Frame 10433: 1406 bytes on wire (11248 bits), 1406 bytes captured (11248 bits) Encapsulation type: Ethernet (1) Arrival Time: Jul 22, 2017 02:50:47.006445000 UTC UTC Arrival Time: Jul 22, 2017 02:50:47.006445000 UTC Epoch Arrival Time: 1500691847.006445000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000170000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 432.481096000 seconds] Frame Number: 10433 Frame Length: 1406 bytes (11248 bits) Capture Length: 1406 bytes (11248 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: ASUSTekCOMPU_0e:f3:3a (00:18:f3:0e:f3:3a) Destination: ASUSTekCOMPU_0e:f3:3a (00:18:f3:0e:f3:3a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 6] Internet Protocol Version 4, Src: 104.18.40.172, Dst: 172.16.45.98 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1392 Identification: 0x1cda (7386) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 60 Protocol: TCP (6) Header Checksum: 0x41eb [validation disabled] [Header checksum status: Unverified] Source Address: 104.18.40.172 Destination Address: 172.16.45.98 [Source GeoIP: US, ASN 13335, CLOUDFLARENET] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP AS Number: 13335] [Source or Destination GeoIP AS Number: 13335] [Source GeoIP AS Organization: CLOUDFLARENET] [Source or Destination GeoIP AS Organization: CLOUDFLARENET] [Source GeoIP Latitude: 37.751] [Source or Destination GeoIP Latitude: 37.751] [Source GeoIP Longitude: -97.822] [Source or Destination GeoIP Longitude: -97.822] [Stream index: 30] Transmission Control Protocol, Src Port: 80, Dst Port: 49160, Seq: 1199490, Ack: 1980, Len: 1352 Source Port: 80 Destination Port: 49160 [Stream index: 59] [Stream Packet Number: 1369] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1352] Sequence Number: 1199490 (relative sequence number) Sequence Number (raw): 1131078469 [Next Sequence Number: 1200842 (relative sequence number)] Acknowledgment Number: 1980 (relative ack number) Acknowledgment number (raw): 2588762052 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 35 [Calculated window size: 35840] [Window size scaling factor: 1024] Checksum: 0xb744 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 15.701322000 seconds] [Time since previous frame in this TCP stream: 0.000170000 seconds] [SEQ/ACK analysis] [iRTT: 0.065627000 seconds] [Bytes in flight: 2704] [Bytes sent since last PSH flag: 475904] TCP payload (1352 bytes) Hypertext Transfer Protocol File Data: 1352 bytes Data (1352 bytes) 0000 77 cc c4 a9 e5 58 34 46 41 f7 da 3f a2 33 dc 4f w....X4FA..?.3.O 0010 64 46 ef 88 c1 74 45 1b ab e5 ae d6 ae 1a bf 04 dF...tE......... 0020 16 36 18 ff c0 1b 49 67 7f aa a2 34 6f 2c 6d 51 .6....Ig...4o,mQ 0030 35 22 57 52 e2 69 65 98 ec 40 09 21 67 d3 6c d9 5"WR.ie..@.!g.l. 0040 b4 27 16 17 ce 20 f1 4d 23 ec 37 b7 70 d5 83 b7 .'... .M#.7.p... 0050 4a 65 c8 84 88 bc eb b0 de 95 d3 98 5e 77 3e ab Je..........^w>. 0060 38 85 8a 82 01 c6 d5 e2 11 2a 04 6b b9 84 e9 56 8........*.k...V 0070 3e ea b8 b0 e9 66 3d d1 a8 5b a5 67 4b a7 f1 b5 >....f=..[.gK... 0080 2d 7d fb 16 99 32 1d 05 51 47 cc 91 8c 89 9f 90 -}...2..QG...... 0090 26 ba 40 44 b9 d3 07 8a 0a e1 c5 3a 72 1c 0d 4d &.@D.......:r..M 00a0 23 d9 2a 7a 51 df 86 62 ea ed 87 b4 20 01 9c db #.*zQ..b.... ... 00b0 94 72 9c 8b 4a ee c4 77 1c 82 cf 35 f7 d9 fe 33 .r..J..w...5...3 00c0 d6 25 87 1c 55 d3 a8 46 b9 32 59 fa 96 31 79 cd .%..U..F.2Y..1y. 00d0 d3 13 18 55 16 28 2b 98 57 c4 4e 6f 7d 4c 62 8e ...U.(+.W.No}Lb. 00e0 ca 80 a9 a6 85 c2 0a a2 7f 98 e2 04 e1 ad 36 60 ..............6` 00f0 e2 87 e8 cd a5 8d 2b 26 7f a0 75 49 10 23 51 0d ......+&..uI.#Q. 0100 1a 95 dd d9 2c 9a 88 ad 33 ab 0a 10 63 10 db 5f ....,...3...c.._ 0110 5c bc 89 00 a5 d6 c4 2d 47 b5 db 65 4f c0 88 8e \......-G..eO... 0120 97 80 ce 3a 31 a0 f6 ca 98 e4 61 a6 8b d6 41 c8 ...:1.....a...A. 0130 ae 4d 36 50 d8 ca 98 9e a5 e0 41 b9 39 3e 5d 90 .M6P......A.9>]. 0140 9b f4 35 4e cd 36 59 97 4a 7d c8 87 b6 93 87 2c ..5N.6Y.J}....., 0150 bd 2e ed ba 0b b1 67 4f 44 64 35 dd 32 b2 be 53 ......gODd5.2..S 0160 53 4f a5 00 fc 32 b5 51 bd a4 12 03 04 d9 6b ae SO...2.Q......k. 0170 62 52 e7 53 3a 5d 45 0b 59 1d 10 b4 c0 19 81 54 bR.S:]E.Y......T 0180 c3 c3 a5 07 12 5e 82 c5 45 7d 9d 2a 22 b3 0d 28 .....^..E}.*"..( 0190 21 2a 8d cc 87 b7 73 78 7e 78 cf ff e3 d0 ee cf !*....sx~x...... 01a0 fa 27 a6 c9 ae c4 5b db 7a d0 59 a4 5e 92 9c 9d .'....[.z.Y.^... 01b0 c7 2c 46 cb 6d 74 86 c9 47 db fb 0f 3a cd 2d a8 .,F.mt..G...:.-. 01c0 9a 41 da b6 82 34 63 42 db 65 4b 70 2a 75 7d ec .A...4cB.eKp*u}. 01d0 39 e0 0c 57 e1 d9 b9 f4 f1 1c 7d 56 c7 da f1 13 9..W......}V.... 01e0 e2 70 d4 fc c4 90 ab c4 ad 62 53 59 2a 24 98 69 .p.......bSY*$.i 01f0 ab 6b ae ed 32 63 de df 1c d2 6a 46 7e ac e5 08 .k..2c....jF~... 0200 f0 6c bd 56 26 14 d0 f4 e1 41 f7 6d db 0c 6f 8e .l.V&....A.m..o. 0210 d4 31 3e 63 43 df 9b 2d fc 6c 6f a6 58 b6 54 93 .1>cC..-.lo.X.T. 0220 0d 83 5b d2 ec af 9f 7f 26 6e 23 31 b2 92 e7 5b ..[.....&n#1...[ 0230 ca 98 61 2b 4e 83 46 e6 53 74 d2 63 d2 89 64 f8 ..a+N.F.St.c..d. 0240 b9 dd 45 8e aa de 42 5d e2 45 b2 f0 43 58 d9 40 ..E...B].E..CX.@ 0250 cb 83 7f 2e 9f dc be c2 9b 50 78 b8 44 af 68 2d .........Px.D.h- 0260 03 4f ec 9c 0e 0a 45 7b 3c bd 81 b0 44 00 71 c2 .O....E{<...D.q. 0270 e8 bd 31 fc 5d 9a 35 cd 77 3e 2d 76 09 77 c8 77 ..1.].5.w>-v.w.w 0280 12 1d 74 e6 0a db ab 64 1c d9 c5 6c c8 94 c8 ac ..t....d...l.... 0290 51 88 e6 d4 9a 39 0f 67 b9 c8 9b 7a f4 c9 b0 de Q....9.g...z.... 02a0 ec 42 f6 1e c4 67 9a 95 f8 0d c3 12 4c d1 7d e4 .B...g......L.}. 02b0 70 0b 4d 16 e3 15 b1 4a b9 4a 83 b3 3a aa 9d a1 p.M....J.J..:... 02c0 94 ef ff 89 1d f8 6d 87 98 72 c7 1e b1 c2 7c 60 ......m..r....|` 02d0 10 9d 67 13 dc 22 26 b6 5d 67 ad 9a 68 37 cd 13 ..g.."&.]g..h7.. 02e0 43 d5 4e ae 33 5e 72 23 62 cd f6 5a 53 54 ea 51 C.N.3^r#b..ZST.Q 02f0 c3 f3 a8 e3 18 a4 9d be 4a 67 a5 38 48 7e b6 8e ........Jg.8H~.. 0300 f2 a2 1d 83 ce 47 96 fa bb 47 03 22 d8 9d c2 70 .....G...G."...p 0310 ea 95 d7 f6 d7 1a e0 b2 bb 1f 74 93 c5 12 5b 34 ..........t...[4 0320 f0 f5 c3 82 7e 96 1d b1 55 99 61 8e 54 5e 61 7d ....~...U.a.T^a} 0330 75 13 84 ac db 9f d7 bf 22 01 ec 67 5b 5f 5a f7 u......."..g[_Z. 0340 5d d3 ce 12 75 74 af 0b 02 77 c5 54 75 da ec 3a ]...ut...w.Tu..: 0350 fe b4 97 f3 1c b2 bf 52 b6 d2 56 f4 aa 4e c4 76 .......R..V..N.v 0360 51 30 00 ca 8f eb f0 b2 fb 36 c7 3e 4e 78 af 47 Q0.......6.>Nx.G 0370 4f 24 3d 75 7d d6 af 54 a0 34 cc 08 40 1b 91 cf O$=u}..T.4..@... 0380 4e 93 b7 59 c0 4a a8 da d0 7b a4 b3 34 85 8f 9a N..Y.J...{..4... 0390 dd 23 6d a2 49 15 69 1d 2c 1f d8 5f b4 e1 b4 56 .#m.I.i.,.._...V 03a0 53 b3 12 61 9c f7 12 c2 27 1d 9a 87 ad 38 2a 9e S..a....'....8*. 03b0 b0 20 3b 8a 9e b2 fa 9d 96 1e 30 ea 08 6c f0 1b . ;.......0..l.. 03c0 85 a5 44 6e f3 19 ae c7 40 be e4 30 44 5b 1b ca ..Dn....@..0D[.. 03d0 a6 07 02 27 f7 19 bb 1f a9 7f 2d fe b9 76 e2 5e ...'......-..v.^ 03e0 50 ab 4b 6a 7c 2d 35 6d 7f 1c ab fa a4 e3 22 fa P.Kj|-5m......". 03f0 da bc 65 d7 71 33 3a 6c 26 4d a6 dc 28 b5 6e d3 ..e.q3:l&M..(.n. 0400 d2 82 0d 57 23 82 46 02 83 64 7a 80 40 10 5c 3b ...W#.F..dz.@.\; 0410 1c 2b a5 bf af 88 97 a7 5b b3 bc 40 1a eb 4a 9f .+......[..@..J. 0420 86 0e b6 84 31 b5 97 9d b3 7c 78 27 5f 3a 53 0c ....1....|x'_:S. 0430 c4 4a 77 fa 87 01 03 a3 71 60 44 41 9d 78 2b 00 .Jw.....q`DA.x+. 0440 3a 5f 44 fc 75 47 26 02 00 41 f5 5b 5a 10 17 a2 :_D.uG&..A.[Z... 0450 ad b4 4e a9 e3 7f 17 f7 e0 2d 4f 64 a2 f6 76 af ..N......-Od..v. 0460 2b 0d de 93 cd 98 16 b1 d1 d2 4d 5b 96 bf 65 b1 +.........M[..e. 0470 56 78 01 85 b3 a9 64 d4 eb d2 d1 ad 7f 9e 6f 0a Vx....d.......o. 0480 e1 eb 02 4e 88 c1 78 80 ef 11 de 0b 69 04 2c ed ...N..x.....i.,. 0490 05 b3 0d 44 71 a9 9c fb 28 6a b8 e0 6f fd 97 9a ...Dq...(j..o... 04a0 39 0d 14 95 de 84 17 98 6a 46 d7 2f f8 68 d8 c2 9.......jF./.h.. 04b0 04 ce a4 af f5 bf df 2f 38 aa a5 7c 1e 16 0b 93 ......./8..|.... 04c0 08 7a 7d 51 53 1f 2c 06 fe e5 00 86 69 43 83 11 .z}QS.,.....iC.. 04d0 d0 30 70 c6 97 a5 a4 88 00 5c 8e 39 99 82 61 72 .0p......\.9..ar 04e0 7a a2 6a e2 64 4f 14 e3 51 12 96 83 a5 d7 f2 b2 z.j.dO..Q....... 04f0 3e 66 22 b4 2e 27 53 e6 8e 85 ce 76 83 45 9b d1 >f"..'S....v.E.. 0500 85 ed 80 ed 3e ca 52 9b 14 b3 64 28 6f 78 1a 12 ....>.R...d(ox.. 0510 00 32 06 55 b6 54 60 c9 91 04 b8 77 e7 db 8b cf .2.U.T`....w.... 0520 6d de 30 bf 44 ad 6b 55 76 47 22 ec 9a 93 87 a6 m.0.D.kUvG"..... 0530 0b 2d 23 fe ae 8a e4 d4 46 40 f8 d8 e0 6b dc 44 .-#.....F@...k.D 0540 b9 00 75 f2 c0 1d c5 9c ..u..... Data […]: 77ccc4a9e558344641f7da3fa233dc4f6446ef88c174451babe5aed6ae1abf04163618ffc01b49677faaa2346f2c6d5135225752e2696598ec40092167d36cd9b4271617ce20f14d23ec37b770d583b74a65c88488bcebb0de95d3985e773eab38858a8201c6d5e2112a046bb984e9563ee [Length: 1352]