 30016, length 0 04:29:15.581563 IP 192.168.1.103.49051 > 10.1.2.54.80: Flags [P.], seq 260:489, ack 1, win 5840, length 229: HTTP 04:29:15.582573 IP 10.1.2.54.80 > 192.168.1.103.49051: Flags [.], ack 489, win 31088, length 0 04:29:15.950416 IP 10.1.2.54.80 > 192.168.1.103.49051: Flags [P.], seq 1:327, ack 489, win 31088, length 326: HTTP: HTTP/1.1 200 OK 04:29:16.177185 IP 10.1.2.54.80 > 192.168.1.103.49051: Flags [P.], seq 1:327, ack 489, win 31088, length 326: HTTP: HTTP/1.1 200 OK 04:29:16.571916 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:29:16.571996 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:29:16.576140 IP 192.168.1.103.49051 > 10.1.2.54.80: Flags [.], ack 327, win 5514, length 0 04:29:16.578835 IP 192.168.1.103.49051 > 10.1.2.54.80: Flags [R.], seq 489, ack 327, win 5840, length 0 04:29:16.582464 IP 192.168.1.103.48471 > 10.1.2.54.80: Flags [S], seq 6529, win 5840, options [mss 1440], length 0 04:29:16.583550 IP 10.1.2.54.80 > 192.168.1.103.48471: Flags [S.], seq 1531180439, ack 6530, win 29200, options [mss 1460], length 0 04:29:16.633446 IP 192.168.1.103.48471 > 10.1.2.54.80: Flags [.], ack 1, win 5840, length 0 04:29:16.638503 IP 192.168.1.103.48471 > 10.1.2.54.80: Flags [P.], seq 1:281, ack 1, win 5840, length 280: HTTP: POST /gw.json?a=tuya.device.dynamic.config.get&gwId=18313406cc50e312318a&t=1588652955&v=1.0&sign=aa6f0029f177583d3a3b10205153bc5b HTTP/1.1 04:29:16.639538 IP 10.1.2.54.80 > 192.168.1.103.48471: Flags [.], ack 281, win 30016, length 0 04:29:16.737592 IP 10.1.2.54.80 > 192.168.1.103.48471: Flags [P.], seq 1:372, ack 281, win 30016, length 371: HTTP: HTTP/1.1 200 OK 04:29:16.746059 IP 192.168.1.103.48471 > 10.1.2.54.80: Flags [.], ack 372, win 5469, length 0 04:29:16.746485 IP 192.168.1.103.48471 > 10.1.2.54.80: Flags [R.], seq 281, ack 372, win 5840, length 0 04:29:19.574324 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:29:19.574404 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:29:22.580929 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:29:22.581065 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:29:25.571142 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:29:25.571222 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:29:28.589318 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:29:28.589393 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:29:30.513915 IP 192.168.1.103.10302 > 10.1.2.54.80: Flags [S], seq 6599, win 5840, options [mss 1440], length 0 04:29:30.515115 IP 10.1.2.54.80 > 192.168.1.103.10302: Flags [S.], seq 640819813, ack 6600, win 29200, options [mss 1460], length 0 04:29:30.543279 IP 192.168.1.103.10302 > 10.1.2.54.80: Flags [.], ack 1, win 5840, length 0 04:29:30.543744 IP 192.168.1.103.10302 > 10.1.2.54.80: Flags [P.], seq 1:282, ack 1, win 5840, length 281: HTTP: POST /gw.json?a=tuya.device.upgrade.silent.get&gwId=18313406cc50e312318a&t=1588652969&v=4.1&sign=a457bbbf86102ec491e7907377c6ac6d HTTP/1.1 04:29:30.544649 IP 10.1.2.54.80 > 192.168.1.103.10302: Flags [.], ack 282, win 30016, length 0 04:29:30.558593 IP 192.168.1.103.10302 > 10.1.2.54.80: Flags [P.], seq 282:319, ack 1, win 5840, length 37: HTTP 04:29:30.559605 IP 10.1.2.54.80 > 192.168.1.103.10302: Flags [.], ack 319, win 30016, length 0 04:29:30.711376 IP 10.1.2.54.80 > 192.168.1.103.10302: Flags [P.], seq 1:313, ack 319, win 30016, length 312: HTTP: HTTP/1.1 200 OK 04:29:30.853200 IP 192.168.1.103.10302 > 10.1.2.54.80: Flags [.], ack 313, win 5528, length 0 04:29:30.853574 IP 192.168.1.103.10302 > 10.1.2.54.80: Flags [R.], seq 319, ack 313, win 5840, length 0 04:29:31.572479 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:29:31.572555 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:29:34.571225 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:29:34.571296 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:29:37.573182 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:29:37.573255 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:29:40.575416 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:29:40.575490 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:29:43.566963 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:29:43.567038 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:29:46.578120 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:29:46.578200 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:29:49.579219 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:29:49.579286 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:29:52.571364 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:29:52.571440 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:29:55.571383 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:29:55.571464 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:29:58.571701 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:29:58.571807 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:30:01.580320 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:30:01.580391 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:30:04.571449 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:30:04.571568 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:30:07.568208 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:30:07.568291 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:30:10.571273 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:30:10.571394 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:30:13.588162 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:30:13.588240 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:30:13.770409 IP 192.168.1.103.4573 > 10.1.2.54.1883: Flags [P.], seq 462:464, ack 14, win 5827, length 2 04:30:13.771521 IP 10.1.2.54.1883 > 192.168.1.103.4573: Flags [P.], seq 14:16, ack 464, win 31088, length 2 04:30:13.788027 IP 192.168.1.103.4573 > 10.1.2.54.1883: Flags [.], ack 16, win 5825, length 0 04:30:16.571475 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:30:16.571564 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:30:18.791626 ARP, Request who-has 192.168.1.103 tell 192.168.1.1, length 28 04:30:19.578327 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:30:19.578460 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:30:19.578989 ARP, Reply 192.168.1.103 is-at cc:50:e3:12:31:8a, length 28 04:30:22.572983 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:30:22.573066 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:30:25.571605 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:30:25.571685 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:30:28.569251 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:30:28.569326 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:30:31.574990 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:30:31.575073 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:30:34.571407 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:30:34.571485 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:30:37.574177 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:30:37.574259 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:30:40.572180 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:30:40.572264 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:30:43.584565 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:30:43.584646 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:30:46.571667 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:30:46.571757 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:30:49.574492 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:30:49.574578 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:30:52.571882 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:30:52.571967 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:30:55.578287 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:30:55.578366 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:30:58.571703 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:30:58.571781 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:31:01.574144 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:31:01.574229 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:31:04.571783 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:31:04.571872 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:31:07.572065 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:31:07.572147 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:31:10.567248 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:31:10.567334 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:31:13.583112 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:31:13.583182 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:31:13.770393 IP 192.168.1.103.4573 > 10.1.2.54.1883: Flags [P.], seq 464:466, ack 16, win 5825, length 2 04:31:13.771570 IP 10.1.2.54.1883 > 192.168.1.103.4573: Flags [P.], seq 16:18, ack 466, win 31088, length 2 04:31:14.008235 IP 10.1.2.54.1883 > 192.168.1.103.4573: Flags [P.], seq 16:18, ack 466, win 31088, length 2 04:31:14.009080 IP 192.168.1.103.4573 > 10.1.2.54.1883: Flags [.], ack 18, win 5823, length 0 04:31:14.027909 IP 192.168.1.103.4573 > 10.1.2.54.1883: Flags [.], ack 18, win 5823, length 0 04:31:16.574122 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:31:16.574208 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:31:18.791408 ARP, Request who-has 192.168.1.103 tell 192.168.1.1, length 28 04:31:19.572157 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:31:19.572236 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:31:19.576911 ARP, Reply 192.168.1.103 is-at cc:50:e3:12:31:8a, length 28 04:31:22.572028 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:31:22.572111 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:31:25.575152 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:31:25.575234 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:31:28.571493 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:31:28.571569 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:31:31.571562 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:31:31.571646 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:31:34.572310 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:31:34.572393 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:31:37.567234 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:31:37.567314 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175 04:31:40.576269 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175