I've uploaded some more info as you requested. For the wireshark traces it is sometimes difficult to make sense if timestamps are not 100% synchronous, and even then.......