You can filter “ tftp or tcp “ with the packet “VMG1302-T10A_IP Phone_LAN” which Ter provided before, and firstly you will see tftp read requests packets from No.95 to 4285. And did not see any response packets from 66.11.207.21, we think it should be a tftp server.