Frame 10234: 1406 bytes on wire (11248 bits), 1406 bytes captured (11248 bits) Encapsulation type: Ethernet (1) Arrival Time: Jul 22, 2017 02:50:46.704515000 UTC UTC Arrival Time: Jul 22, 2017 02:50:46.704515000 UTC Epoch Arrival Time: 1500691846.704515000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.004072000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 432.179166000 seconds] Frame Number: 10234 Frame Length: 1406 bytes (11248 bits) Capture Length: 1406 bytes (11248 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: ASUSTekCOMPU_0e:f3:3a (00:18:f3:0e:f3:3a) Destination: ASUSTekCOMPU_0e:f3:3a (00:18:f3:0e:f3:3a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 6] Internet Protocol Version 4, Src: 104.18.40.172, Dst: 172.16.45.98 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1392 Identification: 0x1c55 (7253) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 60 Protocol: TCP (6) Header Checksum: 0x4270 [validation disabled] [Header checksum status: Unverified] Source Address: 104.18.40.172 Destination Address: 172.16.45.98 [Source GeoIP: US, ASN 13335, CLOUDFLARENET] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP AS Number: 13335] [Source or Destination GeoIP AS Number: 13335] [Source GeoIP AS Organization: CLOUDFLARENET] [Source or Destination GeoIP AS Organization: CLOUDFLARENET] [Source GeoIP Latitude: 37.751] [Source or Destination GeoIP Latitude: 37.751] [Source GeoIP Longitude: -97.822] [Source or Destination GeoIP Longitude: -97.822] [Stream index: 30] Transmission Control Protocol, Src Port: 80, Dst Port: 49160, Seq: 1019674, Ack: 1980, Len: 1352 Source Port: 80 Destination Port: 49160 [Stream index: 59] [Stream Packet Number: 1170] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1352] Sequence Number: 1019674 (relative sequence number) Sequence Number (raw): 1130898653 [Next Sequence Number: 1021026 (relative sequence number)] Acknowledgment Number: 1980 (relative ack number) Acknowledgment number (raw): 2588762052 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 35 [Calculated window size: 35840] [Window size scaling factor: 1024] Checksum: 0xc20c [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 15.399392000 seconds] [Time since previous frame in this TCP stream: 0.004072000 seconds] [SEQ/ACK analysis] [iRTT: 0.065627000 seconds] [Bytes in flight: 1352] [Bytes sent since last PSH flag: 296088] TCP payload (1352 bytes) Hypertext Transfer Protocol File Data: 1352 bytes Data (1352 bytes) 0000 71 30 7b 97 47 42 ff fe 50 e5 ab b9 bf ea b6 a7 q0{.GB..P....... 0010 96 0f cf 5e ed 0a a1 cf 58 05 6f 1d d0 13 a1 7b ...^....X.o....{ 0020 be f0 ea c2 2d 1b b8 bc 8c cf d5 69 c4 2a 1f 9a ....-......i.*.. 0030 46 d4 f3 c2 87 04 0d ea 15 52 7d b0 30 2c 42 d9 F........R}.0,B. 0040 14 e7 bd 57 94 c4 b4 1c 88 bb 0d d3 73 b0 aa 2f ...W........s../ 0050 e7 e8 3d eb 4e f7 f7 35 78 8e 86 97 e8 77 56 a5 ..=.N..5x....wV. 0060 e7 ec 6e 43 5e a1 52 35 94 54 f3 41 a4 59 a4 f3 ..nC^.R5.T.A.Y.. 0070 28 10 eb 01 23 5a 1f 74 52 8e 90 c1 da 57 95 03 (...#Z.tR....W.. 0080 d0 89 24 29 12 d9 5d 08 84 d7 b7 46 37 3e 85 ff ..$)..]....F7>.. 0090 48 a2 15 bf 08 d6 8c 69 65 25 1f e9 d1 e7 1f 3b H......ie%.....; 00a0 eb 6e 08 ee aa 77 07 c5 cb 21 94 6f b4 79 fc 3f .n...w...!.o.y.? 00b0 04 08 57 cb 91 d3 02 69 8b 17 cc a4 97 2d bf 53 ..W....i.....-.S 00c0 e3 ac 76 76 21 14 b5 6d cc 61 71 91 b9 e8 0d ef ..vv!..m.aq..... 00d0 49 21 69 e4 8c b4 ca 06 64 6d 57 b6 56 36 7a af I!i.....dmW.V6z. 00e0 b6 36 5e 4f c6 0e 94 27 74 23 ab 78 14 0d ec 44 .6^O...'t#.x...D 00f0 a1 5c 66 8c 8c af 51 0d 95 82 22 fa 5f 70 27 13 .\f...Q..."._p'. 0100 86 07 12 ea 6f 88 2d 75 48 80 58 c9 38 02 4f ff ....o.-uH.X.8.O. 0110 73 78 8d d0 7d a9 b9 2c 79 77 73 72 c1 91 d8 25 sx..}..,ywsr...% 0120 68 14 18 ec 8f f1 64 9e 8f b9 c6 97 ba 1e d7 81 h.....d......... 0130 d5 73 90 5d f5 8d 45 10 1e eb a6 00 ce b9 a5 34 .s.]..E........4 0140 ef 77 3d 9a e8 cc 14 5f ab e4 f1 50 cc 77 e8 1f .w=...._...P.w.. 0150 16 c0 7f 9e cf 07 01 78 ff 94 f3 a2 d7 e4 b3 a5 .......x........ 0160 2a 87 ad 6d 17 5a 99 d1 07 5e 4e 93 0a 3a 2d 47 *..m.Z...^N..:-G 0170 fd 77 ce 86 22 33 29 99 8e 87 d6 fc 27 74 a1 d7 .w.."3).....'t.. 0180 66 6c f1 9f 66 f5 33 a9 73 bf 21 f8 48 ea 98 d0 fl..f.3.s.!.H... 0190 63 8d 32 58 ec 15 6e cd 24 4f 34 92 66 7c 9b c6 c.2X..n.$O4.f|.. 01a0 f7 c5 9a e9 48 43 73 03 d5 14 64 f0 be 77 57 b2 ....HCs...d..wW. 01b0 20 a7 b3 3d cf 36 37 69 16 18 e8 e2 0b 89 83 01 ..=.67i........ 01c0 00 57 3e 8a b2 7c b5 70 c3 c5 e4 e9 ef 40 d8 37 .W>..|.p.....@.7 01d0 5a 35 cf c2 96 bb 1f 4d 6a f5 55 ea ab 00 05 5c Z5.....Mj.U....\ 01e0 7a da 98 61 1a 19 97 86 4d 82 fa 55 62 33 82 02 z..a....M..Ub3.. 01f0 5a 1b 82 43 3e e9 0e 3c e5 b4 c4 12 58 42 3a bd Z..C>..<....XB:. 0200 e1 0c fe a0 a4 ac 9a c6 2f ac 66 ca 97 7e 62 bd ......../.f..~b. 0210 99 41 44 e6 ba a9 f6 83 f3 31 0f 28 4f 79 c4 21 .AD......1.(Oy.! 0220 5e d3 ac bc 35 0e 0a 04 53 22 75 5a f9 16 1c b5 ^...5...S"uZ.... 0230 35 ec 5a 5d 76 cf c4 ca bd fe 6a bd 19 3a 08 36 5.Z]v.....j..:.6 0240 6b 87 ce 87 bc 07 db 46 c9 4b fa 6f 0a b8 12 b3 k......F.K.o.... 0250 8d 3d 1f 33 b7 43 41 23 e4 21 aa 11 f6 dd e6 42 .=.3.CA#.!.....B 0260 e0 c1 2f 37 af 92 f0 fe c7 d5 c3 5c c2 4f 0b 82 ../7.......\.O.. 0270 c6 a3 79 3a 6b 23 39 7e 7a 05 8c 55 8c 61 54 d5 ..y:k#9~z..U.aT. 0280 52 a5 61 8e 53 7c 03 5a ed 25 84 50 2c ff 2f f2 R.a.S|.Z.%.P,./. 0290 88 2f 6d be 37 29 26 a1 0f fe c2 6a 06 7e 64 0b ./m.7)&....j.~d. 02a0 f8 ff cf 8b 95 72 02 75 4a e5 50 d9 7d e9 84 a8 .....r.uJ.P.}... 02b0 79 3d fe 00 14 f4 25 06 32 e3 66 5a 8a f8 fe bf y=....%.2.fZ.... 02c0 d6 8f eb 35 33 e0 12 db ca 64 5b 6f 8b d0 1f 1e ...53....d[o.... 02d0 35 04 e2 56 5a 7a 6e e5 45 c5 8a 9c 97 3c 94 30 5..VZzn.E....<.0 02e0 18 c0 e2 70 bb ce ab 2a cb 3f f7 97 6a 79 2d 67 ...p...*.?..jy-g 02f0 41 fb bd 68 ba 25 2f 22 f2 06 c7 2c 4e 75 d2 87 A..h.%/"...,Nu.. 0300 5c 99 cf ff 30 f8 ce c7 74 43 98 43 30 27 32 37 \...0...tC.C0'27 0310 a7 be 3a df d4 1f 18 f0 dc 0d f1 77 e0 5d 77 71 ..:........w.]wq 0320 d9 ad 6a 47 98 0e af 8c f6 f4 db b5 10 e6 38 87 ..jG..........8. 0330 2c 7a 57 12 4a 5d ef e0 89 56 a8 32 20 30 07 cc ,zW.J]...V.2 0.. 0340 c5 f7 69 dd a7 43 81 aa d9 93 45 33 9a 59 91 bc ..i..C....E3.Y.. 0350 1b 4c ce d2 f2 29 f8 eb ed ed b0 4d ed 95 33 c4 .L...).....M..3. 0360 9c ce 81 67 6a e8 b2 72 33 86 5f d7 e8 d6 c8 0d ...gj..r3._..... 0370 5d 09 8f b9 16 ba c2 b1 f0 75 ad dc cb c4 24 49 ]........u....$I 0380 70 0d 1b dd 41 ed 00 b4 74 ae c5 db 4d 54 a2 6e p...A...t...MT.n 0390 bc 41 1d a7 d5 ad a1 0a 2a 07 f4 b4 6e db 83 de .A......*...n... 03a0 e8 d0 53 5f 52 03 25 90 c8 b3 ff a2 fe 30 8a 29 ..S_R.%......0.) 03b0 0f 76 60 09 6f 15 b1 ef ab 8e 14 b3 9b a7 fe 66 .v`.o..........f 03c0 00 dd 73 88 2e 61 dc b1 1f 5f 2a 5b 11 9d ed 51 ..s..a..._*[...Q 03d0 02 b6 57 20 ff e5 f5 56 52 63 4b 0a 6f 06 42 d4 ..W ...VRcK.o.B. 03e0 d4 5b 49 d8 2d d0 a4 86 2a 12 bb 46 78 1e 58 d7 .[I.-...*..Fx.X. 03f0 57 b5 c7 fe 89 92 9c fa fd 50 14 06 89 ce af d7 W........P...... 0400 f8 be 3b 0e 81 84 a3 f6 5f a2 6b b9 5c 40 2e 43 ..;....._.k.\@.C 0410 c8 7b df 46 d7 e4 65 f5 62 0c 24 4b e3 f7 48 7a .{.F..e.b.$K..Hz 0420 ba 92 11 96 be c0 8e 16 ef 61 56 83 d8 b6 d9 ad .........aV..... 0430 b9 30 54 c7 fc a0 71 cf 54 e0 8a 81 5e 06 ea 78 .0T...q.T...^..x 0440 70 d2 1f f0 54 9f d0 c2 94 8b fe cb 2d a8 44 7d p...T.......-.D} 0450 a3 bc ad df 69 e3 ac 24 10 91 76 bf 2a 74 ae 2a ....i..$..v.*t.* 0460 eb ef c7 c9 43 5a f4 14 12 63 aa 8c 43 f6 b1 3e ....CZ...c..C..> 0470 f0 c5 17 59 25 bb 71 df 49 e1 9a 81 22 0f 4c 4c ...Y%.q.I...".LL 0480 2c 7e 34 b8 0f da 40 4a 9c 07 bb c7 9b 76 3d 4c ,~4...@J.....v=L 0490 34 83 86 04 e4 1c 27 f3 5c 08 a7 8b e3 f4 f5 d9 4.....'.\....... 04a0 e3 75 0e 21 d9 f8 21 64 4c 03 08 c6 fa 8b 70 99 .u.!..!dL.....p. 04b0 87 41 84 3e 8e 58 8d a4 1b 39 99 3e f2 d4 43 99 .A.>.X...9.>..C. 04c0 93 3d b8 d6 57 89 07 af da 38 25 1f e1 09 d9 b0 .=..W....8%..... 04d0 1e f5 db 0c 2c 4d c6 91 a0 a5 d0 a2 9f 8c f6 fa ....,M.......... 04e0 96 3a 5e 60 49 54 6b 44 f1 64 44 90 e1 f9 cb b6 .:^`ITkD.dD..... 04f0 2b 43 19 60 9e ed 15 56 96 ad bb 41 af b4 5b e1 +C.`...V...A..[. 0500 47 bd e4 3f 3d 1d d6 c6 d8 3b f1 a5 fe 48 68 d3 G..?=....;...Hh. 0510 22 77 d6 b7 90 ad 51 18 bf be 1a 16 29 78 58 de "w....Q.....)xX. 0520 67 07 43 e0 01 7a 68 f0 76 34 eb a8 e6 e8 71 ca g.C..zh.v4....q. 0530 94 f6 5e c0 d1 79 d5 b7 ff 79 e0 30 28 2c d3 f9 ..^..y...y.0(,.. 0540 ed 9c 3c 6f 40 84 74 de ..