Frame 11809: 1406 bytes on wire (11248 bits), 1406 bytes captured (11248 bits) Encapsulation type: Ethernet (1) Arrival Time: Jul 22, 2017 02:51:06.874580000 UTC UTC Arrival Time: Jul 22, 2017 02:51:06.874580000 UTC Epoch Arrival Time: 1500691866.874580000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000111000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 452.349231000 seconds] Frame Number: 11809 Frame Length: 1406 bytes (11248 bits) Capture Length: 1406 bytes (11248 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) Destination: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 3] Internet Protocol Version 4, Src: 63.217.21.41, Dst: 172.16.45.52 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1392 Identification: 0xbe98 (48792) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 59 Protocol: TCP (6) Header Checksum: 0xdd0e [validation disabled] [Header checksum status: Unverified] Source Address: 63.217.21.41 Destination Address: 172.16.45.52 [Source GeoIP: Tin Shui Wai, HK, ASN 3491, CONSOLE-CONNECT-ASN] [Source GeoIP City: Tin Shui Wai] [Source or Destination GeoIP City: Tin Shui Wai] [Source GeoIP Country: Hong Kong] [Source or Destination GeoIP Country: Hong Kong] [Source GeoIP ISO Two Letter Country Code: HK] [Source or Destination GeoIP ISO Two Letter Country Code: HK] [Source GeoIP AS Number: 3491] [Source or Destination GeoIP AS Number: 3491] [Source GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source or Destination GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source GeoIP Latitude: 22.4489] [Source or Destination GeoIP Latitude: 22.4489] [Source GeoIP Longitude: 113.9984] [Source or Destination GeoIP Longitude: 113.9984] [Stream index: 40] Transmission Control Protocol, Src Port: 80, Dst Port: 49192, Seq: 97349, Ack: 632, Len: 1352 Source Port: 80 Destination Port: 49192 [Stream index: 77] [Stream Packet Number: 109] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1352] Sequence Number: 97349 (relative sequence number) Sequence Number (raw): 2762676633 [Next Sequence Number: 98701 (relative sequence number)] Acknowledgment Number: 632 (relative ack number) Acknowledgment number (raw): 3518730577 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 980 [Calculated window size: 31360] [Window size scaling factor: 32] Checksum: 0xc4e6 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 0.616536000 seconds] [Time since previous frame in this TCP stream: 0.000111000 seconds] [SEQ/ACK analysis] [iRTT: 0.081306000 seconds] [TCP Analysis Flags] [Expert Info (Warning/Sequence): Previous segment(s) not captured (common at capture start)] [Previous segment(s) not captured (common at capture start)] [Severity level: Warning] [Group: Sequence] TCP payload (1352 bytes) Hypertext Transfer Protocol File Data: 1352 bytes Data (1352 bytes) 0000 5a 6f 16 2b 2c ee 76 eb 88 67 de 9a 5a c7 6b 1c Zo.+,.v..g..Z.k. 0010 cb 7d 7b 3d c9 18 9f 96 be f8 b3 7e fd f9 d3 f7 .}{=.......~.... 0020 db 17 4f 1f 3d e1 50 af 0c 0c 77 7c 76 7c ac 5e ..O.=.P...w|v|.^ 0030 71 f8 e5 d7 fc f7 d7 24 f2 0e 8f 3d 20 b1 11 51 q......$...= ..Q 0040 f3 bd 43 da ec df 34 98 21 c5 34 ab de 24 7c 98 ..C...4.!.4..$|. 0050 19 dd c8 6f c9 22 26 05 48 46 d8 51 88 35 f4 7a ...o."&.HF.Q.5.z 0060 91 4d 86 13 62 eb 20 e5 6c e2 11 47 f9 39 8f 6f .M..b. .l..G.9.o 0070 4e f3 cd 86 68 e9 3a bc bd 5c 4d 43 53 0a b3 83 N...h.:..\MCS... 0080 1e 55 d5 23 96 f0 15 d1 fb 69 f8 52 4f 9b 9b 44 .U.#.....i.RO..D 0090 1c 38 d2 05 71 af 3a 62 10 e0 3d 57 0b ec 2f 8c .8..q.:b..=W../. 00a0 86 86 58 e9 eb 2f f3 54 23 75 e3 44 4f d0 a7 c1 ..X../.T#u.DO... 00b0 4b 4f 64 f3 38 be 39 ba be be 3e a2 05 3e 3b a2 KOd.8.9...>..>;. 00c0 2f 0b bd c9 ba 60 8c 56 f0 27 fc f0 fe d9 d1 bf /....`.V.'...... 00d0 3c 8e 9c bc dc 68 e7 8d 5f 13 01 05 13 aa bf 04 <....h.._....... 00e0 79 f1 04 47 48 52 70 e9 a9 1b dc 97 be 34 9b aa y..GHRp......4.. 00f0 3d bb 51 a8 f3 35 a3 1f 38 19 90 a2 73 20 e8 98 =.Q..5..8...s .. 0100 c6 78 db 99 ba d3 d7 51 e6 f1 59 42 3f 67 c9 b1 .x.....Q..YB?g.. 0110 7c 92 6e f1 7b 2c e5 d1 1d 7e e9 29 4e bc d6 44 |.n.{,...~.)N..D 0120 32 69 a7 9a e4 d3 4c bf ec 99 44 da 48 3c dd 0a 2i....L...D.H<.. 0130 93 04 9c 0b 53 2d 93 f6 f3 e9 9b 5f a5 06 c4 6f ....S-....._...o 0140 6d b4 fb 0a 57 d1 0b 65 f7 93 bd 6f 8f db cc a8 m...W..e...o.... 0150 ae 7c 8b 52 bc 10 6f cb 6e a9 93 d1 f0 d0 d9 9a .|.R..o.n....... 0160 89 6b 22 4e e8 8d 28 be 64 e8 cd 58 dd 00 b0 60 .k"N..(.d..X...` 0170 67 27 c7 e5 1d 36 14 49 ef a3 ff 91 52 60 e2 e4 g'...6.I....R`.. 0180 4c 23 28 8c c2 8f 7e 25 95 f1 dc 90 50 80 19 7e L#(...~%....P..~ 0190 f0 5f d1 66 8a b4 f7 ab 78 4e 8d 5e 6d 28 ed b5 ._.f....xN.^m(.. 01a0 4e 2b e9 70 1c cc 18 6d d9 af c6 42 8a ce 39 9e N+.p...m...B..9. 01b0 cd a5 ba 52 d7 51 da bd 40 a0 1d 58 3d 4f 70 c4 ...R.Q..@..X=Op. 01c0 5f 32 fa 9b c0 5b 54 cb 4e a3 68 8c 63 0d 75 d3 _2...[T.N.h.c.u. 01d0 c6 59 f6 97 d3 0d 2d a9 28 21 86 f8 3e 2d 95 73 .Y....-.(!..>-.s 01e0 ba 8a ee 75 3a 24 4d 3e f8 be d3 d9 6e bf ef dc ...u:$M>....n... 01f0 87 05 92 82 ea f2 32 fa c3 5f a8 1b 76 54 bf 8c ......2.._..vT.. 0200 fe a4 eb 4b ba 3b 0f d4 79 cf 5f b4 27 43 b3 c6 ...K.;..y._.'C.. 0210 28 eb 55 74 03 22 f4 4e 0f e7 0b fa 12 d1 76 ef (.Ut.".N......v. 0220 15 ad c4 23 93 8d 56 f5 95 c0 22 b9 0b 14 91 03 ...#..V..."..... 0230 af e8 49 73 01 58 ba c5 7b b8 93 fc 81 ba 27 15 ..Is.X..{.....'. 0240 a5 a6 81 ba 40 a1 bb 10 c8 f0 eb c8 9b 2f f4 54 ....@......../.T 0250 f6 42 dd 1e 49 dd cc 4c 55 42 ff 3a ba 84 05 eb .B..I..LUB.:.... 0260 26 57 33 ba e2 18 1a 73 ba 60 3e 88 ba 65 7f 1e &W3....s.`>..e.. 0270 10 d7 38 8f ae 15 cc e2 af a9 ab a9 04 e1 9b 54 ..8............T 0280 c2 a7 c5 49 d4 41 68 77 b6 83 dd 5c c2 29 d5 5c ...I.Ahw...\.).\ 0290 32 90 8b 9f 6e b7 d7 c4 5c d0 4c ef ad 4a e1 34 2...n...\.L..J.4 02a0 97 aa 3f 53 d7 ea 66 10 84 78 00 7e c1 a4 df 50 ..?S..f..x.~...P 02b0 3a 89 d3 b6 24 c0 f1 fa 9b 40 59 1d d0 f4 e0 e0 :...$....@Y..... 02c0 b3 15 58 ce 7b 1e cf ba 4b 66 75 bd 90 ef 9e 4a ..X.{...Kfu....J 02d0 1d a9 a8 05 7d 79 16 a2 b8 35 87 95 75 3e 02 a5 ....}y...5..u>.. 02e0 10 35 a1 28 8a 5f 7d ac bd 6b e4 6d ca 73 74 84 .5.(._}..k.m.st. 02f0 89 cd 64 55 98 c4 92 9c 29 1f df 2c 58 4f bd 6b ..dU....)..,XO.k 0300 52 a2 d5 30 51 53 0e 12 e3 80 33 94 03 35 45 c5 R..0QS....3..5E. 0310 3a ba 5c c2 53 25 0d d4 92 c6 55 2f d4 ed 76 a1 :.\.S%....U/..v. 0320 3e 17 b7 54 fe d2 71 68 5c 6a 76 8c a3 37 2e f9 >..T..qh\jv..7.. 0330 54 55 14 a5 ab 4a 0c d4 35 ee ef 0a 82 4b 5d bd TU...J..5....K]. 0340 70 3a 9f b5 64 97 d8 a4 ae f0 87 e6 80 d8 13 23 p:..d..........# 0350 20 df 4d 74 5b ac a8 90 63 4e 94 a7 6f 83 3f 29 .Mt[...cN..o.?) 0360 71 91 17 a2 4b 1b 4b 58 19 f8 00 26 d1 8b 44 3c q...K.KX...&..D< 0370 ed 46 88 0a d3 4f ea 68 6b 51 d2 bf 87 83 d7 71 .F...O.hkQ.....q 0380 3f ae 3c d9 95 d8 91 44 d8 91 64 87 da 3c 9a 4e ?.<....D..d..<.N 0390 cb 15 5a 37 70 76 17 da 36 8d 4f 0e de 89 7d 76 ..Z7pv..6.O...}v 03a0 ad fa 0e 21 94 ef 5c b0 bf c7 55 ad 36 0d 49 08 ...!..\...U.6.I. 03b0 7f 7a 09 23 7b 7d 6a bb 53 90 a9 57 93 2c 7f 4d .z.#{}j.S..W.,.M 03c0 d4 8a 37 ca 3b 35 e9 f8 cc a2 3d d3 f9 a2 d8 94 ..7.;5....=..... 03d0 50 0c 50 73 1f c7 01 77 f4 4d 3b 9e 5e c7 5f d6 P.Ps...w.M;.^._. 03e0 7e dc 37 2b ca 75 c1 49 34 fa 2f 44 de fe 86 0d ~.7+.u.I4./D.... 03f0 ef e9 4f c9 e7 9a c8 78 02 52 dd 60 7b 44 cb db ..O....x.R.`{D.. 0400 81 7a ce db 9c 11 a7 28 99 df 31 27 d4 3b 96 1b .z.....(..1'.;.. 0410 56 36 6e ed 0d 54 d6 b4 fb 44 3e 14 04 7c b9 dd V6n..T...D>..|.. 0420 6a 26 04 b4 a2 38 fa fa 85 c8 49 c1 79 b4 bc e3 j&...8....I.y... 0430 63 0f ef b2 5a 2f 6d cf f2 cd 78 91 c1 33 40 62 c...Z/m...x..3@b 0440 d8 2c 6c 8a 64 a1 9c a0 68 e8 b4 75 e4 17 37 44 .,l.d...h..u..7D 0450 2d 89 b9 2a 0f 50 2d bc 99 74 3d 2d b3 d5 82 18 -..*.P-..t=-.... 0460 9c c5 8c d8 8e e0 f6 bc 99 1d 83 e8 7a 2e 1c 19 ............z... 0470 b7 46 e9 1b f9 51 a5 42 a2 37 95 06 b5 c0 cc 2d .F...Q.B.7.....- 0480 d6 9b 7d ca 5e 7e 70 ce e9 5a c4 fd 12 dc 96 cb ..}.^~p..Z...... 0490 c1 7e 4d dd 2a cd 3a 38 58 b4 1d 66 ac b0 c0 b0 .~M.*.:8X..f.... 04a0 c2 b6 c9 a7 5f 88 ac 34 24 f7 e8 55 9c 38 61 78 ...._..4$..U.8ax 04b0 e1 61 a0 7e a7 ad 9a 88 67 aa 68 b4 2e 8c a0 7e .a.~....g.h....~ 04c0 d3 2d b4 e8 f8 a4 70 82 a0 a2 1d c1 11 11 32 d9 .-....p.......2. 04d0 6a d5 a3 27 1a 42 19 af 36 c5 18 ca 0f 8d c4 87 j..'.B..6....... 04e0 e5 d2 8c 04 3d 83 d9 81 06 aa dc ff 59 73 a0 92 ....=.......Ys.. 04f0 15 86 18 dc c5 76 8a 3c e3 e3 da d2 4b bd 3b fa .....v.<....K.;. 0500 84 e1 74 34 e1 14 e6 54 82 d1 d9 13 93 ff c8 a9 ..t4...T........ 0510 32 c0 89 ee 40 f9 b1 f5 78 4a f5 68 79 b2 5d 4a 2...@...xJ.hy.]J 0520 0d 25 d6 cf d0 46 18 b2 23 30 6c 45 fe 57 dd ac .%...F..#0lE.W.. 0530 61 d0 23 39 36 f4 7a 5e d0 d2 23 a1 8d 49 e5 0e a.#96.z^..#..I.. 0540 af a5 24 40 e7 06 49 7b ..$@..I{ Data […]: 5a6f162b2cee76eb8867de9a5ac76b1ccb7d7b3dc9189f96bef8b37efdf9d3f7db174f1f3de150af0c0c777c767cac5e71f8e5d7fcf7d724f20e8f3d20b11151f3bd43daecdf349821c534abde247c9819ddc86fc92226054846d8518835f47a914d861362eb20e56ce21147f9398f6f4ef [Length: 1352]