Frame 11441: 596 bytes on wire (4768 bits), 596 bytes captured (4768 bits) Encapsulation type: Ethernet (1) Arrival Time: Jul 22, 2017 02:51:06.527052000 UTC UTC Arrival Time: Jul 22, 2017 02:51:06.527052000 UTC Epoch Arrival Time: 1500691866.527052000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000062000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 452.001703000 seconds] Frame Number: 11441 Frame Length: 596 bytes (4768 bits) Capture Length: 596 bytes (4768 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) Destination: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 3] Internet Protocol Version 4, Src: 63.217.21.41, Dst: 172.16.45.52 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 582 Identification: 0x5e98 (24216) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 59 Protocol: TCP (6) Header Checksum: 0x4039 [validation disabled] [Header checksum status: Unverified] Source Address: 63.217.21.41 Destination Address: 172.16.45.52 [Source GeoIP: Tin Shui Wai, HK, ASN 3491, CONSOLE-CONNECT-ASN] [Source GeoIP City: Tin Shui Wai] [Source or Destination GeoIP City: Tin Shui Wai] [Source GeoIP Country: Hong Kong] [Source or Destination GeoIP Country: Hong Kong] [Source GeoIP ISO Two Letter Country Code: HK] [Source or Destination GeoIP ISO Two Letter Country Code: HK] [Source GeoIP AS Number: 3491] [Source or Destination GeoIP AS Number: 3491] [Source GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source or Destination GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source GeoIP Latitude: 22.4489] [Source or Destination GeoIP Latitude: 22.4489] [Source GeoIP Longitude: 113.9984] [Source or Destination GeoIP Longitude: 113.9984] [Stream index: 40] Transmission Control Protocol, Src Port: 80, Dst Port: 49191, Seq: 1353, Ack: 401, Len: 542 Source Port: 80 Destination Port: 49191 [Stream index: 76] [Stream Packet Number: 7] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 542] Sequence Number: 1353 (relative sequence number) Sequence Number (raw): 140018193 [Next Sequence Number: 1895 (relative sequence number)] Acknowledgment Number: 401 (relative ack number) Acknowledgment number (raw): 1078627947 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 946 [Calculated window size: 30272] [Window size scaling factor: 32] Checksum: 0x4ffd [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 0.269248000 seconds] [Time since previous frame in this TCP stream: 0.000062000 seconds] [SEQ/ACK analysis] [iRTT: 0.081545000 seconds] [Bytes in flight: 1894] [Bytes sent since last PSH flag: 1894] TCP payload (542 bytes) Hypertext Transfer Protocol File Data: 542 bytes Data (542 bytes) 0000 25 bb 66 ad 68 d6 6e b0 6b d6 c8 fd 26 bb a7 e0 %.f.h.n.k...&... 0010 b7 b0 e3 d9 82 67 6f b0 e3 59 72 bf c9 ae 33 fc .....go..Yr...3. 0020 3d ec 9a 05 df bc c5 ae 49 ee 37 d9 21 f1 b7 b0 =.......I.7.!... 0030 63 18 ae c0 e5 06 3f 2c 2d cb 9b 0c 3d e9 f7 30 c.....?,-...=..0 0040 64 6b 05 2e b7 18 b2 b5 b2 bc c9 d0 35 7e 0f 43 dk..........5~.C 0050 0e fb 90 bb e9 43 8e 2b cb 9b 0c b7 f1 ef 61 d8 .....C.+......a. 0060 60 0b 5c 6e 31 6c b0 65 79 93 61 32 f8 3d 0c 5b `.\n1l.ey.a2.=.[ 0070 38 ca ad 9b 51 6e d5 ca f2 76 94 df ce 94 5f ac 8...Qn...v...._. 0080 f2 b7 56 f6 2b ab de b0 a4 59 30 3f cf f7 da d9 ..V.+....Y0?.... 0090 8e 26 b9 5b 35 cb e6 4d a3 dd 30 6a 1c 68 b6 db .&.[5..M..0j.h.. 00a0 26 63 37 9a ad 06 cf da 16 63 43 96 a5 f5 0e 6d &c7......cC....m 00b0 41 1b ec fd ac 7a 21 f4 6b 37 df 26 54 67 8b fa A....z!.k7.&Tg.. 00c0 cf 43 7f 26 54 67 c9 fd 26 21 b4 f9 5f 11 62 da .C.&Tg..&!.._.b. 00d0 78 36 b6 6f 51 c2 d2 b2 bc 49 4a 71 fe 3a a9 00 x6.oQ....IJq.:.. 00e0 84 e5 ae e2 65 5c c3 df c3 18 ef 54 32 1a 1f 30 ....e\.....T2..0 00f0 e8 8b 7e 4a 3f f7 bb df a6 d8 8a ef ce af 01 48 ..~J?..........H 0100 bd cb 44 be 8d 91 02 1b 24 a8 1a 23 bc 03 b1 aa ..D.....$..#.... 0110 19 30 ee d3 83 43 f6 26 7e 94 3c 56 fe 61 97 d7 .0...C.&~.