We got a pcap, the problem was obvious from the challenge name(heartbleed). Given the RSA-2048 pubkey we sought for prime numbers ofaround 1024 bits in the pcaps, then reconstructed the private key andused it to decrypt the encrypted part of the session, which containedthe flag.