Frame 11202: 889 bytes on wire (7112 bits), 889 bytes captured (7112 bits) Encapsulation type: Ethernet (1) Arrival Time: Jul 22, 2017 02:50:52.696884000 UTC UTC Arrival Time: Jul 22, 2017 02:50:52.696884000 UTC Epoch Arrival Time: 1500691852.696884000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000147000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 438.171535000 seconds] Frame Number: 11202 Frame Length: 889 bytes (7112 bits) Capture Length: 889 bytes (7112 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) Destination: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 3] Internet Protocol Version 4, Src: 204.79.197.200, Dst: 172.16.45.52 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 875 Identification: 0x4856 (18518) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 120 Protocol: TCP (6) Header Checksum: 0xdb3f [validation disabled] [Header checksum status: Unverified] Source Address: 204.79.197.200 Destination Address: 172.16.45.52 [Source GeoIP: US, ASN 8068, MICROSOFT-CORP-MSN-AS-BLOCK] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP AS Number: 8068] [Source or Destination GeoIP AS Number: 8068] [Source GeoIP AS Organization: MICROSOFT-CORP-MSN-AS-BLOCK] [Source or Destination GeoIP AS Organization: MICROSOFT-CORP-MSN-AS-BLOCK] [Source GeoIP Latitude: 37.751] [Source or Destination GeoIP Latitude: 37.751] [Source GeoIP Longitude: -97.822] [Source or Destination GeoIP Longitude: -97.822] [Stream index: 31] Transmission Control Protocol, Src Port: 80, Dst Port: 49161, Seq: 266590, Ack: 21585, Len: 835 Source Port: 80 Destination Port: 49161 [Stream index: 44] [Stream Packet Number: 440] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 835] Sequence Number: 266590 (relative sequence number) Sequence Number (raw): 1951772359 [Next Sequence Number: 267425 (relative sequence number)] Acknowledgment Number: 21585 (relative ack number) Acknowledgment number (raw): 2852823231 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 1020 [Calculated window size: 261120] [Window size scaling factor: 256] Checksum: 0x2b05 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 46.730440000 seconds] [Time since previous frame in this TCP stream: 0.000147000 seconds] [SEQ/ACK analysis] [iRTT: 0.065752000 seconds] [Bytes in flight: 2187] [Bytes sent since last PSH flag: 2187] TCP payload (835 bytes) Hypertext Transfer Protocol File Data: 835 bytes Data (835 bytes) 0000 2c 65 3d 6e 2e 6f 66 66 73 65 74 57 69 64 74 68 ,e=n.offsetWidth 0010 2c 6f 3d 6e 2e 6f 66 66 73 65 74 48 65 69 67 68 ,o=n.offsetHeigh 0020 74 2c 69 3d 74 2e 6f 66 66 73 65 74 4c 65 66 74 t,i=t.offsetLeft 0030 2c 72 3d 74 2e 6f 66 66 73 65 74 54 6f 70 2c 66 ,r=t.offsetTop,f 0040 3d 74 3b 66 3d 66 2e 6f 66 66 73 65 74 50 61 72 =t;f=f.offsetPar 0050 65 6e 74 3b 29 69 2b 3d 66 2e 6f 66 66 73 65 74 ent;)i+=f.offset 0060 4c 65 66 74 2c 72 2b 3d 66 2e 6f 66 66 73 65 74 Left,r+=f.offset 0070 54 6f 70 3b 72 65 74 75 72 6e 20 69 2d 3d 28 65 Top;return i-=(e 0080 2d 74 2e 6f 66 66 73 65 74 57 69 64 74 68 29 2f -t.offsetWidth)/ 0090 32 2c 72 2d 3d 28 6f 2d 74 2e 6f 66 66 73 65 74 2,r-=(o-t.offset 00a0 48 65 69 67 68 74 29 2f 32 2c 69 3d 4d 61 74 68 Height)/2,i=Math 00b0 2e 6d 69 6e 28 69 2c 75 2e 72 2d 65 2d 32 29 2c .min(i,u.r-e-2), 00c0 69 3d 4d 61 74 68 2e 6d 61 78 28 69 2c 75 2e 6c i=Math.max(i,u.l 00d0 29 2c 72 3d 4d 61 74 68 2e 6d 69 6e 28 72 2c 75 ),r=Math.min(r,u 00e0 2e 62 2d 6f 2d 32 29 2c 72 3d 4d 61 74 68 2e 6d .b-o-2),r=Math.m 00f0 61 78 28 72 2c 75 2e 74 29 2c 7b 6c 3a 69 2c 74 ax(r,u.t),{l:i,t 0100 3a 72 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 74 28 :r}}function ot( 0110 29 7b 76 61 72 20 6e 3d 5f 77 2e 70 61 67 65 58 ){var n=_w.pageX 0120 4f 66 66 73 65 74 7c 7c 73 62 5f 64 65 2e 73 63 Offset||sb_de.sc 0130 72 6f 6c 6c 4c 65 66 74 2c 74 3d 5f 77 2e 70 61 rollLeft,t=_w.pa 0140 67 65 59 4f 66 66 73 65 74 7c 7c 73 62 5f 64 65 geYOffset||sb_de 0150 2e 73 63 72 6f 6c 6c 54 6f 70 2c 69 3d 6e 2b 28 .scrollTop,i=n+( 0160 5f 77 2e 69 6e 6e 65 72 57 69 64 74 68 7c 7c 73 _w.innerWidth||s 0170 62 5f 64 65 2e 63 6c 69 65 6e 74 57 69 64 74 68 b_de.clientWidth 0180 29 2d 69 74 2c 72 3d 74 2b 28 5f 77 2e 69 6e 6e )-it,r=t+(_w.inn 0190 65 72 48 65 69 67 68 74 7c 7c 73 62 5f 64 65 2e erHeight||sb_de. 01a0 63 6c 69 65 6e 74 48 65 69 67 68 74 29 2d 69 74 clientHeight)-it 01b0 3b 72 65 74 75 72 6e 7b 6c 3a 6e 2c 74 3a 74 2c ;return{l:n,t:t, 01c0 72 3a 69 2c 62 3a 72 7d 7d 76 61 72 20 6e 3d 74 r:i,b:r}}var n=t 01d0 68 69 73 2c 73 3d 5b 5d 2c 74 3d 6e 75 6c 6c 2c his,s=[],t=null, 01e0 75 3d 6e 75 6c 6c 2c 68 3d 7b 78 3a 30 2c 79 3a u=null,h={x:0,y: 01f0 30 7d 2c 6c 3d 21 31 2c 69 3d 6e 75 6c 6c 2c 67 0},l=!1,i=null,g 0200 3d 21 31 2c 63 3d 21 31 2c 61 3d 5b 5d 2c 76 3d =!1,c=!1,a=[],v= 0210 6e 75 6c 6c 2c 6e 74 3d 22 68 76 70 72 22 2c 73 null,nt="hvpr",s 0220 74 3d 22 69 68 70 22 2c 79 3d 22 69 72 68 61 74 t="ihp",y="irhat 0230 74 22 2c 74 74 3d 22 68 70 22 2c 68 74 3d 31 35 t",tt="hp",ht=15 0240 2c 63 74 3d 32 35 2c 6c 74 3d 37 2c 69 74 3d 31 ,ct=25,lt=7,it=1 0250 39 2c 61 74 3d 34 3b 73 6a 5f 62 65 28 5f 77 2c 9,at=4;sj_be(_w, 0260 22 75 6e 6c 6f 61 64 22 2c 77 29 3b 6e 2e 68 6f "unload",w);n.ho 0270 76 65 72 43 6c 61 73 73 3d 22 69 72 68 63 22 3b verClass="irhc"; 0280 6e 2e 68 6f 76 65 72 49 64 3d 22 69 72 68 63 69 n.hoverId="irhci 0290 64 22 3b 6e 2e 61 74 74 61 63 68 3d 76 74 3b 6e d";n.attach=vt;n 02a0 2e 69 74 65 6d 73 3d 79 74 3b 6e 2e 68 6f 76 65 .items=yt;n.hove 02b0 72 41 74 74 72 3d 72 3b 6e 2e 68 6f 76 65 72 41 rAttr=r;n.hoverA 02c0 74 74 72 4e 75 6d 3d 70 3b 6e 2e 67 65 74 43 6f ttrNum=p;n.getCo 02d0 6e 74 3d 66 3b 6e 2e 61 64 64 49 6e 74 65 72 63 nt=f;n.addInterc 02e0 65 70 74 3d 77 74 3b 6e 2e 67 65 74 48 6f 76 65 ept=wt;n.getHove 02f0 72 45 6c 3d 62 74 3b 6e 2e 64 69 73 70 48 6f 76 rEl=bt;n.dispHov 0300 3d 72 74 3b 6e 2e 67 65 74 43 6f 6e 74 43 6f 6e =rt;n.getContCon 0310 74 65 6e 74 3d 70 74 3b 6e 2e 73 65 74 43 6f 6e tent=pt;n.setCon 0320 74 50 6f 73 3d 64 3b 6e 2e 64 65 74 61 63 68 3d tPos=d;n.detach= 0330 77 3b 6e 2e 73 65 74 43 61 70 74 69 6f 6e 73 3d w;n.setCaptions= 0340 6b 74 7d kt} Data […]: 2c653d6e2e6f666673657457696474682c6f3d6e2e6f66667365744865696768742c693d742e6f66667365744c6566742c723d742e6f6666736574546f702c663d743b663d662e6f6666736574506172656e743b29692b3d662e6f66667365744c6566742c722b3d662e6f6666736574546 [Length: 835]