I got interested in what is going on. I had fully updated wallet, 32 connections to network and this is what was sent to me from a source that just started downloading the blockchain from startheight ~22000 (i did not write it down, doesnt matter). Same time about 64 blocks was orphaned and later found as PoS. This happend a week ago. Using Wireshark to analyze, decoding packet data to "bitcoin". At the time there was multiple IP's resyncing whole blockchain, keeping peers occupied I guess.


Decoded using "Bitcoin" option in Wireshark.
Internet Protocol Version 4, Src: 36.77.134.15, Src Port: 61776

No.       Time                      Source                  Destination           Protocol Length Info
   6429 06:27:38,411941    36.77.134.15          192.168.1.1          TCP      66     [TCP Dup ACK 6423#1] 61776 → 2225 [ACK] Seq=15918 Ack=218112 Win=811 Len=0 SLE=219314 SRE=220638
   6430 06:27:38,670892    36.77.134.15          192.168.1.1          TCP      66     [TCP Dup ACK 6423#2] 61776 → 2225 [ACK] Seq=15918 Ack=218112 Win=811 Len=0 SLE=219314 SRE=222090
   6431 06:27:38,670893    36.77.134.15          192.168.1.1          TCP      66     [TCP Dup ACK 6423#3] 61776 → 2225 [ACK] Seq=15918 Ack=218112 Win=811 Len=0 SLE=219314 SRE=222144
   6432 06:27:38,761538    192.168.1.1          36.77.134.15          TCP      1506   [TCP Retransmission] 2225 → 61776 [PSH, ACK] Seq=221016 Ack=15918 Win=259 Len=1452
   6433 06:27:38,761549    192.168.1.1          36.77.134.15          TCP      1506   2225 → 61776 [PSH, ACK] Seq=222468 Ack=15918 Win=259 Len=1452 [TCP segment of a reassembled PDU]
   6434 06:27:39,089604    192.168.1.1          36.77.134.15          TCP      1506   [TCP Retransmission] 2225 → 61776 [PSH, ACK] Seq=218112 Ack=15918 Win=259 Len=1452
   6435 06:27:39,090721    36.77.134.15          192.168.1.1          TCP      66     61776 → 2225 [ACK] Seq=15918 Ack=222144 Win=811 Len=0 SLE=219314 SRE=219564
   6436 06:27:39,090770    192.168.1.1          36.77.134.15          TCP      1506   2225 → 61776 [PSH, ACK] Seq=223920 Ack=15918 Win=259 Len=1452[Reassembly error, protocol TCP: New fragment overlaps old data (retransmission?)]
   6437 06:27:39,120832    192.168.1.1          36.77.134.15          TCP      1506   [TCP Retransmission] 2225 → 61776 [PSH, ACK] Seq=222144 Ack=15918 Win=259 Len=1452
   6438 06:27:39,120840    192.168.1.1          36.77.134.15          TCP      1506   [TCP Retransmission] 2225 → 61776 [PSH, ACK] Seq=223596 Ack=15918 Win=259 Len=1452
   6439 06:27:39,120845    192.168.1.1          36.77.134.15          TCP      1506   [TCP Retransmission] 2225 → 61776 [PSH, ACK] Seq=225048 Ack=15918 Win=259 Len=1452
   6440 06:27:39,120850    192.168.1.1          36.77.134.15          TCP      576    2225 → 61776 [PSH, ACK] Seq=226500 Ack=15918 Win=259 Len=522[Reassembly error, protocol TCP: New fragment overlaps old data (retransmission?)]
   6441 06:27:39,402228    192.168.1.1          36.77.134.15          TCP      660    2225 → 61776 [PSH, ACK] Seq=227022 Ack=15918 Win=259 Len=606[Reassembly error, protocol TCP: New fragment overlaps old data (retransmission?)]
   6442 06:27:39,571392    192.168.1.1          36.77.134.15          TCP      1506   [TCP Retransmission] 2225 → 61776 [PSH, ACK] Seq=222144 Ack=15918 Win=259 Len=1452
   6443 06:27:39,574085    36.77.134.15          192.168.1.1          TCP      66     61776 → 2225 [ACK] Seq=15918 Ack=222468 Win=809 Len=0 SLE=221016 SRE=222144
   6444 06:27:39,574119    192.168.1.1          36.77.134.15          TCP      1506   2225 → 61776 [PSH, ACK] Seq=227628 Ack=15918 Win=259 Len=1452[Reassembly error, protocol TCP: New fragment overlaps old data (retransmission?)]
   6445 06:27:39,586270    36.77.134.15          192.168.1.1          TCP      60     61776 → 2225 [ACK] Seq=15918 Ack=223920 Win=811 Len=0
   6446 06:27:39,586302    192.168.1.1          36.77.134.15          TCP      163    2225 → 61776 [PSH, ACK] Seq=229080 Ack=15918 Win=259 Len=109[Reassembly error, protocol TCP: New fragment overlaps old data (retransmission?)]
   6447 06:27:39,736270    36.77.134.15          192.168.1.1          TCP      66     [TCP Dup ACK 6445#1] 61776 → 2225 [ACK] Seq=15918 Ack=223920 Win=811 Len=0 SLE=218112 SRE=219564
   6448 06:27:39,751012    36.77.134.15          192.168.1.1          TCP      66     61776 → 2225 [ACK] Seq=15918 Ack=225372 Win=811 Len=0 SLE=222144 SRE=223596
   6449 06:27:39,751079    192.168.1.1          36.77.134.15          TCP      531    2225 → 61776 [PSH, ACK] Seq=229189 Ack=15918 Win=259 Len=477[Reassembly error, protocol TCP: New fragment overlaps old data (retransmission?)]
   6450 06:27:39,751346    36.77.134.15          192.168.1.1          TCP      66     [TCP Dup ACK 6448#1] 61776 → 2225 [ACK] Seq=15918 Ack=225372 Win=811 Len=0 SLE=223596 SRE=225048
   6451 06:27:39,752204    36.77.134.15          192.168.1.1          TCP      66     [TCP ACKed unseen segment] 61776 → 2225 [ACK] Seq=15918 Ack=226500 Win=806 Len=0 SLE=225048 SRE=225372
   6452 06:27:39,752687    36.77.134.15          192.168.1.1          TCP      60     61776 → 2225 [ACK] Seq=15918 Ack=227022 Win=811 Len=0
   6453 06:27:39,821701    36.77.134.15          192.168.1.1          TCP      60     61776 → 2225 [ACK] Seq=15918 Ack=227628 Win=808 Len=0
   6454 06:27:39,821743    192.168.1.1          36.77.134.15          TCP      534    2225 → 61776 [PSH, ACK] Seq=229666 Ack=15918 Win=259 Len=480[Reassembly error, protocol TCP: New fragment overlaps old data (retransmission?)]