Frame 11519: 1406 bytes on wire (11248 bits), 1406 bytes captured (11248 bits) Encapsulation type: Ethernet (1) Arrival Time: Jul 22, 2017 02:51:06.618284000 UTC UTC Arrival Time: Jul 22, 2017 02:51:06.618284000 UTC Epoch Arrival Time: 1500691866.618284000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000116000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 452.092935000 seconds] Frame Number: 11519 Frame Length: 1406 bytes (11248 bits) Capture Length: 1406 bytes (11248 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) Destination: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 3] Internet Protocol Version 4, Src: 63.217.21.41, Dst: 172.16.45.52 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1392 Identification: 0xbe53 (48723) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 59 Protocol: TCP (6) Header Checksum: 0xdd53 [validation disabled] [Header checksum status: Unverified] Source Address: 63.217.21.41 Destination Address: 172.16.45.52 [Source GeoIP: Tin Shui Wai, HK, ASN 3491, CONSOLE-CONNECT-ASN] [Source GeoIP City: Tin Shui Wai] [Source or Destination GeoIP City: Tin Shui Wai] [Source GeoIP Country: Hong Kong] [Source or Destination GeoIP Country: Hong Kong] [Source GeoIP ISO Two Letter Country Code: HK] [Source or Destination GeoIP ISO Two Letter Country Code: HK] [Source GeoIP AS Number: 3491] [Source or Destination GeoIP AS Number: 3491] [Source GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source or Destination GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source GeoIP Latitude: 22.4489] [Source or Destination GeoIP Latitude: 22.4489] [Source GeoIP Longitude: 113.9984] [Source or Destination GeoIP Longitude: 113.9984] [Stream index: 40] Transmission Control Protocol, Src Port: 80, Dst Port: 49192, Seq: 9465, Ack: 305, Len: 1352 Source Port: 80 Destination Port: 49192 [Stream index: 77] [Stream Packet Number: 16] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1352] Sequence Number: 9465 (relative sequence number) Sequence Number (raw): 2762588749 [Next Sequence Number: 10817 (relative sequence number)] Acknowledgment Number: 305 (relative ack number) Acknowledgment number (raw): 3518730250 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 946 [Calculated window size: 30272] [Window size scaling factor: 32] Checksum: 0x73a2 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 0.360240000 seconds] [Time since previous frame in this TCP stream: 0.000116000 seconds] [SEQ/ACK analysis] [iRTT: 0.081306000 seconds] [Bytes in flight: 2704] [Bytes sent since last PSH flag: 10816] TCP payload (1352 bytes) Hypertext Transfer Protocol File Data: 1352 bytes Data (1352 bytes) 0000 6d 97 77 74 84 d9 b8 bb 47 3e 62 d8 4e 74 a2 cb m.wt....G>b.Nt.. 0010 34 c5 ac ed 62 c4 1d 77 87 8c e3 3c 1a 8e 22 d0 4...b..w...<..". 0020 32 1f ef 89 21 79 43 eb ea 7b 55 b3 25 63 44 07 2...!yC..{U.%cD. 0030 af 5c 03 37 6a 26 d8 8a 39 79 83 b5 2b fc 82 de .\.7j&..9y..+... 0040 3c 90 75 1b 92 b2 9e c3 b0 c6 1f 3f 48 2a 7e 73 <.u........?H*~s 0050 d0 56 bc 46 27 8e b0 9a 62 89 2c 44 df dd fd b1 .V.F'...b.,D.... 0060 98 8d 50 e1 5f 64 3a 55 b0 01 3a 00 1b 08 49 2d ..P._d:U..:...I- 0070 db 64 7e 06 04 65 4b 2a 3c aa ee 7a 9d ac 12 cd .d~..eK*<..z.... 0080 86 c1 c7 9c 1f 1e 35 5d 8b 81 f8 8d 25 78 71 70 ......5]....%xqp 0090 75 50 5d c4 67 a3 a4 28 95 bd d3 a0 08 44 7d 9e uP].g..(.....D}. 00a0 af 5a cd 84 9d 99 da 7a e2 ac 4b d1 57 8f b0 08 .Z.....z..K.W... 00b0 ff 68 cb 60 5d 0f 4b 4a f3 67 8d bd 83 79 03 db .h.`].KJ.g...y.. 00c0 04 4c a7 e7 e1 50 d1 ab 87 f2 bd 57 6d 17 d6 e7 .L...P.....Wm... 00d0 a1 b6 3c a7 74 38 c0 23 ab 4e ba 55 09 05 e5 5d ..<.t8.#.N.U...] 00e0 55 ab 69 16 c4 69 28 8e 78 c8 0b 18 d4 2a 49 1f U.i..i(.x....*I. 00f0 a5 9a 02 78 d1 97 e3 df a3 8e 17 b0 c1 d9 1b 03 ...x............ 0100 ed 7a ed d8 f9 af 41 a7 b6 06 ac 6e 06 7c 94 14 .z....A....n.|.. 0110 d7 b6 3d b6 b1 d5 55 c3 06 d9 5d b9 4e c7 4a ba ..=...U...].N.J. 0120 4f 1f fd 69 de 43 45 50 79 03 8b 45 8f b9 3f 4c O..i.CEPy..E..?L 0130 b1 1a 68 8f 46 06 c7 bf c5 4d a3 b1 4a 59 ce da ..h.F....M..JY.. 0140 74 85 07 ad 4b 3d d9 b1 ed a6 09 3e 72 20 3e 0f t...K=.....>r >. 0150 07 a5 6e a3 97 e9 00 8c fb a6 b5 06 0d 62 07 e9 ..n..........b.. 0160 bc f3 24 29 01 0b 86 1c 5a 12 13 40 d1 4f 85 29 ..$)....Z..@.O.) 0170 47 69 c7 ac 62 e1 78 19 7a d5 63 03 01 86 42 b0 Gi..b.x.z.c...B. 0180 d1 c4 e9 92 8c 6b 2e db b8 06 c2 69 81 fb 01 14 .....k.....i.... 0190 44 6c 41 66 f3 31 b4 55 b3 75 d8 14 28 e0 f6 c8 DlAf.1.U.u..(... 01a0 92 82 86 4d ec 33 45 9d 50 f4 0d f6 13 f6 03 68 ...M.3E.P......h 01b0 ba e8 8e 80 ef 6b 13 c1 47 98 84 78 85 ad 2b d0 .....k..G..x..+. 01c0 a9 f4 04 29 61 0b 62 79 a9 3e 88 62 23 08 da fe ...)a.by.>.b#... 01d0 57 91 50 9b 55 17 f3 a5 f0 ff d0 0f ae 83 a5 11 W.P.U........... 01e0 5e 6f c0 7d 93 8a a4 23 fe b2 16 bb b5 40 3b 16 ^o.}...#.....@;. 01f0 ba 76 fd b5 11 b9 15 90 69 ce 6b 6d b9 00 d5 6e .v......i.km...n 0200 36 3a b1 85 cb 72 ed e0 cc 3b d9 33 e7 49 27 85 6:...r...;.3.I'. 0210 ed 79 23 af cf fe 6b 00 3f db cf 11 c7 23 3b 5a .y#...k.?....#;Z 0220 d7 93 cb 83 fe 7c 53 ac f4 da f1 44 2f f2 f0 bf .....|S....D/... 0230 73 8d fc 17 cb 35 c2 7b be 51 0f 10 8f ba 36 f7 s....5.{.Q....6. 0240 aa 83 2e 0e 71 be a9 61 a2 cf b7 24 8a de 9a bb ....q..a...$.... 0250 38 db f7 50 7d f9 58 d3 b6 ea da b1 a6 a9 6d 24 8..P}.X.......m$ 0260 87 72 e8 b5 9e c7 62 2b ff 43 d8 d6 8f b2 77 d5 .r....b+.C....w. 0270 f7 d5 20 76 c0 a0 9c 3c 2b d7 d7 ea 06 32 d4 a4 .. v...<+....2.. 0280 c6 6d a2 ef 7c 25 3f b0 dd b9 82 13 db 6e 88 ca .m..|%?......n.. 0290 af 5a 1a 1a 34 ef 5b be 2b d8 05 74 45 4a 5c 83 .Z..4.[.+..tEJ\. 02a0 87 09 ef c2 62 8d 54 17 80 94 6c f0 2d dd 7a aa ....b.T...l.-.z. 02b0 d5 56 21 64 d3 3e b3 bd 85 fe 8b 13 4a e3 31 d6 .V!d.>......J.1. 02c0 93 44 00 9d 2c c3 35 02 88 fe 06 01 81 b2 55 37 .D..,.5.......U7 02d0 f6 05 3a 68 a6 9a 02 6a 96 49 bf cd 1c 58 02 6a ..:h...j.I...X.j 02e0 33 07 7a d0 ba 39 90 e5 d3 59 85 30 93 96 30 c8 3.z..9...Y.0..0. 02f0 7a bd 90 d1 fb 09 5a 34 d6 ac 7d ed 7b 6a de 76 z.....Z4..}.{j.v 0300 5d 5e c2 7a 69 1a 9c 98 42 96 e5 69 68 e0 8b 88 ]^.zi...B..ih... 0310 8d c2 a8 0c a1 d6 24 8c 7e 30 5c 60 37 38 7e ca ......$.~0\`78~. 0320 d5 c4 b4 5e a6 a5 a9 83 5d 03 2a 11 17 be ab 3d ...^....].*....= 0330 81 ce 26 e8 4f 53 6b 6e cd 1a b0 0d 73 3b 62 ae ..&.OSkn....s;b. 0340 90 20 d0 dc 97 1e 2b 51 08 41 a8 ee 64 c1 ce 22 . ....+Q.A..d.." 0350 48 ed c5 19 72 46 e4 bf 26 94 d5 27 d9 d0 a5 d4 H...rF..&..'.... 0360 98 a1 3f 8d 40 1b d3 6b 34 00 d2 2a 69 80 a5 20 ..?.@..k4..*i.. 0370 6c b0 30 9b dc 15 35 11 c3 cf 58 52 65 f9 e3 9a l.0...5...XRe... 0380 32 61 67 28 19 13 f6 35 da 25 04 91 6c 15 02 d2 2ag(...5.%..l... 0390 18 3c 1f fe 5a bb 63 e9 8a 4b 35 ef b1 4c 05 65 .<..Z.c..K5..L.e 03a0 db 61 21 2d 2d f8 b7 06 62 3d d7 19 2f 8e 49 ea .a!--...b=../.I. 03b0 2c 2b cf 5d 2c af b4 27 28 6d a5 ec c3 86 a4 79 ,+.],..'(m.....y 03c0 01 bb e3 f2 f7 dd 1d 5e fd 75 85 5f d7 57 92 5d .......^.u._.W.] 03d0 e1 35 88 e1 d7 3b 74 22 4e 23 50 a6 40 1e d3 cd .5...;t"N#P.@... 03e0 97 0b c1 45 9f 0f eb 9c dc 8c ea 6a 23 0b 32 05 ...E.......j#.2. 03f0 97 47 a6 4f c4 0a 5b f2 15 30 d1 11 79 93 b5 51 .G.O..[..0..y..Q 0400 04 89 da 24 da 73 81 f9 0b c7 24 78 1f 25 aa d0 ...$.s....$x.%.. 0410 87 2b 0e 83 fe 70 dc 1f 8d fb 83 19 97 64 1f 1b .+...p.......d.. 0420 ef c5 6c 8e 45 8e 0e 5d 9a 37 59 9f a5 e1 b3 12 ..l.E..].7Y..... 0430 3c 6d 44 a1 c1 1d 55 40 de 33 64 4e e5 ca 0b f0