# CHAPTER 2: THE WIRESHARK GAMBIT
`08:41.`
The digital numbers in the top-right corner of his Arch Linux taskbar didn’t care about his visa status. They didn’t care that his mother had sold two plots of family land in Abeokuta just to pay his first semester’s international tuition at UIC.
They just ticked.
`08:40.`
On the linoleum floor, sitting right in the middle of a spreading, sticky yellow puddle of spilled Monster Energy, the iPhone sat face-up.
The speaker was dead silent.
Tomi sat cross-legged on the mattress, his breath coming in shallow, jagged hitches that fogged the cold air of the room. Outside the single, drafty pane of glass, Chicago was getting hammered by a freezing November sleet. A CTA Red Line train roared past on the elevated tracks half a block away, vibrating the rusted iron legs of his desk.
*Homeland Security.*
The two words echoed inside his skull with the physical force of a lead pipe.
Most American college kids thought of the federal government as an abstract concept—taxes, voting booths, maybe a boring highway speed trap. But to an F-1 international student, the federal government was an all-seeing, razor-thin tightrope. One step off to the left, one unapproved W-2 tax form, one rogue Venmo deposit marked *“for coding work,”* and the Student and Exchange Visitor Program database automatically flips your status from **Active** to **Terminated**.
There wouldn’t be a phone call to a lawyer. He didn’t have a lawyer.
There would just be two immigration officers sitting in a white Ford Explorer outside the campus library. There would be a holding cell in Kankakee County. Then a middle-seat commercial flight out of O’Hare, landing in Murtala Muhammed Airport twenty-four hours later with a ten-year federal re-entry ban stamped into his biometric record.
`08:14.`
He looked down at his own right hand.
The fingers were shaking so violently he had to tuck his thumb into his palm just to steady his index finger.
He leaned over the edge of the mattress, reached into the puddle of warm energy drink, and tapped the cracked glass of the screen.
**1.**
The response was instantaneous. It didn't take half a second for the remote server to ping back; the synthetic voice cut through the room the exact millisecond his fingerprint left the glass.
*"Acknowledgment received,"* the machine said.
It was a terrifying piece of audio engineering. There was no room tone behind the voice. No ambient hiss of a microphone, no wet sound of a tongue hitting teeth, no intake of oxygen. Just pure, mathematically generated soundwaves.
*"Timer remains active. Seven minutes, twenty-nine seconds to Kraken settlement."*
Tomi didn’t answer it. He didn’t say *“Okay.”* He didn’t say *“Please.”*
He pulled his hand back from the floor, wiped the sticky soda onto the thigh of his grey sweatpants, and set both hands onto the keyboard of his ThinkPad.
The terror was still sitting in his chest, hot and heavy, but a secondary instinct—the cold, stubborn reflex of a boy who had spent the last six years debugging broken code until his eyes bled—began to lock his joints into place.
*A handshake is a two-way street.*
That was the very first slide Professor Vance had put on the projector in *CS 450: Advanced Network Protocols*. You cannot conjure data out of thin air. Even if the caller ID on an iPhone masks itself as `[ NULL ]`, the physical laws of the internet still demand a pathway. To push a live, real-time audio stream to a cell tower in Rogers Park, a remote machine somewhere on this planet had to package a soundwave into a UDP datagram, slap a source IP address onto the header, and shove it down a fiber-optic pipe.
The machine had to knock on his door.
Which meant Tomi could look through the peephole.
His fingers hit the keys with a sharp, frantic *clack-clack-clack*.
`Ctrl + Alt + T.`
A black terminal window snapped open over his Chase Bank tab. The cursor blinked, a tiny green rectangle waiting for a command.
`sudo wireshark &`
He slammed the Enter key, typed his root password blind, and watched the graphical user interface of the world’s most powerful network protocol analyzer explode onto his screen.
Instantly, the display became a violent, scrolling waterfall of raw data.
Thousands of packets per second. Background OS updates, router telemetry, ping requests from his open browser tabs. It was a digital blizzard.
Tomi grabbed his mouse and dragged the Wireshark window to the left half of his fourteen-inch screen. On the right half, he opened a fresh Chrome tab and typed: `kraken.com/signin`.
`06:58.`
His brain split down the middle.
With his right hand, using the numpad, he began typing his Kraken login credentials. With his left eye, he scanned the Wireshark capture bar, typing a strict display filter into the syntax box:
`udp.port == 3478 || udp.port == 49300`
Those were the standard Apple Session Traversal Utilities for NAT—the exact ports an iPhone uses to establish a live Voice-over-IP connection.
He hit **Apply**.
The blizzard of thousands of random network packets instantly vanished.
The screen cleared.
Sitting right there, pulsing at a steady, rhythmic rate of forty-two packets per second, was a single, unbroken stream of inbound data.
> `Source: 134.11.204.8`
> `Destination: 192.168.1.14`
> `Protocol: UDP`
> `Length: 124`
*Got you, you bastard.*
Tomi’s right hand stopped hovering over the Kraken password field. His phone buzzed on the floor—a 2FA security code from Kraken hitting his cheap Mint Mobile SIM card.
He ignored the text. He didn't type the six digits.
Instead, he highlighted the source IP address `134.11.204.8` in Wireshark, copied the string to his clipboard, flipped back to his open Linux terminal, and typed a single reconnaissance command:
`whois 134.11.204.8`
He pressed Enter.
The terminal paused for three-quarters of a second as his computer reached out to the American Registry for Internet Numbers database in Virginia, asking it to pull the public birth certificate of that specific sequence of numbers.
The text cascaded down the black screen in crisp, monospaced white font:
> `NetRange: 134.11.0.0 - 134.11.255.255`
> `CIDR: 134.11.0.0/16`
> `NetName: DOD-NIC-134`
> `NetType: Direct Allocation`
> `Organization: United States Department of Defense`
> `RegDate: 1991-04-16`
> `Address: Defense Information Systems Agency`
> `City: Fort Meade`
> `StateProv: MD`
> `PostalCode: 20755`
> `Country: US`
Tomi’s lungs forgot how to expand.
The cold air of the Rogers Park apartment suddenly felt thick, like someone had pumped the room full of wet cement.
*Fort Meade, Maryland.* The headquarters of the United States Cyber Command. The home of the National Security Agency.
This wasn't a syndicate of Eastern European carders trying to use a desperate Nigerian college kid as a crypto mule to wash forty-eight million dollars of stolen venture capital.
The United States military had just dropped forty-eight million dollars into his personal checking account, locked his door from the inside, and set a stopwatch.
On the floor, the synthetic voice spoke again, perfectly timed to the millisecond.
*"Six minutes, fifteen seconds remaining, Tomiwa. Your Kraken session has timed out. Refresh the browser."*
***