1 08:54:32.729464 IP (tos 0x0, ttl 64, id 57143, offset 0, flags [DF], proto TCP (6), length 200) 10.207.74.149.993 > 10.98.159.117.2049: Flags [P.], cksum 0xfff5 (incorrect -> 0x430b), seq 1468263659:1468263807, ack 2941950012, win 279, options [nop,nop,TS val 1641695579 ecr 608564722], length 148: NFS request xid 90477929 144 write fh Unknown/F0C862C6000010000000000014AB0200C6DD760758AA7A5B0000000000000000 3 (3) bytes @ 0 2 08:54:32.731527 IP (tos 0x0, ttl 59, id 38294, offset 0, flags [DF], proto TCP (6), length 216) 10.98.159.117.2049 > 10.207.74.149.993: Flags [P.], cksum 0x381a (correct), seq 1:165, ack 148, win 29146, options [nop,nop,TS val 608564725 ecr 1641695579], length 164: NFS reply xid 90477929 reply ok 160 write PRE: sz 0 mtime 1535100894.465310536 ctime 1535100894.464014342 POST: REG 100644 ids 65534/65534 sz 3 nlink 1 rdev 0/0 fsid 5b7aaa5800000000 fileid 2ab14 a/m/ctime 1535100894.466424000 1535100894.466424000 1535100894.466424000 3 bytes verf 851b4