Frame 1447: Packet, 1142 bytes on wire (9136 bits), 1142 bytes captured (9136 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 00:37:53.441292000 UTC UTC Arrival Time: Nov 21, 2017 00:37:53.441292000 UTC Epoch Arrival Time: 1511224673.441292000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 4.000 microseconds] [Time since reference or first frame: 1 minute, 1.723581000 seconds] Frame Number: 1447 Frame Length: 1142 bytes (9136 bits) Capture Length: 1142 bytes (9136 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Avaya_54:f9:28 (c8:f4:06:54:f9:28), Dst: Msi_d8:69:3a (00:16:17:d8:69:3a) Destination: Msi_d8:69:3a (00:16:17:d8:69:3a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Avaya_54:f9:28 (c8:f4:06:54:f9:28) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 162.244.35.36, Dst: 172.16.103.77 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1128 Identification: 0xc35e (50014) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x99bb [validation disabled] [Header checksum status: Unverified] Source Address: 162.244.35.36 Destination Address: 172.16.103.77 [Source GeoIP: Fremont, US] [Source GeoIP City: Fremont] [Source or Destination GeoIP City: Fremont] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP Latitude: 37.5497] [Source or Destination GeoIP Latitude: 37.5497] [Source GeoIP Longitude: -121.9621] [Source or Destination GeoIP Longitude: -121.9621] [Stream index: 16] Transmission Control Protocol, Src Port: 80, Dst Port: 49180, Seq: 135813, Ack: 727, Len: 1088 Source Port: 80 Destination Port: 49180 [Stream index: 23] [Stream Packet Number: 141] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1088] Sequence Number: 135813 (relative sequence number) Sequence Number (raw): 486064474 [Next Sequence Number: 136901 (relative sequence number)] Acknowledgment Number: 727 (relative ack number) Acknowledgment number (raw): 1932317190 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x0c92 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 582.675000 milliseconds] [Time since previous frame in this TCP stream: 4.000 microseconds] [SEQ/ACK analysis] [iRTT: 99.293000 milliseconds] [Bytes in flight: 6370] [Bytes sent since last PSH flag: 2548] [Client Contiguous Streams: 1] [Server Contiguous Streams: 4] TCP payload (1088 bytes) Hypertext Transfer Protocol File Data: 1088 bytes Data (1088 bytes) 0000 37 b8 7e b8 9c d0 b9 c4 55 4e 1d ca 36 f8 38 63 7.~.....UN..6.8c 0010 92 3c 75 84 cd 4b fc 98 e1 de 1c 00 e0 f7 21 79 . 0360 6d 46 16 83 b8 79 64 13 bb 74 90 8e 0f e6 07 6e mF...yd..t.....n 0370 55 b4 9c 36 43 9d cb 0b 22 b0 70 f2 2c 36 b1 ef U..6C...".p.,6.. 0380 15 35 c1 1a 9a 4a 47 6b 0b 50 91 99 d2 66 46 3f .5...JGk.P...fF? 0390 b2 44 47 97 8f cb ff 00 67 1f 97 fe ce 35 90 ff .DG.....g....5.. 03a0 00 67 f7 1a 3e 61 f6 df 7f 62 f1 54 69 c7 bb 89 .g..>a...b.Ti... 03b0 56 54 f3 61 1a 7f 99 96 44 aa 24 76 48 db 11 88 VT.a....D.$vH... 03c0 9f 1d 40 a7 c9 31 c7 6b 7c 99 f9 a9 df 79 86 77 ..@..1.k|....y.w 03d0 56 27 b5 eb 97 37 15 87 ad 72 a3 53 6e fe 4a e2 V'...7...r.Sn.J. 03e0 cb 99 73 35 8c 70 30 79 e4 b3 5f 20 86 39 70 62 ..s5.p0y.._ .9pb 03f0 d2 df 20 1d b1 73 b4 ef 5d b3 80 3a 39 8e 53 2d .. ..s..]..:9.S- 0400 d6 55 4b 05 a5 fc 84 1f 32 ba 6d de 5a f4 64 18 .UK.....2.m.Z.d. 0410 86 db 4d de 10 27 3b 08 a5 61 f3 67 20 eb 20 8c ..M..';..a.g . . 0420 b6 3f 2f 44 cc 83 77 2f 93 79 b7 ba 8a e3 e7 09 .?/D..w/.y...... 0430 c3 51 34 88 15 7b 78 8b 85 b0 d3 a0 89 0e 51 f7 .Q4..{x.......Q. Data […]: 37b87eb89cd0b9c4554e1dca36f83863923c7584cd4bfc98e1de1c00e0f721797d0ec6aaf185989a38e36f3fb8f17b8d9f8cb0bc1fc60933dc9570af1894e04255c02cff007305c2bc625381177857c5b963dc9fdb7e4fe2c47bc0087a9e2798e314664f81e6e5f6871ce223dc4e872db23 [Length: 1088]