Frame 10993: 1406 bytes on wire (11248 bits), 1406 bytes captured (11248 bits) Encapsulation type: Ethernet (1) Arrival Time: Jul 22, 2017 02:50:50.627043000 UTC UTC Arrival Time: Jul 22, 2017 02:50:50.627043000 UTC Epoch Arrival Time: 1500691850.627043000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000109000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 436.101694000 seconds] Frame Number: 10993 Frame Length: 1406 bytes (11248 bits) Capture Length: 1406 bytes (11248 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) Destination: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 3] Internet Protocol Version 4, Src: 204.79.197.200, Dst: 172.16.45.52 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1392 Identification: 0x482c (18476) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 120 Protocol: TCP (6) Header Checksum: 0xd964 [validation disabled] [Header checksum status: Unverified] Source Address: 204.79.197.200 Destination Address: 172.16.45.52 [Source GeoIP: US, ASN 8068, MICROSOFT-CORP-MSN-AS-BLOCK] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP AS Number: 8068] [Source or Destination GeoIP AS Number: 8068] [Source GeoIP AS Organization: MICROSOFT-CORP-MSN-AS-BLOCK] [Source or Destination GeoIP AS Organization: MICROSOFT-CORP-MSN-AS-BLOCK] [Source GeoIP Latitude: 37.751] [Source or Destination GeoIP Latitude: 37.751] [Source GeoIP Longitude: -97.822] [Source or Destination GeoIP Longitude: -97.822] [Stream index: 31] Transmission Control Protocol, Src Port: 80, Dst Port: 49161, Seq: 248485, Ack: 17104, Len: 1352 Source Port: 80 Destination Port: 49161 [Stream index: 44] [Stream Packet Number: 402] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1352] Sequence Number: 248485 (relative sequence number) Sequence Number (raw): 1951754254 [Next Sequence Number: 249837 (relative sequence number)] Acknowledgment Number: 17104 (relative ack number) Acknowledgment number (raw): 2852818750 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 1024 [Calculated window size: 262144] [Window size scaling factor: 256] Checksum: 0x02ce [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 44.660599000 seconds] [Time since previous frame in this TCP stream: 0.000109000 seconds] [SEQ/ACK analysis] [iRTT: 0.065752000 seconds] [Bytes in flight: 5408] [Bytes sent since last PSH flag: 5408] TCP payload (1352 bytes) Hypertext Transfer Protocol File Data: 1352 bytes Data (1352 bytes) 0000 67 bb 9a 85 fe d6 c2 f7 30 c5 af 49 9d 57 b8 29 g.......0..I.W.) 0010 63 97 b5 02 ec 17 79 2a bc f6 f2 db b1 22 82 9c c.....y*.....".. 0020 a9 4a cb 14 1a 18 64 f8 c1 67 60 62 93 02 ad 94 .J....d..g`b.... 0030 12 bf 33 43 46 26 6d fb a3 4a d7 9b 3f 0e f8 a7 ..3CF&m..J..?... 0040 93 2c b7 e5 2b 30 5b b7 29 a3 98 78 03 31 0a 80 .,..+0[.)..x.1.. 0050 7a 9d 3c fb 69 1e ac ca ca 17 c7 46 07 b3 0f 39 z.<.i......F...9 0060 41 31 90 44 85 ca c3 bc 9c 6c 37 ea 53 5a 87 b2 A1.D.....l7.SZ.. 0070 50 e8 3d 67 89 46 60 54 2f d9 1f 8d 69 fc 2f 0e P.=g.F`T/...i./. 0080 fc 62 ee 9f 11 de 19 7b e2 1e 79 43 a2 b3 89 68 .b.....{..yC...h 0090 5a 2f b9 01 0e 9b f0 4e 3e cc 64 35 67 5b 51 fe Z/.....N>.d5g[Q. 00a0 f2 9e e3 2f 10 58 6c 1d 4e 99 15 84 ae 4a 45 1f .../.Xl.N....JE. 00b0 cf 55 b5 41 19 47 2e c0 c8 fa 29 5d f0 5c 68 85 .U.A.G....)].\h. 00c0 18 9a 49 31 75 eb 32 5b b4 26 20 d7 ca 5c d4 55 ..I1u.2[.& ..\.U 00d0 ec 06 73 bf 2d 5b 2b 15 19 94 2a c5 49 b0 6f 19 ..s.-[+...*.I.o. 00e0 c7 61 e7 aa 73 cd 2c e3 20 cf 14 d2 48 b9 6e 1a .a..s.,. ...H.n. 00f0 68 6d 11 d4 01 ad 36 45 99 39 b1 b2 eb aa 28 90 hm....6E.9....(. 0100 2c 44 0a 50 35 4a 67 aa b2 7a bd b0 c9 44 34 de ,D.P5Jg..z...D4. 0110 4c 50 93 90 29 42 29 43 34 c4 49 aa 31 9b b2 2a LP..)B)C4.I.1..* 0120 3b 9a 67 e3 0d 57 11 4e 57 71 1d bc ce b2 30 a4 ;.g..W.NWq....0. 0130 7a b8 21 8f b7 32 22 20 36 08 ca 01 5f 70 ba a8 z.!..2" 6..._p.. 0140 cc 02 82 59 c4 79 90 87 3a 89 c8 49 49 3e 8f 07 ...Y.y..:..II>.. 0150 ec fc 34 98 77 ab 37 58 b8 dc 53 0f 38 7d dc d9 ..4.w.7X..S.8}.. 0160 e3 31 06 f6 da 45 83 aa d4 a3 20 73 d6 ec 46 a5 .1...E.... s..F. 0170 c8 92 84 05 d6 08 71 29 90 7e 4c 9d e4 d9 c2 83 ......q).~L..... 0180 3c 85 c3 43 6f 1e a8 a7 f0 01 b2 8a 73 48 09 a0 <..Co.......sH.. 0190 3a 0d b2 7c e5 8d cc e2 d2 c7 ba 2e d8 13 21 01 :..|..........!. 01a0 9f da 32 53 db e9 80 49 12 0d 00 01 cf 28 d8 9b ..2S...I.....(.. 01b0 17 29 8f ce 85 b8 4a 40 4e 34 87 52 cc a1 45 f4 .)....J@N4.R..E. 01c0 e5 50 01 7e a9 33 e6 a0 41 59 38 33 d7 61 70 29 .P.~.3..AY83.ap) 01d0 01 17 49 fd f4 65 da 70 95 e4 85 87 1b c4 60 08 ..I..e.p......`. 01e0 e8 16 f7 a8 06 d5 c0 cc 3b e7 e9 a6 22 6c f0 d2 ........;..."l.. 01f0 07 3c 6f 65 a6 2f 21 bd 33 cf bf d3 75 bb 45 9a ........i...C.Z' 02c0 ac 24 62 99 2e bc 64 65 ba 3e 4f 29 a1 00 6b 60 .$b...de.>O)..k` 02d0 bc e8 ed 70 e8 78 49 13 ee ac 98 9f 74 f2 3f b2 ...p.xI.....t.?. 02e0 ed aa f0 0b 41 a1 0b 6d 81 8a ed 3a 81 dc 81 84 ....A..m...:.... 02f0 4f 4a 5b 03 bd ba f1 10 ae a4 64 d0 b5 cf 35 54 OJ[.......d...5T 0300 55 34 cb a4 fb f6 8b 36 a5 fd b7 4d 9a 46 2c 37 U4.....6...M.F,7 0310 49 85 00 19 49 7d f8 24 1b d8 7b 60 ae cc 14 1e I...I}.$..{`.... 0320 27 4f db 3c 93 c6 e2 4f bb a7 19 9e 26 ac 51 ea 'O.<...O....&.Q. 0330 92 3d e6 ee a6 3d 7b 76 24 99 93 e9 39 5d 19 a7 .=...={v$...9].. 0340 8b a0 cc 95 32 04 c1 cc f8 9b f5 61 f7 41 e1 08 ....2......a.A.. 0350 3a 0c 90 c7 99 37 fd 5b 6b fb 47 12 78 a3 5c 52 :....7.[k.G.x.\R 0360 52 ff fc 2c 18 45 ce 55 fc 2c 66 f6 bc e3 6a 1e R..,.E.U.,f...j. 0370 77 49 55 71 15 3f 1e bb 36 a1 b5 87 ba 14 db d0 wIUq.?..6....... 0380 d1 85 99 13 b6 a5 59 6c 18 08 4d d6 77 a8 e9 0b ......Yl..M.w... 0390 86 34 5f 60 01 c0 6a de fa db 0a 8b a3 da ff 85 .4_`..j......... 03a0 6a 29 3e 2c f0 ca ff 0c e8 d3 69 bf 69 c3 4d 2b j)>,......i.i.M+ 03b0 6f 67 cd 0d f2 ee d0 88 ef e9 5e 28 c3 b9 0f a8 og........^(.... 03c0 ec 3d 0d d9 63 c6 3e c0 f8 16 a9 71 03 50 93 5b .=..c.>....q.P.[ 03d0 da 80 a1 3a 08 81 ee c7 89 e6 f5 40 a0 04 2c ac ...:.......@..,. 03e0 f7 d0 3e ac 7f 2f f1 6f b4 e6 d2 69 2e fa a9 bb ..>../.o...i.... 03f0 8f be a3 b5 e8 c4 02 11 97 a7 e0 b5 8f 1d 8a ea ................ 0400 c0 b1 2a f4 0c c7 0c 1d 71 d4 03 34 76 ae 2d 59 ..*.....q..4v.-Y 0410 bb 5a 69 a4 fd e2 41 c1 65 a4 7b 43 a7 9e b9 0a .Zi...A.e.{C.... 0420 92 78 68 bb a5 7c 68 97 04 af ba 45 cc 5d 09 88 .xh..|h....E.].. 0430 d1 b1 04 e6 b1 42 c8 2a a9 05 00 f2 07 eb 94 36 .....B.*.......6 0440 37 0d b3 ac ab 4b c1 20 1d 41 45 dc 6e 84 61 34 7....K. .AE.n.a4 0450 99 aa cb c2 99 f5 b1 c4 6c e7 bc ae 37 0d dd 01 ........l...7... 0460 74 17 e8 f3 37 63 b7 8e 3f 25 93 9a 38 b8 15 e0 t...7c..?%..8... 0470 2d d0 45 84 a4 db 88 1d 91 61 05 3c a0 dd e0 89 -.E......a.<.... 0480 60 83 83 2d 26 41 39 82 9c 32 73 72 8f 8d 0c 6f `..-&A9..2sr...o 0490 14 b2 98 0c e9 86 39 ad 7b 7b 63 c3 fd e9 5a f4 ......9.{{c...Z. 04a0 2b e3 89 f4 4d cd ec 1a 5b be 36 ba cc 63 90 06 +...M...[.6..c.. 04b0 25 c3 33 c7 70 4f 6f 62 3a c1 e2 c7 18 fe 49 d0 %.3.pOob:.....I. 04c0 68 49 b0 d0 31 69 6d 26 35 f1 3a 79 1b fe 37 a1 hI..1im&5.:y..7. 04d0 d6 72 d6 64 dc 83 e0 1e 72 25 dd 4d c6 3d 04 ad .r.d....r%.M.=.. 04e0 50 17 cb 41 5c 23 d5 ee a0 8f 81 bd 10 de b7 0a P..A\#.......... 04f0 f1 3e 38 09 7d 23 0d 5c a4 f1 39 28 ed 45 61 31 .>8.}#.\..9(.Ea1 0500 91 18 22 2e b0 24 67 79 cc 0b f2 c4 c0 0a 16 0b .."..$gy........ 0510 ba d4 dd 85 0c 0c 33 da 63 83 24 4b 6d 8c 89 c0 ......3.c.$Km... 0520 3f e7 d8 a4 e9 a0 f9 16 bf 15 05 be 03 62 7b 6a ?............b{j 0530 cb b4 40 26 f4 05 94 bc bf e3 20 48 aa 82 de 01 ..@&...... H.... 0540 04 f8 a7 b2 5e 53 db ab ....^S.. Data […]: 67bb9a85fed6c2f730c5af499d57b8296397b502ec17792abcf6f2dbb122829ca94acb141a1864f8c16760629302ad9412bf334346266dfba34ad79b3f0ef8a7932cb7e52b305bb729a3987803310a807a9d3cfb691eaccaca17c74607b30f394131904485cac3bc9c6c37ea535a87b250e [Length: 1352]