Frame 10325: 1406 bytes on wire (11248 bits), 1406 bytes captured (11248 bits) Encapsulation type: Ethernet (1) Arrival Time: Jul 22, 2017 02:50:46.847944000 UTC UTC Arrival Time: Jul 22, 2017 02:50:46.847944000 UTC Epoch Arrival Time: 1500691846.847944000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000136000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 432.322595000 seconds] Frame Number: 10325 Frame Length: 1406 bytes (11248 bits) Capture Length: 1406 bytes (11248 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: ASUSTekCOMPU_0e:f3:3a (00:18:f3:0e:f3:3a) Destination: ASUSTekCOMPU_0e:f3:3a (00:18:f3:0e:f3:3a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 6] Internet Protocol Version 4, Src: 104.18.40.172, Dst: 172.16.45.98 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1392 Identification: 0x1c92 (7314) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 60 Protocol: TCP (6) Header Checksum: 0x4233 [validation disabled] [Header checksum status: Unverified] Source Address: 104.18.40.172 Destination Address: 172.16.45.98 [Source GeoIP: US, ASN 13335, CLOUDFLARENET] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP AS Number: 13335] [Source or Destination GeoIP AS Number: 13335] [Source GeoIP AS Organization: CLOUDFLARENET] [Source or Destination GeoIP AS Organization: CLOUDFLARENET] [Source GeoIP Latitude: 37.751] [Source or Destination GeoIP Latitude: 37.751] [Source GeoIP Longitude: -97.822] [Source or Destination GeoIP Longitude: -97.822] [Stream index: 30] Transmission Control Protocol, Src Port: 80, Dst Port: 49160, Seq: 1102146, Ack: 1980, Len: 1352 Source Port: 80 Destination Port: 49160 [Stream index: 59] [Stream Packet Number: 1261] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1352] Sequence Number: 1102146 (relative sequence number) Sequence Number (raw): 1130981125 [Next Sequence Number: 1103498 (relative sequence number)] Acknowledgment Number: 1980 (relative ack number) Acknowledgment number (raw): 2588762052 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 35 [Calculated window size: 35840] [Window size scaling factor: 1024] Checksum: 0x0ba1 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 15.542821000 seconds] [Time since previous frame in this TCP stream: 0.000136000 seconds] [SEQ/ACK analysis] [iRTT: 0.065627000 seconds] [Bytes in flight: 2704] [Bytes sent since last PSH flag: 378560] TCP payload (1352 bytes) Hypertext Transfer Protocol File Data: 1352 bytes Data (1352 bytes) 0000 7b 42 7d ff fb 1d 03 a5 c4 33 2d 03 b5 46 8b a1 {B}......3-..F.. 0010 db 0c 7e 43 5d fd 5a ae a9 82 d1 6f 81 f3 0c 50 ..~C].Z....o...P 0020 b5 3c b3 22 1e 3f 42 4b 4d 58 ed d8 08 87 e8 b3 .<.".?BKMX...... 0030 03 9d b0 84 5e b0 e8 71 a3 34 89 b5 da d9 79 4c ....^..q.4....yL 0040 78 42 89 8e 38 d3 38 98 c7 70 8b d2 53 a9 bf ed xB..8.8..p..S... 0050 cd a2 ab ef e7 32 a8 0c 1f ea 3b 79 f8 82 84 d0 .....2....;y.... 0060 6c 70 5b 01 ea 3d 05 21 16 50 02 a9 6c aa 1f fe lp[..=.!.P..l... 0070 12 f3 32 da 75 54 3a f5 31 d1 62 00 5b b4 ff 8b ..2.uT:.1.b.[... 0080 d0 2f 80 75 e1 a4 69 2e c5 31 84 03 0a 5e e8 b9 ./.u..i..1...^.. 0090 0c da 71 b9 73 e1 98 4b 54 71 78 49 5f 23 bf 29 ..q.s..KTqxI_#.) 00a0 4b f0 fb 35 c1 2d be a8 eb fc e9 67 dd 6f 30 15 K..5.-.....g.o0. 00b0 f8 2b fa 4e c8 dd f6 92 39 82 92 2c 42 eb cc cd .+.N....9..,B... 00c0 af e6 d2 03 1d 2b ff 8d 8a d4 c7 c5 0b eb 49 e1 .....+........I. 00d0 0d 95 dc 46 bf 4e 53 f7 58 e6 12 c5 c0 d1 37 22 ...F.NS.X.....7" 00e0 60 75 93 3f b0 32 8c 57 30 66 80 61 7c 3a 9a c0 `u.?.2.W0f.a|:.. 00f0 b3 cb 51 2a d5 8a ea 49 59 d7 b0 ed 2d 4d 66 82 ..Q*...IY...-Mf. 0100 db 3c 84 78 6c 6b 1f 24 74 45 d0 16 dc c5 53 ab .<.xlk.$tE....S. 0110 77 b5 72 fa 15 93 02 12 fa 99 db a7 ce 1c ae 3c w.r............< 0120 07 ad 50 73 2a 46 e7 e4 4b fa b8 8a 81 64 7a 1f ..Ps*F..K....dz. 0130 3a 8e 5f d5 2f 0e 57 50 a6 ff 5d 36 e2 7e 64 e5 :._./.WP..]6.~d. 0140 6d db 45 64 5b fd 80 33 d6 45 c4 ca 6d 3b 31 f0 m.Ed[..3.E..m;1. 0150 82 b6 cc b7 59 b1 1c 10 f3 62 71 a6 98 22 1d 47 ....Y....bq..".G 0160 d1 06 ae dd f9 44 8b 30 98 2b 2e be 6b 61 e2 fc .....D.0.+..ka.. 0170 bb 7d 73 b0 f4 2c 70 a1 18 20 1c 43 08 73 7a 00 .}s..,p.. .C.sz. 0180 5c e2 b8 9e 4d 1c 3e 1e 39 24 24 2f 61 1a 80 0d \...M.>.9$$/a... 0190 b1 2f 42 b4 80 7a 2e b2 17 c8 0e ef 84 2a 4c 7c ./B..z.......*L| 01a0 79 18 5c 4b 9b 9c 7d 83 70 fc 28 1f 3c 93 0f a9 y.\K..}.p.(.<... 01b0 76 62 74 84 d4 be 0a 11 18 34 81 10 8f 13 40 08 vbt......4....@. 01c0 81 b1 31 75 83 bd fb c7 4b 1c bb 54 86 74 63 72 ..1u....K..T.tcr 01d0 d0 2a 6e 3a 3b 41 91 58 bf 6a cf 75 4a d6 0b b4 .*n:;A.X.j.uJ... 01e0 cd c1 46 e5 8a 3c ca f5 40 ae 58 ed ff 7b 7e 44 ..F..<..@.X..{~D 01f0 a9 fa 05 e3 4d c9 be 8b 7e 02 78 35 b2 8a b6 dd ....M...~.x5.... 0200 6a 61 a6 d3 35 2c 93 e6 9c 71 92 d0 3e 0c 8f 8e ja..5,...q..>... 0210 03 dc 12 47 13 77 69 51 0b 24 0e a8 7e 0e 2f 41 ...G.wiQ.$..~./A 0220 40 1c 6d ee fa 01 ab b0 73 37 a2 34 1b 09 bc eb @.m.....s7.4.... 0230 93 20 d9 12 5d 50 8d 0b b6 1d c3 72 26 2f 40 a3 . ..]P.....r&/@. 0240 53 3f 5c 60 3e ee 95 ba 84 86 4c 33 77 f4 41 7c S?\`>.....L3w.A| 0250 0f 18 37 c5 a7 68 4e d1 fd e6 01 a2 1f 2f 87 bf ..7..hN....../.. 0260 a9 86 1b f8 61 ea 00 55 7c a9 ba b1 84 dd 50 cf ....a..U|.....P. 0270 b3 70 8f 3b e0 52 f2 65 fb fa 15 ca c5 5f ad a7 .p.;.R.e....._.. 0280 b2 4d 81 b6 b7 c6 c6 d5 d3 91 a9 ff 9f 7f 4a d7 .M............J. 0290 af 3b be ab 3d 05 06 f7 62 f2 cc bc 30 98 5f f8 .;..=...b...0._. 02a0 46 67 90 c9 93 ad 8f 31 06 87 ba ca 96 c7 a2 b2 Fg.....1........ 02b0 f3 64 e1 71 33 d2 7f 18 87 ae 19 b6 d3 b1 e1 de .d.q3........... 02c0 ac dd dd 3b 84 b7 03 d3 92 c7 6c 9f 32 53 18 da ...;......l.2S.. 02d0 a9 34 b6 cd c7 93 99 e9 8b ca 53 b7 66 d1 fe 77 .4........S.f..w 02e0 a8 8e 31 ff ea 3f ed 30 b2 e4 b3 55 5e 7a 53 d4 ..1..?.0...U^zS. 02f0 b1 eb 6b 1c c6 2f ae 22 13 44 24 bd 26 b5 97 40 ..k../.".D$.&..@ 0300 29 63 2d 8a 28 5f 35 48 ad 3c c2 9c 9e 14 9d 05 )c-.(_5H.<...... 0310 40 5e 00 7d 43 00 b6 07 d2 85 ef 69 c3 54 df 5a @^.}C......i.T.Z 0320 83 dd 79 08 41 fb 50 46 6c fd 31 69 ac f4 72 5d ..y.A.PFl.1i..r] 0330 99 7f ee 08 48 61 62 c1 ef 69 d3 39 46 ce 65 da ....Hab..i.9F.e. 0340 02 8e ce ef 83 a7 f0 9d be 4d 19 17 be d5 db 51 .........M.....Q 0350 82 4f 87 40 92 db 35 a0 b6 10 06 3c ff 27 1f 55 .O.@..5....<.'.U 0360 02 ff bc 6e 4b 64 19 40 75 07 d5 ee b5 48 16 2c ...nKd.@u....H., 0370 10 96 a6 5b cf 30 dc 2d f4 5c a9 91 67 70 ca 5f ...[.0.-.\..gp._ 0380 62 5b 7b 38 bc 21 04 db 90 5d 4b 05 79 ff 11 3b b[{8.!...]K.y..; 0390 1f af 28 91 e9 0b f6 e0 8d 68 b1 f2 08 56 20 cf ..(......h...V . 03a0 27 d2 34 6e f4 6a 9c 09 6b 5f 7b 11 a0 17 09 7c '.4n.j..k_{....| 03b0 24 80 3b 4e ee 2a 84 8d 6f 3a 43 a0 91 9c e5 62 $.;N.*..o:C....b 03c0 80 73 61 f2 8f 21 b5 49 f8 ed 41 01 5f 0d ce 35 .sa..!.I..A._..5 03d0 65 8f 10 c9 aa 62 64 dd f7 98 6a 51 4f 13 b5 25 e....bd...jQO..% 03e0 e0 4f 9e ad 07 cb 44 1b 67 a5 6b ad 3e 4c 3e 81 .O....D.g.k.>L>. 03f0 84 5d 45 e6 ab f4 6f 0d 18 69 a0 0a 11 68 80 5b .]E...o..i...h.[ 0400 0c ce ef 22 c5 6d 8f 03 fa 7a e6 49 f4 96 f6 20 ...".m...z.I... 0410 02 a5 00 62 16 e2 30 29 d3 c7 b4 52 d0 10 53 f7 ...b..0)...R..S. 0420 10 0d d3 3f 6a 40 24 63 ab ae e2 b6 4e 27 f1 8b ...?j@$c....N'.. 0430 a2 2f 6f 52 4b 72 18 7e 90 4f 23 b0 ec e7 d1 43 ./oRKr.~.O#....C 0440 34 97 36 ee b9 c4 4d 40 26 90 e7 6a e8 70 cf 86 4.6...M@&..j.p.. 0450 a1 cf b2 45 a4 a9 79 6c 05 2d 96 ef a6 d6 2d bf ...E..yl.-....-. 0460 cd 5d df 06 fd 88 f7 84 70 81 ff 24 f6 f3 5d 92 .]......p..$..]. 0470 f5 26 08 2b c3 1d 85 3a ea ab 9b 64 4e 2f 7d fe .&.+...:...dN/}. 0480 b6 83 17 b5 f8 01 47 22 2b 16 4e 1c b6 d2 1f b8 ......G"+.N..... 0490 51 3e 23 a5 86 e6 37 33 bd 94 fe 2d 76 10 d3 c6 Q>#...73...-v... 04a0 74 44 0d bf 48 64 fb 74 ca c5 ce a4 a8 4d b9 c8 tD..Hd.t.....M.. 04b0 79 12 f9 f6 44 41 3b f6 df c1 31 d1 0c 5d 2d bc y...DA;...1..]-. 04c0 a2 68 de 55 69 4f 1c ac 32 b0 c1 ae 5f 2e 3e ca .h.UiO..2..._.>. 04d0 8b 52 e8 15 61 b1 27 fe 3d 1d 75 0f 8f 37 8b ff .R..a.'.=.u..7.. 04e0 43 3c 09 a3 30 c5 d8 7d 15 c8 fc 85 f5 4d 0b 62 C<..0..}.....M.b 04f0 ee 78 73 da 7f d1 d4 d2 e1 8e da 85 48 ce 28 07 .xs.........H.(. 0500 78 37 42 13 dd 79 e8 90 fa 19 ad 4d 0e c0 38 ff x7B..y.....M..8. 0510 6c d2 44 3d d1 e8 a2 07 9a cb 23 6c 8c 65 c6 f4 l.D=......#l.e.. 0520 72 a8 eb 60 58 39 cc 62 5a ca 06 08 0c 38 b4 c6 r..`X9.bZ....8.. 0530 3f 8d 7a 3d 23 5f 7f 99 25 e6 9f d6 74 b2 c4 80 ?.z=#_..%...t... 0540 c5 3c c2 02 60 3c 21 f6 .<..`