Frame 10013: 1406 bytes on wire (11248 bits), 1406 bytes captured (11248 bits) Encapsulation type: Ethernet (1) Arrival Time: Jul 22, 2017 02:50:46.343373000 UTC UTC Arrival Time: Jul 22, 2017 02:50:46.343373000 UTC Epoch Arrival Time: 1500691846.343373000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.003857000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 431.818024000 seconds] Frame Number: 10013 Frame Length: 1406 bytes (11248 bits) Capture Length: 1406 bytes (11248 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: ASUSTekCOMPU_0e:f3:3a (00:18:f3:0e:f3:3a) Destination: ASUSTekCOMPU_0e:f3:3a (00:18:f3:0e:f3:3a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 6] Internet Protocol Version 4, Src: 104.18.40.172, Dst: 172.16.45.98 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1392 Identification: 0x1bc1 (7105) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 60 Protocol: TCP (6) Header Checksum: 0x4304 [validation disabled] [Header checksum status: Unverified] Source Address: 104.18.40.172 Destination Address: 172.16.45.98 [Source GeoIP: US, ASN 13335, CLOUDFLARENET] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP AS Number: 13335] [Source or Destination GeoIP AS Number: 13335] [Source GeoIP AS Organization: CLOUDFLARENET] [Source or Destination GeoIP AS Organization: CLOUDFLARENET] [Source GeoIP Latitude: 37.751] [Source or Destination GeoIP Latitude: 37.751] [Source GeoIP Longitude: -97.822] [Source or Destination GeoIP Longitude: -97.822] [Stream index: 30] Transmission Control Protocol, Src Port: 80, Dst Port: 49160, Seq: 819578, Ack: 1980, Len: 1352 Source Port: 80 Destination Port: 49160 [Stream index: 59] [Stream Packet Number: 949] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1352] Sequence Number: 819578 (relative sequence number) Sequence Number (raw): 1130698557 [Next Sequence Number: 820930 (relative sequence number)] Acknowledgment Number: 1980 (relative ack number) Acknowledgment number (raw): 2588762052 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 35 [Calculated window size: 35840] [Window size scaling factor: 1024] Checksum: 0x8d74 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 15.038250000 seconds] [Time since previous frame in this TCP stream: 0.003857000 seconds] [SEQ/ACK analysis] [iRTT: 0.065627000 seconds] [Bytes in flight: 1352] [Bytes sent since last PSH flag: 95992] TCP payload (1352 bytes) Hypertext Transfer Protocol File Data: 1352 bytes Data (1352 bytes) 0000 aa 96 08 ef 21 84 54 dc 78 45 90 31 7b 81 a5 17 ....!.T.xE.1{... 0010 f8 e2 26 4d b8 17 10 8b 83 8d af 09 a2 6f 11 2a ..&M.........o.* 0020 18 0e 01 ab d6 b3 65 39 9e 4b 84 c2 59 29 93 ed ......e9.K..Y).. 0030 6c e3 59 ff 45 e9 43 06 71 19 bc 20 6c 9b e0 06 l.Y.E.C.q.. l... 0040 b3 78 9e 08 19 21 5c 75 0b 18 e7 39 5f 2a 63 ab .x...!\u...9_*c. 0050 a0 8e 47 71 67 ee aa 70 1b 54 e2 66 c0 22 e6 fd ..Gqg..p.T.f.".. 0060 af f4 99 21 ed 4a 12 e9 c0 33 64 47 95 f1 5d 2a ...!.J...3dG..]* 0070 26 97 59 0c 93 27 47 98 a6 d2 29 bf 1d e1 ea 8e &.Y..'G...)..... 0080 91 5f 30 72 2c d3 14 e7 0a 2d 28 4e fa 45 33 1c ._0r,....-(N.E3. 0090 58 ec 88 1b c3 e0 c6 e8 fe 50 1d 1c ee ea a2 85 X........P...... 00a0 74 94 68 9b 5f 4e 16 04 33 49 0e 93 0f d2 c3 d3 t.h._N..3I...... 00b0 80 84 4b b0 dc 46 82 af 81 75 ab d5 2e 6d 08 37 ..K..F...u...m.7 00c0 e4 06 77 68 df c1 fb 54 1d b9 99 a4 1b ef 35 b2 ..wh...T......5. 00d0 51 f7 9c 2b 57 e1 3b 23 de eb 2b 7c 41 62 96 62 Q..+W.;#..+|Ab.b 00e0 91 15 97 2f e3 59 df 25 ca 45 02 07 ce 14 07 cf .../.Y.%.E...... 00f0 c6 19 b3 c9 15 64 00 b8 20 cf 5d 74 ed 45 52 27 .....d.. .]t.ER' 0100 84 a3 94 1f 11 e8 de 9d 73 14 14 15 ac 31 46 e3 ........s....1F. 0110 d4 7c c7 50 f2 35 ff 50 9b 33 f7 ed 71 5b e1 0b .|.P.5.P.3..q[.. 0120 a0 f0 c6 1a 56 21 8a df 18 62 74 13 09 54 ba 73 ....V!...bt..T.s 0130 ce a8 54 ca fa 12 77 06 f2 27 63 24 6a de 3e ba ..T...w..'c$j.>. 0140 b2 16 d8 ea 81 5e ee d2 55 84 0c 63 47 99 fc 87 .....^..U..cG... 0150 8d 1d c8 57 be d7 f9 8e d0 4d 6e 16 19 c1 e4 ee ...W.....Mn..... 0160 7b d8 04 94 c8 9c 3f 04 a9 b2 78 c2 61 56 18 10 {.....?...x.aV.. 0170 b9 58 30 4c 62 50 fa 68 35 35 15 63 7c 12 cb 67 .X0LbP.h55.c|..g 0180 df 33 9d 8e 57 94 99 09 4e 73 95 98 b0 49 04 96 .3..W...Ns...I.. 0190 2d 06 41 eb 00 48 b3 72 8a 30 ec 16 7f b7 aa 30 -.A..H.r.0.....0 01a0 e6 c6 8b 6f fa 7d 06 c0 94 1d eb 1f 12 d7 94 3a ...o.}.........: 01b0 00 16 47 04 5a fe be 47 2e 62 73 5f a3 8b 9b 2d ..G.Z..G.bs_...- 01c0 f4 bd 6a 27 ff 71 f9 69 5a 9b ec 56 42 1a 11 4d ..j'.q.iZ..VB..M 01d0 1b 02 13 4f 4e f7 81 6f b6 3e b1 41 af a0 02 da ...ON..o.>.A.... 01e0 4c 72 43 e1 2f cc 1a f5 bc a1 91 d5 41 e8 3d d2 LrC./.......A.=. 01f0 ea ab 60 10 da 72 c1 d9 79 06 aa ff 16 52 42 e0 ..`..r..y....RB. 0200 7b 05 91 87 fa 75 bd af 65 75 46 8a a4 00 1c de {....u..euF..... 0210 cf 6f bf 71 7c 28 39 27 c9 69 f0 3f 2d a7 65 97 .o.q|(9'.i.?-.e. 0220 e2 d4 5a ef bb 46 1c c0 42 4b 29 2a 90 e9 e8 43 ..Z..F..BK)*...C 0230 d7 09 85 76 be ab da 35 cc c5 ae 9f b6 00 c7 7d ...v...5.......} 0240 38 3c 26 b8 d0 a3 98 bb e6 9d 9c 44 00 06 b8 f6 8<&........D.... 0250 d2 5c 6a d2 5c 95 f3 77 32 3f f6 b1 f4 d3 86 18 .\j.\..w2?...... 0260 0a a2 39 72 a8 1a 6e d7 3f 54 f5 0f 6d 50 32 9e ..9r..n.?T..mP2. 0270 94 a6 af e6 e2 da ec 70 27 fa 08 7b 26 2c a6 fc .......p'..{&,.. 0280 73 97 f4 8d 18 f5 2f e6 8e 20 2c 64 22 bc 33 8f s...../.. ,d".3. 0290 68 11 56 49 de 29 23 6b ac 95 85 63 60 a6 17 65 h.VI.)#k...c`..e 02a0 e1 95 dc 54 e7 54 77 57 4e 52 f4 c3 08 8c 39 c8 ...T.TwWNR....9. 02b0 1c 10 dc a8 9a 35 34 35 65 41 c6 a8 3d a4 6b 22 .....545eA..=.k" 02c0 c5 5c 8c 4e be 4e 65 c4 38 12 65 c4 29 88 75 3c .\.N.Ne.8.e.).u< 02d0 67 7b d6 22 f4 69 d9 67 fa 40 35 0e 06 02 18 b5 g{.".i.g.@5..... 02e0 8e 88 11 36 19 b6 97 b1 60 7f c1 08 96 7d d7 a1 ...6....`....}.. 02f0 ad b8 bf e4 d7 30 71 de a4 66 c6 fc 15 bd 24 d7 .....0q..f....$. 0300 f3 fa 2d b9 80 18 02 02 89 3e 3f 38 22 d2 24 d6 ..-......>?8".$. 0310 a4 1a e1 5c af 39 64 38 24 a5 44 23 dc 5a 9a 06 ...\.9d8$.D#.Z.. 0320 f5 88 7f 26 f9 43 21 26 4d b7 65 04 1b 2f e8 75 ...&.C!&M.e../.u 0330 a5 85 ad c8 b3 d0 7e 73 3b 7f 75 74 10 04 28 0c ......~s;.ut..(. 0340 cb 7c 1f b6 e9 34 b8 e8 cc 5f 93 4f 76 7f 73 26 .|...4..._.Ov.s& 0350 2d 3f f4 5b b0 ca d7 ed f8 be 32 22 2b cd 92 f5 -?.[......2"+... 0360 8a c9 64 c1 24 2a a5 8e 44 5f dc 7e 0c 45 80 51 ..d.$*..D_.~.E.Q 0370 1b e2 24 e0 0e 74 e5 b6 e7 58 d3 97 8e dd 42 9d ..$..t...X....B. 0380 7c 25 0c 93 12 82 ee 00 d6 6c 9e c6 be 8d 51 41 |%.......l....QA 0390 fa 84 8d 48 36 ce 00 6c 68 2b af f8 a7 ac e0 d3 ...H6..lh+...... 03a0 41 8b 76 21 0f 0b 89 cf 68 55 c0 26 93 c4 ab c2 A.v!....hU.&.... 03b0 41 d9 1d d6 9e 27 e2 32 ba b6 89 d5 58 e9 f2 5b A....'.2....X..[ 03c0 65 c0 7a 37 39 47 51 81 a8 03 83 81 d9 f4 57 71 e.z79GQ.......Wq 03d0 44 46 24 f8 ba 62 75 ed bf 08 4a 22 a5 b5 27 1d DF$..bu...J"..'. 03e0 bf f2 9c eb 52 94 8d c2 86 43 f8 29 6f f9 f7 cc ....R....C.)o... 03f0 6c 02 58 ea cd ea 36 1c 64 05 57 81 5c 67 05 c5 l.X...6.d.W.\g.. 0400 61 91 88 d9 a5 ff 52 17 26 b0 47 81 26 97 40 f8 a.....R.&.G.&.@. 0410 2a f3 3e c3 94 61 6f 5a 61 52 42 3c 6f c0 ec 4b *.>..aoZaRB.i. Data […]: aa9608ef218454dc784590317b81a517f8e2264db817108b838daf09a26f112a180e01abd6b365399e4b84c2592993ed6ce359ff45e943067119bc206c9be006b3789e0819215c750b18e7395f2a63aba08e477167eeaa701b54e266c022e6fdaff49921ed4a12e9c033644795f15d2a269 [Length: 1352]