On 12/3/2014 1:53 PM, g wrote: > new paste at; > > http://pastebin.com/rCU0CC10 > > hopeful this will give better info and answers. > > thanks again to respondents. again, wireshark is, for some unknown reason, calling that 00:0f:fe:8f:8f:23 MAC address "PartedMagic", this MAC is associated with the IP 192.168.1.144 other than wireshark's odd name for this host, I see nothing wrong here. Does in fact the system with that IP have that MAC ? if so, everything is normal, that system is apparently connecting to https://secure.informaction.com -- john r pierce 37N 122W somewhere on the middle of the left coast