Frame 11059: 1282 bytes on wire (10256 bits), 1282 bytes captured (10256 bits) Encapsulation type: Ethernet (1) Arrival Time: Jul 22, 2017 02:50:52.173434000 UTC UTC Arrival Time: Jul 22, 2017 02:50:52.173434000 UTC Epoch Arrival Time: 1500691852.173434000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000185000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 437.648085000 seconds] Frame Number: 11059 Frame Length: 1282 bytes (10256 bits) Capture Length: 1282 bytes (10256 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) Destination: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 3] Internet Protocol Version 4, Src: 204.79.197.200, Dst: 172.16.45.52 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1268 Identification: 0x7c22 (31778) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 122 Protocol: TCP (6) Header Checksum: 0xa3ea [validation disabled] [Header checksum status: Unverified] Source Address: 204.79.197.200 Destination Address: 172.16.45.52 [Source GeoIP: US, ASN 8068, MICROSOFT-CORP-MSN-AS-BLOCK] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP AS Number: 8068] [Source or Destination GeoIP AS Number: 8068] [Source GeoIP AS Organization: MICROSOFT-CORP-MSN-AS-BLOCK] [Source or Destination GeoIP AS Organization: MICROSOFT-CORP-MSN-AS-BLOCK] [Source GeoIP Latitude: 37.751] [Source or Destination GeoIP Latitude: 37.751] [Source GeoIP Longitude: -97.822] [Source or Destination GeoIP Longitude: -97.822] [Stream index: 31] Transmission Control Protocol, Src Port: 80, Dst Port: 49158, Seq: 189560, Ack: 13786, Len: 1228 Source Port: 80 Destination Port: 49158 [Stream index: 41] [Stream Packet Number: 303] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1228] Sequence Number: 189560 (relative sequence number) Sequence Number (raw): 3262283576 [Next Sequence Number: 190788 (relative sequence number)] Acknowledgment Number: 13786 (relative ack number) Acknowledgment number (raw): 433226083 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 1021 [Calculated window size: 261376] [Window size scaling factor: 256] Checksum: 0xcfa8 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 46.957420000 seconds] [Time since previous frame in this TCP stream: 0.000185000 seconds] [SEQ/ACK analysis] [iRTT: 0.065264000 seconds] [Bytes in flight: 4388] [Bytes sent since last PSH flag: 1228] TCP payload (1228 bytes) Hypertext Transfer Protocol File Data: 1228 bytes Data (1228 bytes) 0000 34 63 35 0d 0a 1d bf b5 c3 db 8b 93 c1 f9 97 93 4c5............. 0010 fc e8 f4 2a fe f5 e2 e2 ed bb ab 5f fe 72 75 f9 ...*......._.ru. 0020 de a4 6d b5 8e 51 e4 be 63 54 37 a5 e9 69 b0 98 ..m..Q..cT7..i.. 0030 bf 95 86 ee f6 9e a0 a1 6b 86 a7 4d 7e 0e 83 1b ........k..M~... 0040 a1 9e ab 99 55 65 ba dc 24 d1 e3 03 d8 26 87 ba ....Ue..$....&.. 0050 9a ff 41 55 f3 ef 30 72 0b 2a 85 e4 a6 49 2e 36 ..AU..0r.*...I.6 0060 01 aa 94 ba ec 17 49 4a 67 97 64 03 c8 c7 84 59 ......IJg.d....Y 0070 14 b2 da ad b2 7b 9c a9 6c 02 81 f7 98 82 82 25 .....{..l......% 0080 56 f9 8b dd 06 2c 7e 4b d7 5f e8 62 1a 05 46 50 V....,~K._.b..FP 0090 a8 bf 06 51 f4 d5 fe 0f e2 1a 04 e5 b4 bc f6 7a ...Q...........z 00a0 c4 f1 27 b8 87 28 cb 53 77 d8 13 97 23 88 37 4f ..'..(.Sw...#.7O 00b0 b6 8f ca 54 21 21 a4 5e 16 38 3b 8b a0 b2 1d 36 ...T!!.^.8;....6 00c0 90 8c 05 cb d9 aa 78 95 ae ec 57 6a 9f 81 47 27 ......x...Wj..G' 00d0 f3 2e d5 45 0e fd 92 96 e1 6f a4 dc 57 a9 4c 5d ...E.....o..W.L] 00e0 c2 93 d6 3c 79 05 59 1a 2f 7d a6 41 d7 c9 65 07 ....zq.m.T) 0170 dc a3 a4 26 e2 a8 d7 e0 3b dc f4 87 db e3 57 af ...&....;.....W. 0180 7f d7 a2 80 ad 83 68 de b5 8f df 8c 86 83 e2 de ......h......... 0190 98 08 7c f3 6d 6e 34 76 94 ab 7a 06 be ab 61 20 ..|.mn4v..z...a 01a0 74 e6 05 01 74 ff 6f f9 c7 69 4c ea 0d cb af 1e t...t.o..iL..... 01b0 b0 7f ff f3 5f 5c ba 5d 43 7f 49 0e ba 8d 27 08 ...._\.]C.I...'. 01c0 7f d9 4d 0a a7 c3 55 02 00 8e f2 36 b7 18 7b 75 ..M...U....6..{u 01d0 f2 32 9e 67 e9 f8 e5 0b 0b 4c 94 97 2f 5c 67 ec .2.g.....L../\g. 01e0 0e 48 14 c6 5b 3a 29 10 ef 32 29 c6 50 56 1f 7c .H..[:)..2).PV.| 01f0 82 21 ff 11 80 bd 2b 5d 4e 5c b9 c2 af d2 e5 54 .!....+]N\.....T 0200 72 73 6b 0c 56 b7 f6 49 f9 a6 c4 66 33 c6 36 36 rsk.V..I...f3.66 0210 5e 66 fc c7 25 40 58 1a 04 62 90 c0 c3 14 3f f2 ^f..%@X..b....?. 0220 18 c9 eb e5 49 72 4e 4b 80 24 b3 08 83 27 e3 aa ....IrNK.$...'.. 0230 fb 07 cb 42 f4 72 fa f4 a7 b3 f7 cc c2 35 53 86 ...B.r.......5S. 0240 aa 5d db 87 be 2a 28 25 82 f8 ce fd 2a 61 a1 88 .]...*(%....*a.. 0250 f6 1a 49 fc 37 9f 34 f1 0d 84 af dc 96 c5 cb 10 ..I.7.4......... 0260 81 18 ce 0f bc 22 b6 e9 76 d0 c2 61 02 d5 46 4f ....."..v..a..FO 0270 36 e9 e3 3e 21 20 24 f1 67 be 78 23 78 73 d4 b0 6..>! $.g.x#xs.. 0280 b2 69 7e 7d 07 e1 7a 80 84 df 0b 5f 4e 9f cc fe .i~}..z...._N... 0290 08 68 00 df 18 95 62 48 f9 41 4a 90 4a 2f 00 16 .h....bH.AJ.J/.. 02a0 4f de 1f 1a a2 36 dd 32 dd b1 d3 37 27 43 5e f1 O....6.2...7'C^. 02b0 fa 88 09 54 3d 12 d4 23 46 e1 1b e0 5b ef a8 e5 ...T=..#F...[... 02c0 8e 9a 7e ce 77 bd 20 d7 33 b1 cc 39 30 2f 96 36 ..~.w. .3..90/.6 02d0 cf e1 89 7e 2d e4 5e 5e b7 26 b7 ca 68 22 aa ca ...~-.^^.&..h".. 02e0 ab b1 ae 88 7d 03 48 05 36 c1 01 90 d9 00 08 0e ....}.H.6....... 02f0 80 cc 06 40 f8 00 70 cd 1a 0b 81 31 42 36 4d 58 ...@..p....1B6MX 0300 00 1b 5e 73 5c db a1 d9 08 c5 a8 a2 6a 4c 53 65 ..^s\.......jLSe 0310 f1 9d e2 d8 4f 5b 79 40 a9 6d a9 bd 7a 0f ed 0f ....O[y@.m..z... 0320 99 92 73 df 1a 9d f4 57 a3 53 c3 e3 c6 1e 4e da ..s....W.S....N. 0330 f5 93 05 8a b9 2e 60 cf d8 42 b0 7e f2 00 6c 86 ......`..B.~..l. 0340 1c 7e 10 74 06 43 5c f0 26 36 65 4d 2c c4 14 13 .~.t.C\.&6eM,... 0350 44 65 ab ed 5a 24 3c 28 03 9f 9a 90 16 4c 0b 8f De..Z$<(.....L.. 0360 59 04 f0 4b d1 3e 04 38 67 08 2d 59 3d c7 07 c5 Y..K.>.8g.-Y=... 0370 8f 5c f6 33 63 10 c1 7c 88 fd 8b 65 4f 66 bb e3 .\.3c..|...eOf.. 0380 04 91 49 6f d8 cc 89 8a b0 9a b9 34 f6 6a 58 39 ..Io.......4.jX9 0390 31 87 b0 7e e4 ae 7a 5d 20 d0 47 48 69 df c3 03 1..~..z] .GHi... 03a0 d5 2c 62 8e 4d c7 c5 ba 4b 89 9d 4f a6 e4 c4 6c .,b.M...K..O...l 03b0 57 b0 c4 c8 3a 64 d9 ad e5 08 5c 18 35 4a 5a 51 W...:d....\.5JZQ 03c0 60 d2 fb 16 92 b6 5d 4d 80 8a ec e4 5b b3 6f 66 `.....]M....[.of 03d0 f4 dc 1f 5a 2c 66 b2 2d 52 48 ca ab 91 22 a4 c5 ...Z,f.-RH...".. 03e0 7f ff f5 1f 7f a6 1d 9b 51 69 6a b3 17 7a 52 66 ........Qij..zRf 03f0 64 3a 0c e9 b4 05 89 60 26 16 c8 7f 4f 20 01 12 d:.....`&...O .. 0400 ca 00 98 11 fc f3 04 ad a8 81 d3 9f 90 b6 35 76 ..............5v 0410 5a dc 87 d3 32 07 bc 3d 40 98 8e e3 e2 51 6d d8 Z...2..=@....Qm. 0420 b4 d4 e5 66 95 d5 70 b1 e4 73 77 9b 50 ca 0a 24 ...f..p..sw.P..$ 0430 6b 71 23 7b da 1a b0 c4 67 b8 9b b5 3d 6d e8 11 kq#{....g...=m.. 0440 d1 d0 23 a3 a1 87 a9 ba 28 c8 8a c4 34 85 d2 a9 ..#.....(...4... 0450 3e f1 4b ec 9b 35 28 89 c3 52 ed 93 73 7a 37 a4 >.K..5(..R..sz7. 0460 ba 7a 7f fa 44 f5 41 f9 ae dc ad 6f 6b e8 79 3b .z..D.A....ok.y; 0470 bb 8d ac 67 b0 db ac b4 b2 00 35 37 99 59 f0 f9 ...g......57.Y.. 0480 5c dd 6c 61 a5 d4 15 e6 f1 16 62 0b 20 59 46 d3 \.la......b. YF. 0490 0e e9 80 20 3f c2 63 89 49 61 6e aa e7 ee a8 43 ... ?.c.Ian....C 04a0 d2 40 8b fd 21 e1 c5 b4 d0 62 1c 16 4e bb b1 5a .@..!....b..N..Z 04b0 76 df 03 25 6d 72 88 66 40 37 b0 0f d3 7c 9b 91 v..%mr.f@7...|.. 04c0 33 b7 f3 15 52 95 c5 d9 73 29 0d 0a 3...R...s).. Data […]: 3463350d0a1dbfb5c3db8b93c1f99793fce8f42afef5e2e2edbbab5ffe7275f9dea46db58e51e4be635437a5e969b098bf9586eef69ea0a16b86a74d7e0e831ba19eab995565badc24d1e303d82687ba9aff4155f3ef30720b2a85e4a6492e3601aa94baec17494a67976403c8c7845914b [Length: 1228]