The police have arrested a cyber criminal but they don't have a good witness. Just a short capture of his network traffic is available . Is it helpful? The attached file has been updated.