Frame 10271: 1406 bytes on wire (11248 bits), 1406 bytes captured (11248 bits) Encapsulation type: Ethernet (1) Arrival Time: Jul 22, 2017 02:50:46.764712000 UTC UTC Arrival Time: Jul 22, 2017 02:50:46.764712000 UTC Epoch Arrival Time: 1500691846.764712000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000176000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 432.239363000 seconds] Frame Number: 10271 Frame Length: 1406 bytes (11248 bits) Capture Length: 1406 bytes (11248 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: ASUSTekCOMPU_0e:f3:3a (00:18:f3:0e:f3:3a) Destination: ASUSTekCOMPU_0e:f3:3a (00:18:f3:0e:f3:3a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 6] Internet Protocol Version 4, Src: 104.18.40.172, Dst: 172.16.45.98 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1392 Identification: 0x1c6e (7278) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 60 Protocol: TCP (6) Header Checksum: 0x4257 [validation disabled] [Header checksum status: Unverified] Source Address: 104.18.40.172 Destination Address: 172.16.45.98 [Source GeoIP: US, ASN 13335, CLOUDFLARENET] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP AS Number: 13335] [Source or Destination GeoIP AS Number: 13335] [Source GeoIP AS Organization: CLOUDFLARENET] [Source or Destination GeoIP AS Organization: CLOUDFLARENET] [Source GeoIP Latitude: 37.751] [Source or Destination GeoIP Latitude: 37.751] [Source GeoIP Longitude: -97.822] [Source or Destination GeoIP Longitude: -97.822] [Stream index: 30] Transmission Control Protocol, Src Port: 80, Dst Port: 49160, Seq: 1053474, Ack: 1980, Len: 1352 Source Port: 80 Destination Port: 49160 [Stream index: 59] [Stream Packet Number: 1207] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1352] Sequence Number: 1053474 (relative sequence number) Sequence Number (raw): 1130932453 [Next Sequence Number: 1054826 (relative sequence number)] Acknowledgment Number: 1980 (relative ack number) Acknowledgment number (raw): 2588762052 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 35 [Calculated window size: 35840] [Window size scaling factor: 1024] Checksum: 0x965b [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 15.459589000 seconds] [Time since previous frame in this TCP stream: 0.000176000 seconds] [SEQ/ACK analysis] [iRTT: 0.065627000 seconds] [Bytes in flight: 2704] [Bytes sent since last PSH flag: 329888] TCP payload (1352 bytes) Hypertext Transfer Protocol File Data: 1352 bytes Data (1352 bytes) 0000 39 cb a6 3e a6 f2 cf a3 f9 7f bf 5e e4 a4 be 18 9..>.......^.... 0010 9a c2 34 d2 06 d4 ec a9 0e c5 0c 5f 2f 0d e8 a4 ..4........_/... 0020 83 3c 96 a5 87 79 4a e0 7e 01 9e f5 89 53 21 a8 .<...yJ.~....S!. 0030 3d d3 12 db 6e 5d 77 25 7f 59 22 2b 31 fa f7 8a =...n]w%.Y"+1... 0040 e9 9b 10 1a 7f 13 10 ce 10 9d 38 7d 8b 8e c7 93 ..........8}.... 0050 a8 f6 cb 5f 49 71 7a 73 f5 0e fe 91 9b 1a 6d 56 ..._Iqzs......mV 0060 44 a1 46 df 06 64 11 a5 f0 0a d1 7c 42 77 c6 9a D.F..d.....|Bw.. 0070 de 36 fd c6 68 09 83 86 e7 fd f3 96 6d 08 14 c9 .6..h.......m... 0080 16 80 68 e9 22 28 15 c0 fe 2e 52 d2 34 7d db 76 ..h."(....R.4}.v 0090 4e 79 26 c6 94 d1 53 e7 41 b3 dd a0 55 5f c4 00 Ny&...S.A...U_.. 00a0 60 ce 9d 79 28 31 7c dd a6 25 87 f0 96 3a aa 81 `..y(1|..%...:.. 00b0 a6 5f 6c 7b 46 14 8b 6e 9e 93 9f 25 e2 d7 69 24 ._l{F..n...%..i$ 00c0 b1 ee 14 1f 20 8d 2b 2a 52 12 90 f6 e1 d8 dd 5d .... .+*R......] 00d0 15 94 b2 72 84 51 60 f5 9f 04 57 d5 9c 30 8a cc ...r.Q`...W..0.. 00e0 3a 02 65 7b d0 4a 47 76 81 d0 00 b3 1b 4d ea 40 :.e{.JGv.....M.@ 00f0 0c 49 30 32 d2 0c d6 23 51 5e 56 f9 d4 4a 85 6d .I02...#Q^V..J.m 0100 87 4b 13 55 47 b1 c7 2f 7d b0 0b 7b 9f 66 8c 48 .K.UG../}..{.f.H 0110 1b 0d 4f f9 76 e4 bc 3c 20 e6 3d 2c 9b 5d 5b ad ..O.v..< .=,.][. 0120 a4 7e 67 3f 6a 85 76 7b 4a 5b 4a f3 02 36 ed 1e .~g?j.v{J[J..6.. 0130 91 06 0f 7b e9 73 8e 05 94 f3 a7 54 99 b1 33 ed ...{.s.....T..3. 0140 d2 b8 c9 61 31 06 1e ed ed bd 69 5c e2 51 78 fe ...a1.....i\.Qx. 0150 23 2b d0 7b 6a 83 36 4e c7 20 ea 43 2b 61 cf d0 #+.{j.6N. .C+a.. 0160 79 0a 08 5a 10 ed 07 54 53 0f 75 da 6c 65 02 57 y..Z...TS.u.le.W 0170 07 f6 5e a1 be 94 80 73 43 73 f6 8c 9a 01 22 68 ..^....sCs...."h 0180 41 00 58 16 e1 e9 3e d5 a1 b7 2f 54 95 7d 38 7e A.X...>.../T.}8~ 0190 07 db b2 b8 35 c6 d9 28 62 d8 5a 45 0a 8c e9 a2 ....5..(b.ZE.... 01a0 a4 f0 47 89 32 b0 70 24 a1 61 e3 b1 d3 0f 3d 25 ..G.2.p$.a....=% 01b0 bc 15 6d 54 7c f7 b2 2a 98 89 5e 4e df bc d1 99 ..mT|..*..^N.... 01c0 8e 92 79 97 d3 a8 e4 7a b7 b3 bf f3 36 ae 97 b3 ..y....z....6... 01d0 d9 42 ff b7 94 14 96 0f 61 77 83 a3 93 d2 50 7c .B......aw....P| 01e0 c6 70 47 f8 e5 c3 ba 4b 62 33 06 51 ca fc 07 b2 .pG....Kb3.Q.... 01f0 7b 7a d2 c0 55 56 c4 df 44 35 e6 a8 63 7f 9b 67 {z..UV..D5..c..g 0200 ec a0 df d0 0f c4 d0 f3 5c 4e 3a b5 9f a2 76 a1 ........\N:...v. 0210 6b 15 59 aa e0 ce 3d f6 08 51 89 a4 6f 90 2b bb k.Y...=..Q..o.+. 0220 97 dd a9 40 fd 3b 45 2b be f9 84 b9 da ab 39 12 ...@.;E+......9. 0230 c6 d4 43 26 ca 12 c6 fe 37 a1 80 55 e1 f8 fb e4 ..C&....7..U.... 0240 b7 83 aa cb 8b 99 a0 f1 04 3d 41 da 27 fb d6 64 .........=A.'..d 0250 c5 cf c1 6c b5 9f 97 83 58 2f e7 20 53 c6 c2 04 ...l....X/. S... 0260 a6 be 77 41 d4 f7 4a ca 12 b1 0c c4 9d 7f a4 8e ..wA..J......... 0270 7a 10 b6 d3 95 50 b7 33 2d 8a 83 fe d1 a5 71 a9 z....P.3-.....q. 0280 84 d2 3a dd a6 d3 e7 db 3b b0 40 fb 06 35 92 e3 ..:.....;.@..5.. 0290 46 eb fc 57 60 48 4e 9e 7c d2 7d bf 2e 57 97 7d F..W`HN.|.}..W.} 02a0 c5 85 4d 80 97 9f 0c 2f fe 46 2c 64 44 de 4b 30 ..M..../.F,dD.K0 02b0 0d ef ab 4b bb 80 de ea 17 91 66 cf ab 4d de f1 ...K......f..M.. 02c0 58 44 72 1a 04 a3 6b 79 06 20 49 5a 23 2a 82 80 XDr...ky. IZ#*.. 02d0 6f 5c 08 b6 52 f0 85 17 77 cb f1 0e 54 06 dc 9a o\..R...w...T... 02e0 22 85 20 fe 84 4f 39 56 e1 48 73 1c 46 45 3b f3 ". ..O9V.Hs.FE;. 02f0 f5 5f 83 73 fa d8 78 e8 6a 99 dc f4 56 d7 f3 2c ._.s..x.j...V.., 0300 56 e8 0b 82 bf 1a f9 af ba f2 56 9d 59 90 ee 98 V.........V.Y... 0310 f1 55 b1 63 ec e3 1a 93 4a d3 62 51 75 86 12 7d .U.c....J.bQu..} 0320 b4 dd f7 77 c4 90 a5 4a 26 ec 9d 9b 12 53 07 f2 ...w...J&....S.. 0330 8c 9d 6f 7d 55 7d fc 4b 97 ba 30 19 83 70 33 52 ..o}U}.K..0..p3R 0340 f7 63 54 55 7b d7 d1 01 8e 8d 4a 00 6e 08 6a 16 .cTU{.....J.n.j. 0350 ed e8 a3 70 01 e7 89 f8 d1 51 75 75 44 9d 90 40 ...p.....QuuD..@ 0360 ad 80 1a 7f fe 09 9d be 32 c7 7b 13 32 d1 f1 bf ........2.{.2... 0370 00 47 a9 b6 d4 74 d4 d1 b9 3b d5 fb c0 12 2d 78 .G...t...;....-x 0380 35 60 fc b2 97 ee 0b 1a b9 ff b7 a1 79 63 18 90 5`..........yc.. 0390 b6 0e 69 c2 90 a6 49 55 a6 69 4c 05 c4 98 1a 2c ..i...IU.iL...., 03a0 da fc ee 88 5a 32 46 76 47 5c fa 4d 28 4b 52 18 ....Z2FvG\.M(KR. 03b0 76 38 85 c6 b2 73 6a b7 fc fc 46 59 8d cc 85 f4 v8...sj...FY.... 03c0 b5 e4 e8 3c b6 47 08 75 9d 15 d3 00 06 3d 8b db ...<.G.u.....=.. 03d0 ad 6e b2 40 6c e7 c3 e0 c4 d3 4b 19 db 74 58 4d .n.@l.....K..tXM 03e0 6b 53 45 57 a6 bc a7 55 67 e5 00 5d aa c7 fe 4b kSEW...Ug..]...K 03f0 cd 82 3b ae 43 68 b2 af 59 98 75 41 21 eb 65 96 ..;.Ch..Y.uA!.e. 0400 e3 09 b2 ad ab 3b 65 cc 15 94 29 9d f5 fd eb 27 .....;e...)....' 0410 95 96 39 39 1a bd 06 b3 b5 ff 72 15 01 43 e2 5b ..99......r..C.[ 0420 00 71 c4 e6 79 45 d6 7d b7 89 79 17 89 48 67 b8 .q..yE.}..y..Hg. 0430 39 7a 48 37 14 75 c4 21 db e9 0f ad c1 68 63 56 9zH7.u.!.....hcV 0440 eb 8a ac b1 b6 5c 36 3b 52 0f 47 13 0a b7 da 49 .....\6;R.G....I 0450 a3 33 a2 2b 31 e0 91 7f 3f f1 da 2b f6 6d 2e 79 .3.+1...?..+.m.y 0460 a6 47 c2 10 c8 2e e2 99 92 33 28 69 32 13 e6 43 .G.......3(i2..C 0470 c6 1f ab d2 f5 6e 9e a2 b0 3c ae d9 21 3a b4 37 .....n...<..!:.7 0480 a4 09 0a ad 32 3f 71 cb 1d bf f1 11 ed f5 f6 03 ....2?q......... 0490 3e 3f 2b 52 47 4c ee 44 f5 df 3b 28 ef 8a 8d b8 >?+RGL.D..;(.... 04a0 27 69 0b 44 4d b2 b2 9b fb af 79 1e bf 6e 08 72 'i.DM.....y..n.r 04b0 0c cf 28 13 b7 e4 17 51 aa 8f 9e c8 64 6c 18 e7 ..(....Q....dl.. 04c0 4d 59 80 ab 6d 81 72 f6 20 b2 13 e3 cf 2c 10 6e MY..m.r. ....,.n 04d0 45 fa 76 5f 95 f2 3c 86 f6 0e fc 92 d0 19 3a 3c E.v_..<.......:< 04e0 95 95 99 2f f5 1a 48 e0 37 c8 97 58 4e 20 af 12 .../..H.7..XN .. 04f0 fe 3f e9 e1 ec 3a 3d 35 07 42 e0 0c c9 25 bf 6d .?...:=5.B...%.m 0500 02 be 1a e0 eb f2 9f 26 f1 27 01 9d 9b be 0c 50 .......&.'.....P 0510 6c 8d 05 5e ef 39 3f f1 c2 c4 a7 e0 f7 2d de d7 l..^.9?......-.. 0520 65 72 36 ea 9f 3f fe fc 2c b2 dd fa 5c c2 36 e7 er6..?..,...\.6. 0530 e9 e5 9e 9d 1f ab e3 a8 bd 02 ae cb 08 d1 f6 9b ................ 0540 b8 0e 54 f0 33 d6 d3 4b ..T.3..K Data […]: 39cba63ea6f2cfa3f97fbf5ee4a4be189ac234d206d4eca90ec50c5f2f0de8a4833c96a587794ae07e019ef5895321a83dd312db6e5d77257f59222b31faf78ae99b101a7f1310ce109d387d8b8ec793a8f6cb5f49717a73f50efe919b1a6d5644a146df066411a5f00ad17c4277c69ade3 [Length: 1352]