Frame 10564: 1406 bytes on wire (11248 bits), 1406 bytes captured (11248 bits) Encapsulation type: Ethernet (1) Arrival Time: Jul 22, 2017 02:50:47.193817000 UTC UTC Arrival Time: Jul 22, 2017 02:50:47.193817000 UTC Epoch Arrival Time: 1500691847.193817000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.003473000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 432.668468000 seconds] Frame Number: 10564 Frame Length: 1406 bytes (11248 bits) Capture Length: 1406 bytes (11248 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: ASUSTekCOMPU_0e:f3:3a (00:18:f3:0e:f3:3a) Destination: ASUSTekCOMPU_0e:f3:3a (00:18:f3:0e:f3:3a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 6] Internet Protocol Version 4, Src: 104.18.40.172, Dst: 172.16.45.98 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1392 Identification: 0x1d31 (7473) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 60 Protocol: TCP (6) Header Checksum: 0x4194 [validation disabled] [Header checksum status: Unverified] Source Address: 104.18.40.172 Destination Address: 172.16.45.98 [Source GeoIP: US, ASN 13335, CLOUDFLARENET] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP AS Number: 13335] [Source or Destination GeoIP AS Number: 13335] [Source GeoIP AS Organization: CLOUDFLARENET] [Source or Destination GeoIP AS Organization: CLOUDFLARENET] [Source GeoIP Latitude: 37.751] [Source or Destination GeoIP Latitude: 37.751] [Source GeoIP Longitude: -97.822] [Source or Destination GeoIP Longitude: -97.822] [Stream index: 30] Transmission Control Protocol, Src Port: 80, Dst Port: 49160, Seq: 1317114, Ack: 1980, Len: 1352 Source Port: 80 Destination Port: 49160 [Stream index: 59] [Stream Packet Number: 1500] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1352] Sequence Number: 1317114 (relative sequence number) Sequence Number (raw): 1131196093 [Next Sequence Number: 1318466 (relative sequence number)] Acknowledgment Number: 1980 (relative ack number) Acknowledgment number (raw): 2588762052 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 35 [Calculated window size: 35840] [Window size scaling factor: 1024] Checksum: 0xb37e [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 15.888694000 seconds] [Time since previous frame in this TCP stream: 0.003473000 seconds] [SEQ/ACK analysis] [iRTT: 0.065627000 seconds] [Bytes in flight: 1352] [Bytes sent since last PSH flag: 593528] TCP payload (1352 bytes) Hypertext Transfer Protocol File Data: 1352 bytes Data (1352 bytes) 0000 74 ae eb 00 6c a3 aa ef e3 96 76 b9 6a b8 f6 f7 t...l.....v.j... 0010 c6 46 9a 44 ee 96 d0 58 bd f8 db c8 8a 42 ec 69 .F.D...X.....B.i 0020 57 08 6a fb 50 94 c6 09 f9 a3 29 a2 b3 5f b9 49 W.j.P.....).._.I 0030 61 f0 82 9a 31 30 d3 d9 01 b1 37 40 70 df 89 2a a...10....7@p..* 0040 73 32 ba 4d ec 8f 51 6e 65 93 80 82 4a 0e 26 1e s2.M..Qne...J.&. 0050 58 18 96 e9 6d ee e8 b7 51 8c 09 28 2d f2 db d3 X...m...Q..(-... 0060 34 6d ce f9 7a 6c f4 0c 7f 9b 3c 9a 10 b8 34 cf 4m..zl....<...4. 0070 c5 dd f4 da b7 0c 3f 89 88 7a d1 88 90 7f 28 32 ......?..z....(2 0080 ff c8 49 8e 27 0b f4 4d 4f a9 62 f6 10 d3 2e c0 ..I.'..MO.b..... 0090 93 b1 18 a7 0e 1a 36 a1 3b 05 a6 00 2e 24 9e 94 ......6.;....$.. 00a0 6b 16 46 9b af 62 c2 9d 8a 47 cc cb 42 57 9e 07 k.F..b...G..BW.. 00b0 6a 29 22 34 ea fa 20 fd 32 42 af b8 f2 65 ac d9 j)"4.. .2B...e.. 00c0 7f fc cc 9b 69 45 81 9c 97 a7 1d 15 b9 2c d1 dc ....iE.......,.. 00d0 82 91 d2 b9 d5 b1 be a0 7b dd 0e 20 1a 18 ff aa ........{.. .... 00e0 92 f6 31 45 47 5f 84 46 0a 3c 05 55 a6 25 44 87 ..1EG_.F.<.U.%D. 00f0 35 c4 62 f6 f7 0a cc fe 6a 3f 06 de 70 ea 4b e0 5.b.....j?..p.K. 0100 8a 28 32 af 66 53 31 17 45 21 57 0f ab d4 31 62 .(2.fS1.E!W...1b 0110 cc 7f b9 01 77 09 9f 1a 27 2e 55 e5 26 d7 22 c8 ....w...'.U.&.". 0120 4f d6 11 7e 90 3b 2f 73 00 94 15 66 dc 6e 59 01 O..~.;/s...f.nY. 0130 2e bf bf 39 70 ab 66 57 55 28 d5 df 85 cb 8b 85 ...9p.fWU(...... 0140 16 d1 04 0a b0 70 9f 25 9b 0d 0c 72 93 fc 65 cb .....p.%...r..e. 0150 8e e5 80 d9 fc b7 ad 3e c2 e6 9c fe 86 66 c9 9d .......>.....f.. 0160 5f 43 66 20 18 0a 0d e0 e1 8a c3 69 cb 24 ca a6 _Cf .......i.$.. 0170 66 bb 3d 31 2e 6a 08 70 d0 55 14 64 91 c8 4e d9 f.=1.j.p.U.d..N. 0180 a1 fc 40 3d a9 b3 f3 21 ba 03 09 9c 66 db a5 e8 ..@=...!....f... 0190 4e 47 8b a0 54 46 57 cc b5 3b a1 60 cf 2d 23 eb NG..TFW..;.`.-#. 01a0 71 8a 59 e0 9f cd 68 12 b6 ea 59 c5 2c ad 0c a3 q.Y...h...Y.,... 01b0 fe ef 52 95 72 39 af a4 e5 57 a1 cb 55 75 93 4d ..R.r9...W..Uu.M 01c0 d8 35 41 7d aa a1 f6 50 01 eb 04 41 fd 81 54 ca .5A}...P...A..T. 01d0 bc ee 6c 39 8e b4 5c 26 07 32 90 e3 43 5b a1 3e ..l9..\&.2..C[.> 01e0 05 7c c7 d1 63 75 8b 23 8d f4 2a 7d 4c 7a 57 c8 .|..cu.#..*}LzW. 01f0 af 57 f7 e5 cf 65 9f d5 98 da 9f 54 99 10 89 87 .W...e.....T.... 0200 a3 fa 85 03 fd a6 47 b7 92 e6 14 7b 45 9e 98 8b ......G....{E... 0210 47 c4 d3 c2 bc b5 93 3e 4d bf 95 f8 24 87 1f b4 G......>M...$... 0220 d4 d7 fa cb d8 da 02 12 84 60 0d 9a e6 e5 c4 7c .........`.....| 0230 f9 0f cd b7 f4 e5 a1 80 9a 01 08 6b 70 eb e7 49 ...........kp..I 0240 14 63 27 18 a6 c2 cc 65 6c 01 ac b1 aa 0f 9e 5d .c'....el......] 0250 eb 93 c0 85 6e b3 98 99 02 40 3b 9d a3 34 1c 02 ....n....@;..4.. 0260 d7 4e 1b ce e1 67 67 4d 1e 2b 47 5e 60 db cf ce .N...ggM.+G^`... 0270 9c 06 1f 4b 3b 82 c1 85 70 de 7e 7c 16 64 07 2b ...K;...p.~|.d.+ 0280 54 48 93 50 37 da 5b 54 4d f0 85 dd b2 5f c6 92 TH.P7.[TM...._.. 0290 aa 6e ad 3c 82 90 68 6b 9b bf fe 46 be ae 29 17 .n.<..hk...F..). 02a0 fc 41 9b 78 4a 85 ac 44 c2 06 ed 59 3e 47 5c 98 .A.xJ..D...Y>G\. 02b0 40 f0 d8 04 2b 69 9a 8c ea e9 e0 b6 ff 52 5e 15 @...+i.......R^. 02c0 5c de a0 6c 32 5e d7 ac 99 be 1b 4b 0c 60 f7 26 \..l2^.....K.`.& 02d0 d9 82 95 a1 e7 ce a1 17 6f 3f 3a a1 bd 30 92 ce ........o?:..0.. 02e0 3d 71 2d d5 0b ef b7 67 26 e1 b3 73 aa ea 72 83 =q-....g&..s..r. 02f0 96 6b d3 ac 43 e8 b4 2b 06 9d 50 0b 19 8c 2b 7a .k..C..+..P...+z 0300 97 c1 78 27 77 ba f9 fa 3c e5 cb 3a 8a ab f9 bb ..x'w...<..:.... 0310 cc 75 96 30 35 db 30 03 3a 42 ff c1 fe 69 1e 1f .u.05.0.:B...i.. 0320 68 45 43 2f 75 7f ef da 26 17 2b d1 d2 72 5b 43 hEC/u...&.+..r[C 0330 d6 54 10 84 06 94 96 18 a1 5f 10 c8 23 d5 b0 0c .T......._..#... 0340 da 84 ac eb 8e 77 bf ea 74 d4 2e 27 9d 3a bf 2f .....w..t..'.:./ 0350 c1 ab eb 8d 22 b7 ce 5f 9e 91 9d a3 76 fc 31 fe ....".._....v.1. 0360 09 f1 e4 1b ff fc 69 87 c9 97 df 6a d7 c6 f9 b6 ......i....j.... 0370 a6 39 58 56 fd 56 e7 e3 6a a9 03 9c 95 be ff ab .9XV.V..j....... 0380 c1 31 98 a4 80 b0 14 c7 9d fa 6a 9a c7 9e 5d 2d .1........j...]- 0390 2f 46 c3 46 e5 fd 10 12 a1 ec 28 fa d5 e7 87 88 /F.F......(..... 03a0 23 06 1a 79 8d bd 65 79 6b 7f 4e 7c 63 a4 c8 d6 #..y..eyk.N|c... 03b0 86 f7 d7 3a 5b 7b 6f 7c f5 8d 95 05 6c 4d d3 14 ...:[{o|....lM.. 03c0 30 7c 96 4b e8 7e 56 b2 e2 40 26 87 d4 da eb e8 0|.K.~V..@&..... 03d0 f8 75 7e 54 a2 cf 0b 85 dd eb 5b 0d e9 f9 92 06 .u~T......[..... 03e0 76 51 fd 7d cb ca ce 3f 01 0e 31 65 55 53 0b ba vQ.}...?..1eUS.. 03f0 5b 41 4a e1 12 c4 e6 db 4f 44 b8 bf 83 a0 3d b3 [AJ.....OD....=. 0400 a1 0a 59 1e 73 46 53 78 25 76 6d ab 02 f6 1e d9 ..Y.sFSx%vm..... 0410 cd 3f 2e 85 c9 d1 a4 17 78 8a 47 ca 74 e9 01 eb .?......x.G.t... 0420 69 ad 79 39 dd 33 e6 13 1c 75 20 58 e3 82 45 72 i.y9.3...u X..Er 0430 78 7a e8 11 e1 18 b8 57 ff 26 6c b8 21 33 24 cc xz.....W.&l.!3$. 0440 6a 5d 3c b8 87 9a 40 78 28 e3 29 fc 25 f4 72 01 j]<...@x(.).%.r. 0450 6e bd 7a 1e 30 3d 7a f1 e9 be bf 4a 2d 96 8d 53 n.z.0=z....J-..S 0460 57 4e 4a 33 e2 84 3b 7c a0 32 f0 fa 92 fb 60 bd WNJ3..;|.2....`. 0470 13 99 f1 70 00 3c 31 0b 3a 02 7b 6d 27 5f 9a 4e ...p.<1.:.{m'_.N 0480 34 89 6a f8 6f d5 ac 21 b0 40 f1 cd 05 84 0d 61 4.j.o..!.@.....a 0490 4b 93 13 d2 12 57 5b 6d 47 be 83 05 17 dc 30 01 K....W[mG.....0. 04a0 0c 8c 2f e5 8b 56 67 2d 2f 12 9f a6 eb 27 40 1b ../..Vg-/....'@. 04b0 b0 d9 b4 9a 7b 3b 16 93 27 43 be 74 5e 67 a6 ee ....{;..'C.t^g.. 04c0 d8 be 0d f2 70 93 cc e4 52 88 92 6d cf 9e 4d 09 ....p...R..m..M. 04d0 7a 5b 6a e9 f4 61 37 72 9e 0d 75 0a ef 64 b2 e2 z[j..a7r..u..d.. 04e0 bd 66 25 d9 9c d8 3c c9 48 b8 09 21 ec d6 a5 9e .f%...<.H..!.... 04f0 b4 48 94 51 09 22 6f 68 90 4f 90 c8 d9 3f 37 17 .H.Q."oh.O...?7. 0500 38 9b 8b f4 74 08 46 f5 06 25 f9 7c d5 2e 65 7d 8...t.F..%.|..e} 0510 87 84 9b b6 8b 01 b6 03 cc 88 1c cc d6 b6 91 3d ...............= 0520 92 b5 2d 8d e4 3a 7e 8a 87 3d c7 20 66 2d 0b 92 ..-..:~..=. f-.. 0530 99 d2 cd 3a 47 9d 6a 38 b2 60 2a e8 1c 31 3d 04 ...:G.j8.`*..1=. 0540 ae 7a c6 ee a7 25 66 13 .z...%f. Data […]: 74aeeb006ca3aaefe39676b96ab8f6f7c6469a44ee96d058bdf8dbc88a42ec6957086afb5094c609f9a329a2b35fb94961f0829a3130d3d901b1374070df892a7332ba4dec8f516e659380824a0e261e581896e96deee8b7518c09282df2dbd3346dcef97a6cf40c7f9b3c9a10b834cfc5d [Length: 1352]