Frame 11318: 680 bytes on wire (5440 bits), 680 bytes captured (5440 bits)
    Encapsulation type: Ethernet (1)
    Arrival Time: Jul 22, 2017 02:50:55.235724000 UTC
    UTC Arrival Time: Jul 22, 2017 02:50:55.235724000 UTC
    Epoch Arrival Time: 1500691855.235724000
    [Time shift for this packet: 0.000000000 seconds]
    [Time delta from previous captured frame: 0.000255000 seconds]
    [Time delta from previous displayed frame: 0.000000000 seconds]
    [Time since reference or first frame: 440.710375000 seconds]
    Frame Number: 11318
    Frame Length: 680 bytes (5440 bits)
    Capture Length: 680 bytes (5440 bits)
    [Frame is marked: False]
    [Frame is ignored: False]
    [Protocols in frame: eth:ethertype:ip:tcp:http:data]
Ethernet II, Src: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9), Dst: Cisco_01:e9:5c (00:09:e8:01:e9:5c)
    Destination: Cisco_01:e9:5c (00:09:e8:01:e9:5c)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IPv4 (0x0800)
    [Stream index: 3]
Internet Protocol Version 4, Src: 172.16.45.52, Dst: 204.79.197.200
    0100 .... = Version: 4
    .... 0101 = Header Length: 20 bytes (5)
    Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
        0000 00.. = Differentiated Services Codepoint: Default (0)
        .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
    Total Length: 666
    Identification: 0x0c62 (3170)
    010. .... = Flags: 0x2, Don't fragment
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    ...0 0000 0000 0000 = Fragment Offset: 0
    Time to Live: 128
    Protocol: TCP (6)
    Header Checksum: 0x1005 [validation disabled]
    [Header checksum status: Unverified]
    Source Address: 172.16.45.52
    Destination Address: 204.79.197.200
    [Destination GeoIP: US, ASN 8068, MICROSOFT-CORP-MSN-AS-BLOCK]
        [Destination GeoIP Country: United States]
        [Source or Destination GeoIP Country: United States]
        [Destination GeoIP ISO Two Letter Country Code: US]
        [Source or Destination GeoIP ISO Two Letter Country Code: US]
        [Destination GeoIP AS Number: 8068]
        [Source or Destination GeoIP AS Number: 8068]
        [Destination GeoIP AS Organization: MICROSOFT-CORP-MSN-AS-BLOCK]
        [Source or Destination GeoIP AS Organization: MICROSOFT-CORP-MSN-AS-BLOCK]
        [Destination GeoIP Latitude: 37.751]
        [Source or Destination GeoIP Latitude: 37.751]
        [Destination GeoIP Longitude: -97.822]
        [Source or Destination GeoIP Longitude: -97.822]
    [Stream index: 31]
Transmission Control Protocol, Src Port: 49161, Dst Port: 80, Seq: 29901, Ack: 268815, Len: 626
    Source Port: 49161
    Destination Port: 80
    [Stream index: 44]
    [Stream Packet Number: 465]
    [Conversation completeness: Incomplete, DATA (15)]
        ..0. .... = RST: Absent
        ...0 .... = FIN: Absent
        .... 1... = Data: Present
        .... .1.. = ACK: Present
        .... ..1. = SYN-ACK: Present
        .... ...1 = SYN: Present
        [Completeness Flags: ··DASS]
    [TCP Segment Len: 626]
    Sequence Number: 29901    (relative sequence number)
    Sequence Number (raw): 2852831547
    [Next Sequence Number: 30527    (relative sequence number)]
    Acknowledgment Number: 268815    (relative ack number)
    Acknowledgment number (raw): 1951774584
    0101 .... = Header Length: 20 bytes (5)
    Flags: 0x018 (PSH, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Accurate ECN: Not set
        .... 0... .... = Congestion Window Reduced: Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 1... = Push: Set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
        [TCP Flags: ·······AP···]
    Window: 258
    [Calculated window size: 66048]
    [Window size scaling factor: 256]
    Checksum: 0x381a [unverified]
    [Checksum Status: Unverified]
    Urgent Pointer: 0
    [Timestamps]
        [Time since first frame in this TCP stream: 49.269280000 seconds]
        [Time since previous frame in this TCP stream: 0.000255000 seconds]
    [SEQ/ACK analysis]
        [iRTT: 0.065752000 seconds]
        [Bytes in flight: 1514]
        [Bytes sent since last PSH flag: 626]
    TCP payload (626 bytes)
Hypertext Transfer Protocol
    File Data: 626 bytes
    Data (626 bytes)

0000  3c 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65   <ClientInstReque
0010  73 74 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54   st><Events><E><T
0020  3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73   >Event.ClientIns
0030  74 3c 2f 54 3e 3c 49 47 3e 31 46 33 36 44 33 41   t</T><IG>1F36D3A
0040  41 34 37 43 32 34 46 31 46 42 45 32 41 30 34 32   A47C24F1FBE2A042
0050  35 46 42 41 32 36 46 35 38 3c 2f 49 47 3e 3c 54   5FBA26F58</IG><T
0060  53 3e 31 35 30 30 36 39 31 38 35 33 34 37 34 3c   S>1500691853474<
0070  2f 54 53 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b   /TS><D><![CDATA[
0080  5b 7b 22 54 22 3a 22 43 49 2e 42 6f 78 4d 6f 64   [{"T":"CI.BoxMod
0090  65 6c 22 2c 22 46 49 44 22 3a 22 43 49 22 2c 22   el","FID":"CI","
00a0  4e 61 6d 65 22 3a 22 76 32 2e 38 22 2c 22 53 56   Name":"v2.8","SV
00b0  22 3a 22 34 22 2c 22 50 22 3a 7b 22 43 22 3a 37   ":"4","P":{"C":7
00c0  2c 22 4e 22 3a 32 2c 22 49 22 3a 22 31 72 78 22   ,"N":2,"I":"1rx"
00d0  2c 22 53 22 3a 22 43 22 2c 22 4d 22 3a 22 56 2b   ,"S":"C","M":"V+
00e0  4c 2b 4d 2b 4d 54 2b 45 2b 4e 2b 43 2b 4b 2b 42   L+M+MT+E+N+C+K+B
00f0  44 22 2c 22 54 22 3a 33 35 31 39 2c 22 4b 22 3a   D","T":3519,"K":
0100  22 31 79 30 2b 31 7a 78 22 2c 22 46 22 3a 30 7d   "1y0+1zx","F":0}
0110  2c 22 4e 22 3a 22 31 78 7a 2f 31 38 2f 2f 40 37   ,"N":"1xz/18//@7
0120  2f 6c 73 25 32 46 6c 73 70 2e 61 73 70 78 2f 40   /ls%2Flsp.aspx/@
0130  70 2f 31 79 2f 40 38 2f 40 76 2f 2d 31 2f 40 76   p/1y/@8/@v/-1/@v
0140  2f 31 79 31 2f 40 77 2f 40 77 2b 32 36 33 2f 31   /1y1/@w/@w+263/1
0150  39 2f 2f 36 33 32 61 65 63 66 65 35 38 35 38 39   9//632aecfe58589
0160  34 32 62 66 65 37 38 37 31 30 32 35 30 34 36 66   42bfe7871025046f
0170  36 61 61 2e 63 6c 6f 2e 66 6f 6f 74 70 72 69 6e   6aa.clo.footprin
0180  74 64 6e 73 2e 63 6f 6d 2f 40 74 2f 40 39 2f 65   tdns.com/@t/@9/e
0190  37 2f 40 38 2f 2d 31 2f 2d 31 2f 2d 31 2f 2d 31   7/@8/-1/-1/-1/-1
01a0  2f 2d 31 2f 32 6b 61 2b 32 6b 62 2f 31 61 2f 2f   /-1/2ka+2kb/1a//
01b0  35 32 38 64 36 38 65 31 66 66 63 32 62 63 39 38   528d68e1ffc2bc98
01c0  35 38 65 33 37 61 65 63 62 63 61 33 38 31 30 37   58e37aecbca38107
01d0  2e 63 6c 6f 2e 66 6f 6f 74 70 72 69 6e 74 64 6e   .clo.footprintdn
01e0  73 2e 63 6f 6d 2f 61 70 63 25 32 46 31 37 6b 2e   s.com/apc%2F17k.
01f0  67 69 66 2f 40 39 2f 30 2f 40 38 2f 2d 31 2f 2d   gif/@9/0/@8/-1/-
0200  31 2f 2d 31 2f 2d 31 2f 2d 31 2f 2d 31 22 2c 22   1/-1/-1/-1/-1","
0210  43 22 3a 22 32 32 62 2f 2f 2f 2f 2f 69 68 2f 35   C":"22b/////ih/5
0220  6e 2f 2b 32 34 6a 2f 2f 2f 2f 2f 69 37 2f 2f 22   n/+24j/////i7//"
0230  7d 5d 5d 5d 3e 3c 2f 44 3e 3c 2f 45 3e 3c 2f 45   }]]]></D></E></E
0240  76 65 6e 74 73 3e 3c 53 54 53 3e 31 35 30 30 36   vents><STS>15006
0250  39 31 38 35 33 34 37 34 3c 2f 53 54 53 3e 3c 2f   91853474</STS></
0260  43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73   ClientInstReques
0270  74 3e                                             t>
        Data […]: 3c436c69656e74496e7374526571756573743e3c4576656e74733e3c453e3c543e4576656e742e436c69656e74496e73743c2f543e3c49473e31463336443341413437433234463146424532413034323546424132364635383c2f49473e3c54533e313530303639313835333437343c2f5
        [Length: 626]