Here is a sample PCAP file. Walk me through the steps you would take to determine if data exfiltration occurred.