Frame 10297: 1406 bytes on wire (11248 bits), 1406 bytes captured (11248 bits) Encapsulation type: Ethernet (1) Arrival Time: Jul 22, 2017 02:50:46.799360000 UTC UTC Arrival Time: Jul 22, 2017 02:50:46.799360000 UTC Epoch Arrival Time: 1500691846.799360000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.003900000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 432.274011000 seconds] Frame Number: 10297 Frame Length: 1406 bytes (11248 bits) Capture Length: 1406 bytes (11248 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: ASUSTekCOMPU_0e:f3:3a (00:18:f3:0e:f3:3a) Destination: ASUSTekCOMPU_0e:f3:3a (00:18:f3:0e:f3:3a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 6] Internet Protocol Version 4, Src: 104.18.40.172, Dst: 172.16.45.98 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1392 Identification: 0x1c7f (7295) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 60 Protocol: TCP (6) Header Checksum: 0x4246 [validation disabled] [Header checksum status: Unverified] Source Address: 104.18.40.172 Destination Address: 172.16.45.98 [Source GeoIP: US, ASN 13335, CLOUDFLARENET] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP AS Number: 13335] [Source or Destination GeoIP AS Number: 13335] [Source GeoIP AS Organization: CLOUDFLARENET] [Source or Destination GeoIP AS Organization: CLOUDFLARENET] [Source GeoIP Latitude: 37.751] [Source or Destination GeoIP Latitude: 37.751] [Source GeoIP Longitude: -97.822] [Source or Destination GeoIP Longitude: -97.822] [Stream index: 30] Transmission Control Protocol, Src Port: 80, Dst Port: 49160, Seq: 1076458, Ack: 1980, Len: 1352 Source Port: 80 Destination Port: 49160 [Stream index: 59] [Stream Packet Number: 1233] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1352] Sequence Number: 1076458 (relative sequence number) Sequence Number (raw): 1130955437 [Next Sequence Number: 1077810 (relative sequence number)] Acknowledgment Number: 1980 (relative ack number) Acknowledgment number (raw): 2588762052 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 35 [Calculated window size: 35840] [Window size scaling factor: 1024] Checksum: 0x526e [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 15.494237000 seconds] [Time since previous frame in this TCP stream: 0.003900000 seconds] [SEQ/ACK analysis] [iRTT: 0.065627000 seconds] [Bytes in flight: 1352] [Bytes sent since last PSH flag: 352872] TCP payload (1352 bytes) Hypertext Transfer Protocol File Data: 1352 bytes Data (1352 bytes) 0000 65 89 c7 0b e5 11 ba 05 f7 0f 4c f5 13 8d 5a 4c e.........L...ZL 0010 fd f9 8d df 93 69 f0 8c 5f a5 16 08 58 a6 36 69 .....i.._...X.6i 0020 35 1d 08 44 83 b7 76 a1 c7 36 0c 57 5e 8a 48 d5 5..D..v..6.W^.H. 0030 dd 9c 80 f4 4a 8b 06 e4 59 6f 37 15 51 c8 90 b0 ....J...Yo7.Q... 0040 5e 7a 55 67 9a 9b da e4 57 c8 c8 7d 02 54 fa 57 ^zUg....W..}.T.W 0050 fe 22 6a 2e b8 e4 bf 1c 90 11 d6 85 85 99 25 52 ."j...........%R 0060 67 77 33 0b 01 04 10 7c 30 be d4 45 26 c4 87 10 gw3....|0..E&... 0070 59 ad 04 31 b5 fc 0d b9 61 7c 85 fa d0 64 e8 1a Y..1....a|...d.. 0080 18 24 ce d4 f7 d0 71 2b 11 55 5e 52 cb 56 65 10 .$....q+.U^R.Ve. 0090 eb 7c 80 72 ec f0 ca 81 2d d4 6e 8d 2c e8 fe b0 .|.r....-.n.,... 00a0 ce 95 61 69 0d e4 5c fa d4 a8 3c 00 b4 3d ed 1e ..ai..\...<..=.. 00b0 7b e1 e8 d9 86 5e 07 63 87 6a 17 d7 4d 14 45 ab {....^.c.j..M.E. 00c0 c9 b3 49 37 b6 91 ba 35 86 e6 a9 4a 99 76 99 1b ..I7...5...J.v.. 00d0 82 f8 30 6c 82 01 d6 ad f0 4e a5 a7 96 36 fa bb ..0l.....N...6.. 00e0 97 b7 4f 86 fd c4 e7 d3 43 78 5c b8 5a 67 0f 50 ..O.....Cx\.Zg.P 00f0 72 22 3b d9 8f a5 59 12 b0 13 3f d0 46 96 77 1c r";...Y...?.F.w. 0100 e1 de 87 b2 d5 4b 6c dc 53 9c 1e b6 d0 b0 fc a2 .....Kl.S....... 0110 cf d3 2d 29 fc 65 7b 51 d2 32 ea 5b da 24 3c b7 ..-).e{Q.2.[.$<. 0120 e8 e7 c3 3b 18 b9 b9 8d 6f ff 22 92 45 f8 a6 ab ...;....o.".E... 0130 8c 16 af 55 77 71 97 43 d0 a6 83 1f 8f 6f 78 35 ...Uwq.C.....ox5 0140 5c ed 75 fb 38 04 32 9a 6c a4 6e d4 f0 fc 30 b5 \.u.8.2.l.n...0. 0150 64 6a 36 85 8c d4 35 7b 8f ad 60 65 63 40 6f 39 dj6...5{..`ec@o9 0160 5c 17 de a5 4b a4 dc 4e 33 e8 9c 32 65 0c 55 3b \...K..N3..2e.U; 0170 94 00 da 4b 2e dd 33 3b 64 94 90 92 4a af a7 3b ...K..3;d...J..; 0180 52 2d 1d ea 71 6b c0 01 1b c4 44 fb 2f 07 6a a4 R-..qk....D./.j. 0190 24 53 82 b1 86 a7 9a 68 45 cb 28 14 0e 41 13 e2 $S.....hE.(..A.. 01a0 e3 f7 2b b2 07 09 3f 47 df 6f d6 dc e0 25 62 b2 ..+...?G.o...%b. 01b0 b0 fd d6 5f 81 03 bf 42 9e 29 ba 1c 4d 0b cc b7 ..._...B.)..M... 01c0 e1 3f 22 08 1a 84 c1 27 49 bd 8e 3a 47 b3 fd 3d .?"....'I..:G..= 01d0 4b 4c a9 ce ec 5b 21 a0 e5 c4 81 af 8a 30 5d 85 KL...[!......0]. 01e0 04 d3 5a 29 c2 86 2f 2e 0c 3e 05 a8 96 33 6f aa ..Z)../..>...3o. 01f0 64 19 e9 99 4c 66 e1 f7 d3 64 c5 57 89 d3 b3 c4 d...Lf...d.W.... 0200 8b f8 2e ac b3 56 87 f9 f6 af b6 0f 31 49 16 75 .....V......1I.u 0210 70 77 22 e0 cf 64 67 f3 23 50 45 ca e7 ee 48 68 pw"..dg.#PE...Hh 0220 b0 bb 47 82 69 56 fa 19 77 e5 71 ec 6a a0 d7 ca ..G.iV..w.q.j... 0230 08 2c 21 ae e5 f4 a6 b8 3c aa b8 14 d5 3a 72 e0 .,!.....<....:r. 0240 78 2d 74 35 53 67 dd 80 f9 9f ff be 7d 12 ad 32 x-t5Sg......}..2 0250 b0 e0 4d 05 cf 28 ad 92 82 0f 89 76 56 d7 7b 72 ..M..(.....vV.{r 0260 c0 aa 3f 74 9e 87 e4 4d 5e bd 21 1a b6 bf 11 38 ..?t...M^.!....8 0270 c0 79 b3 6e 15 fe ff cb dc 46 00 c0 dc 78 d1 58 .y.n.....F...x.X 0280 65 3b 27 ff c3 a1 f9 e3 39 e9 0a 62 f9 f1 8e 0f e;'.....9..b.... 0290 98 81 ad 31 43 9a 97 b2 a3 57 b1 1b eb 18 a3 53 ...1C....W.....S 02a0 1f b1 69 1a 2d 39 71 90 fb ed 26 2a 73 71 36 78 ..i.-9q...&*sq6x 02b0 cf ab e7 e6 f3 c2 20 5c eb 7a c0 33 e7 95 ce eb ...... \.z.3.... 02c0 6f dd 97 85 da df c9 7b 55 0c 12 62 a3 61 75 e4 o......{U..b.au. 02d0 55 38 be f0 9f c8 22 d0 b2 e1 ec 9b 66 ae 99 8c U8....".....f... 02e0 0e 26 e5 71 ac be 6b cb d4 f3 21 b6 ca fb 68 98 .&.q..k...!...h. 02f0 fe 20 35 b1 a3 4f ae e4 0e 59 bc 9e 6c 34 65 37 . 5..O...Y..l4e7 0300 1b 75 ca 40 13 16 10 a3 38 6d 02 a4 f2 e2 3a 6f .u.@....8m....:o 0310 5d c5 22 30 c6 d4 79 66 77 02 62 65 f6 4d 20 62 ]."0..yfw.be.M b 0320 16 cb 73 38 3e 84 06 00 5b 3e 6c be 31 13 ac f9 ..s8>...[>l.1... 0330 30 be 15 b2 e0 21 cb d5 fd e9 28 49 ff c2 4c 61 0....!....(I..La 0340 36 fd 65 b2 b4 e4 c3 b3 4c 2c f9 81 cc 93 ba cd 6.e.....L,...... 0350 ee 1c e3 72 0f 32 12 96 b1 db 26 3a 63 dc e2 8b ...r.2....&:c... 0360 5d 06 7b 30 6d f1 6d b6 fb ef c5 46 5b 78 bb 44 ].{0m.m....F[x.D 0370 c5 53 92 c5 45 99 93 ae 80 03 0e 20 af ad 0e 83 .S..E...... .... 0380 0d a6 b4 60 47 c1 f4 d9 74 85 b9 34 32 f7 d7 c4 ...`G...t..42... 0390 4c 3f a6 2e 8f b1 8e f1 8d 4d 67 cd fd 85 2c 77 L?.......Mg...,w 03a0 b8 c2 8b 2f 99 99 33 7b 4e 91 0e a8 3c 5a da d0 .../..3{N...