Frame 11631: 1406 bytes on wire (11248 bits), 1406 bytes captured (11248 bits) Encapsulation type: Ethernet (1) Arrival Time: Jul 22, 2017 02:51:06.782303000 UTC UTC Arrival Time: Jul 22, 2017 02:51:06.782303000 UTC Epoch Arrival Time: 1500691866.782303000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000164000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 452.256954000 seconds] Frame Number: 11631 Frame Length: 1406 bytes (11248 bits) Capture Length: 1406 bytes (11248 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) Destination: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 3] Internet Protocol Version 4, Src: 63.217.21.41, Dst: 172.16.45.52 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1392 Identification: 0x5ec7 (24263) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 59 Protocol: TCP (6) Header Checksum: 0x3ce0 [validation disabled] [Header checksum status: Unverified] Source Address: 63.217.21.41 Destination Address: 172.16.45.52 [Source GeoIP: Tin Shui Wai, HK, ASN 3491, CONSOLE-CONNECT-ASN] [Source GeoIP City: Tin Shui Wai] [Source or Destination GeoIP City: Tin Shui Wai] [Source GeoIP Country: Hong Kong] [Source or Destination GeoIP Country: Hong Kong] [Source GeoIP ISO Two Letter Country Code: HK] [Source or Destination GeoIP ISO Two Letter Country Code: HK] [Source GeoIP AS Number: 3491] [Source or Destination GeoIP AS Number: 3491] [Source GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source or Destination GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source GeoIP Latitude: 22.4489] [Source or Destination GeoIP Latitude: 22.4489] [Source GeoIP Longitude: 113.9984] [Source or Destination GeoIP Longitude: 113.9984] [Stream index: 40] Transmission Control Protocol, Src Port: 80, Dst Port: 49191, Seq: 49085, Ack: 721, Len: 1352 Source Port: 80 Destination Port: 49191 [Stream index: 76] [Stream Packet Number: 74] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1352] Sequence Number: 49085 (relative sequence number) Sequence Number (raw): 140065925 [Next Sequence Number: 50437 (relative sequence number)] Acknowledgment Number: 721 (relative ack number) Acknowledgment number (raw): 1078628267 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 980 [Calculated window size: 31360] [Window size scaling factor: 32] Checksum: 0x58ed [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 0.524499000 seconds] [Time since previous frame in this TCP stream: 0.000164000 seconds] [SEQ/ACK analysis] [iRTT: 0.081545000 seconds] [Bytes in flight: 4056] [Bytes sent since last PSH flag: 40560] TCP payload (1352 bytes) Hypertext Transfer Protocol File Data: 1352 bytes Data (1352 bytes) 0000 68 b2 b8 f6 d0 fb 8a 48 a4 55 96 6a 96 37 a4 b6 h......H.U.j.7.. 0010 18 8b 07 e2 f2 85 a4 d9 cd 12 b5 42 be 09 e9 37 ...........B...7 0020 ce cc 57 fb 7b 47 3f 3f 6c b5 75 92 5f 23 e2 da ..W.{G??l.u._#.. 0030 01 18 1f 55 58 e4 e9 86 1c 09 a1 cf 0a e5 ad 46 ...UX..........F 0040 6c cd 96 55 0f f8 ee 3c 94 c2 ea b1 70 e0 11 e3 l..U...<....p... 0050 4d 35 28 48 bb 5e 95 df c8 5b 2c 0e 7b e2 b2 50 M5(H.^...[,.{..P 0060 ac 5f 16 82 6d 05 ef ed c3 5a 18 0a e0 3b 76 1f ._..m....Z...;v. 0070 19 6c cc e0 d0 ee 0c 3d 3c 80 d2 c4 7d ca 16 1b .l.....=<...}... 0080 36 13 bc 42 b6 07 a2 af 83 ea 2f e9 03 06 19 37 6..B....../....7 0090 74 d2 93 3b 98 e2 7a 2e e8 bb 21 e6 27 01 59 cf t..;..z...!.'.Y. 00a0 5c 8f 94 13 92 e3 ba 97 07 5e 44 20 9a 77 ed a8 \........^D .w.. 00b0 ab 77 45 db d5 b0 0b b7 45 52 c9 16 f9 50 67 64 .wE.....ER...Pgd 00c0 d0 1d 37 c8 5d 20 e1 be bc 32 4f 87 52 0c cf 48 ..7.] ...2O.R..H 00d0 5e d2 38 66 c3 6b 9b 03 15 0c c4 62 7e ec b5 37 ^.8f.k.....b~..7 00e0 05 98 70 97 84 5b 62 0b 45 6e 0e 80 58 6c 23 9d ..p..[b.En..Xl#. 00f0 5f e8 76 f8 28 17 dc 50 a1 8b 1b 79 57 5f 82 48 _.v.(..P...yW_.H 0100 c5 8c a7 29 69 54 f9 de 28 c8 dd f4 a8 58 a6 81 ...)iT..(....X.. 0110 3a 2c a1 9d 3b c2 bf 9a e1 75 60 1c 2e 9b a7 33 :,..;....u`....3 0120 e8 7b 40 52 3e 89 07 eb de 35 83 dc 13 82 04 4c .{@R>....5.....L 0130 b2 b7 bb 68 77 c6 bf f0 f6 39 f4 3e 5a a8 22 23 ...hw....9.>Z."# 0140 5a 87 7e 82 08 d4 88 a1 68 bf 58 20 a7 86 4a 29 Z.~.....h.X ..J) 0150 fd 14 6a 5c 26 85 b8 81 0a 8a de 97 b3 43 54 95 ..j\&........CT. 0160 b3 9e ba cb 2c a4 f0 92 83 d2 98 18 74 11 e4 68 ....,.......t..h 0170 57 46 35 5c fc f2 a8 87 bc eb 17 ee 01 23 a7 f8 WF5\.........#.. 0180 7c 5b c0 ca cb ef 3c 96 26 00 d1 c6 fe 21 74 37 |[....<.&....!t7 0190 ad 72 36 e1 be 7a fa 75 af 3c b3 18 c4 b6 5b 77 .r6..z.u.<....[w 01a0 cb 93 51 ac 60 4a c8 42 10 e9 3d 20 6f 7c 14 a0 ..Q.`J.B..= o|.. 01b0 b7 fa 8f 49 22 88 20 32 04 ce dd e9 a0 6b ba 10 ...I". 2.....k.. 01c0 08 9f 6e f6 1d c8 b3 32 ce 68 f0 e3 af d7 c4 46 ..n....2.h.....F 01d0 3a e8 88 cb f7 86 36 88 f6 44 b2 02 6e 6c 0c bf :.....6..D..nl.. 01e0 11 ba 25 0c e8 9e 00 84 50 69 88 89 b4 85 31 34 ..%.....Pi....14 01f0 e6 04 c9 37 a2 98 d1 28 e1 a1 5e a5 67 89 f5 f5 ...7...(..^.g... 0200 82 35 19 4d 38 5f df e2 d2 7c 5c 69 54 80 11 0a .5.M8_...|\iT... 0210 ec 29 46 1a 1c 5b be 55 06 74 2c d8 a6 43 41 96 .)F..[.U.t,..CA. 0220 a7 a8 a5 a3 bb fc d2 70 93 d0 42 b2 64 5f 29 a3 .......p..B.d_). 0230 94 d7 2a f5 05 ad 26 0e 6a c4 c7 da a3 e9 a8 bc ..*...&.j....... 0240 85 e1 51 31 b7 54 49 ed 4b cd fd 5d 6b 09 bb 61 ..Q1.TI.K..]k..a 0250 f9 66 07 df d7 13 2f d0 76 c4 e9 2c 9e 8a 6b 1b .f..../.v..,..k. 0260 0e cb 50 0f a6 1a 8d f4 c9 8e d0 dd 04 cd 75 77 ..P...........uw 0270 80 a9 34 5b 81 c7 ed 12 33 ef 7e 21 b6 6f 42 37 ..4[....3.~!.oB7 0280 7e c5 4c 46 cb 10 66 5c 8d fd a2 71 c1 b8 1b 74 ~.LF..f\...q...t 0290 f2 06 74 4d 16 5e b2 c6 50 16 14 6b a6 85 d2 e7 ..tM.^..P..k.... 02a0 20 a6 97 1a 17 76 49 76 70 a9 be 76 c0 27 52 98 ....vIvp..v.'R. 02b0 53 a7 8a d9 50 35 15 b0 cd 65 d7 9f dd 09 e1 2e S...P5...e...... 02c0 19 29 16 ab 1f e2 6d ea d5 a2 84 66 87 2d fd 22 .)....m....f.-." 02d0 92 87 58 ee 0d f6 72 29 e6 81 15 a4 e9 28 f6 35 ..X...r).....(.5 02e0 0f a2 21 ed 69 21 4c 17 39 a9 d0 cf 0d 2c b6 3e ..!.i!L.9....,.> 02f0 75 7c 44 df 9c f2 08 b2 43 9a 12 09 9c 94 bd c3 u|D.....C....... 0300 01 f1 49 14 a5 48 a4 2b b6 21 46 8e a0 20 8c f1 ..I..H.+.!F.. .. 0310 7c fc e9 7b 01 fe 08 47 6f 03 06 cb 23 d1 6d c5 |..{...Go...#.m. 0320 95 83 c7 4a 9f 8f ba 0b b3 79 a0 df 2e 26 4d 4d ...J.....y...&MM 0330 9b 5c f7 49 6f 7e 20 ab a1 9f 28 52 05 d0 17 5b .\.Io~ ...(R...[ 0340 0b 0a 64 14 f9 33 e1 6d 13 21 80 25 6c 03 8d 94 ..d..3.m.!.%l... 0350 50 c0 c9 c7 4e 80 57 e8 35 87 16 6b 18 81 77 7d P...N.W.5..k..w} 0360 43 9c a2 98 2f ce 75 51 9a a8 76 8a ea 1f ac 1b C.../.uQ..v..... 0370 72 35 ba ef 28 65 6a ce 5a f9 81 7c 60 5b 49 f6 r5..(ej.Z..|`[I. 0380 2c 86 aa c4 a6 d3 98 af b7 47 f3 b4 3f 87 49 65 ,........G..?.Ie 0390 60 39 d3 08 c5 6b ee 0d 92 d3 c4 c5 a2 85 17 b3 `9...k.......... 03a0 9b 5f 4e 61 07 8e 29 88 7c 26 d1 49 0c f4 85 71 ._Na..).|&.I...q 03b0 2d 7e a3 37 4f 22 9c c0 03 79 9c 6a e2 37 fa fd -~.7O"...y.j.7.. 03c0 e3 a4 13 43 c7 9e a4 9f 18 3a f1 0c 22 0a 51 f2 ...C.....:..".Q. 03d0 ca 45 1e 99 79 f5 93 7a 3b be 77 f7 b8 fe 30 be .E..y..z;.w...0. 03e0 7f 37 a1 ef e1 dd 87 2d f8 4f 3a c3 f3 2f 00 6a .7.....-.O:../.j 03f0 50 7f 74 b7 6f dc 8a f0 ea 71 fd de dd a8 de de P.t.o....q...... 0400 bc 1b 2a d0 b9 8f de 99 78 48 3a ed 0b 94 69 64 ..*.....xH:...id 0410 70 1a 04 23 e3 76 f5 79 b0 ca 35 d6 99 46 6a 2f p..#.v.y..5..Fj/ 0420 0c 28 e9 ea 6e 96 9e 4e 22 bb d1 be eb 3b 77 1b .(..n..N"....;w. 0430 6d 57 8b d3 7b ff 5b b0 f2 58 8b 8f 2c 55 ed 74 mW..{.[..X..,U.t 0440 1e 8a fb 63 38 3c 56 dd ca 2f 22 b4 68 f9 35 d0 ...c8bXJ......= 04b0 0b 6c dd 98 4f ad 17 69 f0 03 bb 7c d8 0c d1 6c .l..O..i...|...l 04c0 19 ef ed 79 36 ee 1c 8b 05 ed 10 41 4e a7 dd 0c ...y6......AN... 04d0 e9 a6 46 b7 1b 51 1e c0 3b fb 24 a0 92 73 44 0a ..F..Q..;.$..sD. 04e0 a8 34 58 c7 c5 4b 7a 44 4d d0 b1 12 c7 49 33 45 .4X..KzDM....I3E 04f0 9f 16 cf f5 01 6f 3f b8 db d0 07 57 73 c3 f8 0d .....o?....Ws... 0500 ea 2c c7 6d a3 fd 40 b7 62 37 db 2c 8e 83 b9 e3 .,.m..@.b7.,.... 0510 49 5c 09 fa 91 66 ee 71 43 dd 2f 2c ef b7 dd c0 I\...f.qC./,.... 0520 83 01 7d 8f 9c be ab 7c c7 04 ce e3 f6 43 a2 71 ..}....|.....C.q 0530 30 26 c0 88 ad 69 76 54 eb eb 21 31 50 d0 16 b2 0&...ivT..!1P... 0540 9c 90 8b 40 ba c1 64 1a ...@..d. Data […]: 68b2b8f6d0fb8a48a455966a9637a4b6188b07e2f285a4d9cd12b542be09e937cecc57fb7b473f3f6cb575925f23e2da01181f5558e4e9861c09a1cf0ae5ad466ccd96550ff8ee3c94c2eab170e011e34d352848bb5e95dfc85b2c0e7be2b250ac5f16826d05efedc35a180ae03b761f196 [Length: 1352]