Frame 11056: 1406 bytes on wire (11248 bits), 1406 bytes captured (11248 bits) Encapsulation type: Ethernet (1) Arrival Time: Jul 22, 2017 02:50:52.172956000 UTC UTC Arrival Time: Jul 22, 2017 02:50:52.172956000 UTC Epoch Arrival Time: 1500691852.172956000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.125451000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 437.647607000 seconds] Frame Number: 11056 Frame Length: 1406 bytes (11248 bits) Capture Length: 1406 bytes (11248 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) Destination: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 3] Internet Protocol Version 4, Src: 204.79.197.200, Dst: 172.16.45.52 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1392 Identification: 0x7c1f (31775) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 122 Protocol: TCP (6) Header Checksum: 0xa371 [validation disabled] [Header checksum status: Unverified] Source Address: 204.79.197.200 Destination Address: 172.16.45.52 [Source GeoIP: US, ASN 8068, MICROSOFT-CORP-MSN-AS-BLOCK] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP AS Number: 8068] [Source or Destination GeoIP AS Number: 8068] [Source GeoIP AS Organization: MICROSOFT-CORP-MSN-AS-BLOCK] [Source or Destination GeoIP AS Organization: MICROSOFT-CORP-MSN-AS-BLOCK] [Source GeoIP Latitude: 37.751] [Source or Destination GeoIP Latitude: 37.751] [Source GeoIP Longitude: -97.822] [Source or Destination GeoIP Longitude: -97.822] [Stream index: 31] Transmission Control Protocol, Src Port: 80, Dst Port: 49158, Seq: 186400, Ack: 13786, Len: 1352 Source Port: 80 Destination Port: 49158 [Stream index: 41] [Stream Packet Number: 300] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1352] Sequence Number: 186400 (relative sequence number) Sequence Number (raw): 3262280416 [Next Sequence Number: 187752 (relative sequence number)] Acknowledgment Number: 13786 (relative ack number) Acknowledgment number (raw): 433226083 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 1021 [Calculated window size: 261376] [Window size scaling factor: 256] Checksum: 0x3295 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 46.956942000 seconds] [Time since previous frame in this TCP stream: 0.237994000 seconds] [SEQ/ACK analysis] [iRTT: 0.065264000 seconds] [Bytes in flight: 1352] [Bytes sent since last PSH flag: 1352] TCP payload (1352 bytes) Hypertext Transfer Protocol File Data: 1352 bytes Data (1352 bytes) 0000 63 35 31 0d 0a 30 77 ed cd 6d e3 46 fc ab a0 ca c51..0w..m.F.... 0010 5c 1a 9f f5 e0 43 4f ab 51 47 76 ec 24 75 72 f5 \....CO.QGv.$ur. 0020 9c 7d 97 f6 fa 87 86 a2 28 8b b1 f8 38 91 b2 cf .}......(...8... 0030 91 3d d3 4f d3 0f d6 4f 52 ec 02 20 01 10 f4 23 .=.O...OR.. ...# 0040 bd 74 3a 99 c8 12 08 2e 5e bb 8b 05 b0 d8 df 33 .t:.....^......3 0050 69 1d 3e 4c 0b 26 5f 99 94 9f 65 8d 49 7b 99 6f i.>L.&_...e.I{.o 0060 de 35 f1 73 81 7f de 4c 3c fe 17 62 2a df ac e8 .5.s...L<..b*... 0070 da a5 45 75 98 0f a1 f4 c1 4d 42 09 d5 ac 04 be ..Eu.....MB..... 0080 d6 80 3c 30 fc 36 10 da 49 08 1e 0e 06 f9 d7 63 ..<0.6..I......c 0090 3a 97 c1 6f 6d 16 89 dd 8b bc 2f 49 7c 58 04 1a :..om...../I|X.. 00a0 56 21 62 1c f8 47 fe 10 46 e0 98 e5 c5 f9 7d b5 V!b..G..F.....}. 00b0 de 6a 24 7f 48 3f 27 a2 32 15 44 15 e6 c6 64 88 .j$.H?'.2.D...d. 00c0 dd 8f e0 54 45 dc 7e 81 f4 64 59 df 15 10 00 18 ...TE.~..dY..... 00d0 76 59 40 60 b0 8c 2e 27 79 48 00 a1 60 b1 98 5f vY@`...'yH..`.._ 00e0 09 34 45 86 57 03 9f 03 25 4f 9e fa 97 4d e5 e7 .4E.W...%O...M.. 00f0 7c bd 53 20 6d ec 2e 7f 41 19 aa b2 84 e6 23 c4 |.S m...A.....#. 0100 8c e1 b7 bf 57 53 c7 5f 12 88 dd 7f 2f 0e 2f 88 ....WS._...././. 0110 87 45 e9 b1 b3 a5 7e 1f 97 28 91 a2 73 30 98 b7 .E....~..(..s0.. 0120 12 59 7f c8 a2 29 cb 24 f1 38 05 f6 f3 00 ed fa .Y...).$.8...... 0130 31 8c 8a 12 7a 40 a0 b6 f6 e0 9f 8a 47 20 07 a2 1...z@......G .. 0140 16 1d 77 0f d8 26 f3 d9 62 93 a4 b0 a7 43 a4 52 ..w..&..b....C.R 0150 9b f5 15 32 00 3d 57 f8 ad a6 6c cc c6 83 4f a7 ...2.=W...l...O. 0160 93 36 e8 ed d9 22 d7 70 8d 69 51 d7 70 ba 3b 61 .6...".p.iQ.p.;a 0170 48 81 71 9c 40 79 1b 3a 31 99 c1 0f a5 0c 26 40 H.q.@y.:1.....&@ 0180 47 0e c1 c3 e1 26 5f 44 59 0c b3 00 ce 73 e8 89 G....&_DY....s.. 0190 b4 cf 8f 78 c0 3d d8 50 40 e4 2f da a9 57 c1 ee ...x.=.P@./..W.. 01a0 43 16 86 67 80 c4 67 c8 d0 e7 cf 65 5c 4b 03 52 C..g..g....e\K.R 01b0 5f 49 03 ab 0e 58 29 70 0c 54 53 0f c8 b7 ab a2 _I...X)p.TS..... 01c0 4c 54 d1 16 19 b2 66 16 ad eb 70 94 44 d5 04 ea LT....f...p.D... 01d0 a3 0e a6 50 2d df 08 d3 d9 34 24 d3 ef f1 ca a5 ...P-....4$..... 01e0 c3 b7 72 4b b8 82 a7 e2 14 44 79 16 04 80 2a 58 ..rK.....Dy...*X 01f0 c0 ab 32 d8 94 16 84 67 d7 34 16 1c da 15 c0 e0 ..2....g.4...... 0200 ac 3d 45 c1 46 34 4f a5 5a 25 42 ef 58 8e e9 2f .=E.F4O.Z%B.X../ 0210 80 18 64 01 15 69 6a f9 20 3b b4 54 26 0d 52 d9 ..d..ij. ;.T&.R. 0220 13 ef 01 c8 07 c6 f2 ec 44 71 27 e3 e2 ca 0f 48 ........Dq'....H 0230 3b dd ce eb 31 01 34 f0 99 88 4e 10 eb 60 2c 81 ;...1.4...N..`,. 0240 ec 69 c4 14 ac 54 33 49 98 7e 4a e4 a3 9a 12 b4 .i...T3I.~J..... 0250 5e 2b 94 88 b1 ea fb 5a b1 65 09 94 ae ff 6a 68 ^+.....Z.e....jh 0260 7d b7 a7 a0 ea 74 b5 6a b7 81 09 70 52 dd 49 78 }....t.j...pR.Ix 0270 58 94 b5 a9 8d 4b f9 c5 21 6d fa e9 1a f0 86 54 X....K..!m.....T 0280 4e 6e e1 c8 d3 77 68 6f 23 10 11 82 73 89 89 74 Nn...who#...s..t 0290 24 a1 18 23 72 40 09 7f 02 f8 a1 0c 8f 1c 5e 96 $..#r@........^. 02a0 f0 36 35 51 e9 09 fa 00 0e 8a 67 5f 3b 23 ae f9 .65Q......g_;#.. 02b0 b8 02 26 2e 83 61 a8 14 da 51 90 7b 6d dc b9 9a ..&..a...Q.{m... 02c0 d4 c9 2f bc 40 7c 6a 79 e8 ca 93 3e a0 9d 83 2d ../.@|jy...>...- 02d0 d6 6c 08 f6 2c e3 0f 8b a9 ba 2b ca a7 0f f2 6b .l..,.....+....k 02e0 47 c0 3b 59 b2 f1 50 3e 06 a8 ea 4a 06 d1 96 41 G.;Y..P>...J...A 02f0 09 c4 80 9d ab be 68 c4 42 44 5c 04 03 62 a1 a5 ......h.BD\..b.. 0300 bc 4b 3f 67 20 54 d0 43 3f 42 51 3b d5 a0 d0 72 .K?g T.C?BQ;...r 0310 8b 7e a4 69 67 5e b8 a8 47 83 62 83 c8 5e f6 27 .~.ig^..G.b..^.' 0320 ed dc cf 69 87 1b b8 a3 ef e8 ea 47 06 78 6b 0d ...i.......G.xk. 0330 4b b3 4e 20 9d 3e 80 3e 66 ab e5 4d d8 48 6b 7c K.N .>.>f..M.Hk| 0340 85 98 68 6a 23 31 49 81 79 33 8c af 20 4b fb c0 ..hj#1I.y3.. K.. 0350 06 7e a1 6b ec d8 37 88 09 d6 db 71 a4 42 4a 55 .~.k..7....q.BJU 0360 8f 64 f6 3d 16 f8 13 fa 68 a5 ab 5e ec ec 9d 00 .d.=....h..^.... 0370 63 40 8b 86 f0 9a 11 db 05 83 e4 9e 28 63 5f 97 c@..........(c_. 0380 79 80 79 61 78 7d 40 f7 d2 ab 29 9e 30 06 28 8d y.yax}@...).0.(. 0390 b4 56 94 40 6f a2 40 60 3c e3 b1 51 ad 55 9b 5d .V.@o.@`<..Q.U.] 03a0 c5 2e eb 39 3d ab 67 cb 76 9a 6c d8 50 46 ac 22 ...9=.g.v.l.PF." 03b0 bc 6b b5 22 b0 cc df 99 b8 83 aa 00 84 db 10 f9 .k."............ 03c0 bd 9a 16 5e 67 d1 4e 52 bf f2 e6 df d8 6c 72 a3 ...^g.NR.....lr. 03d0 06 41 c5 69 8d 25 49 aa 9d 78 c6 1a 82 1c ab f9 .A.i.%I..x...... 03e0 43 e8 45 9e 98 d8 78 fd d4 0e d6 1e a7 1a 68 16 C.E...x.......h. 03f0 4f ac d6 bd 30 30 b4 15 43 05 d7 95 52 48 d7 66 O...00..C...RH.f 0400 58 19 ba f6 ee 78 9d 28 a2 19 f0 98 e8 11 04 19 X....x.(........ 0410 a8 4b da 64 7f 56 0f 22 fe 29 cb 17 b5 c3 4a e1 .K.d.V.".)....J. 0420 2d d6 6f 8e c0 a9 75 c4 50 e0 b7 59 a9 6c 66 6c -.o...u.P..Y.lfl 0430 71 34 63 e3 84 35 c9 44 a7 13 f0 01 12 95 4a e8 q4c..5.D......J. 0440 3c 47 17 df 07 ed de 98 39 f5 1f 78 eb 74 e5 bd