Frame 11819: 1406 bytes on wire (11248 bits), 1406 bytes captured (11248 bits) Encapsulation type: Ethernet (1) Arrival Time: Jul 22, 2017 02:51:06.875572000 UTC UTC Arrival Time: Jul 22, 2017 02:51:06.875572000 UTC Epoch Arrival Time: 1500691866.875572000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000117000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 452.350223000 seconds] Frame Number: 11819 Frame Length: 1406 bytes (11248 bits) Capture Length: 1406 bytes (11248 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) Destination: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 3] Internet Protocol Version 4, Src: 63.217.21.41, Dst: 172.16.45.52 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1392 Identification: 0xbe9e (48798) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 59 Protocol: TCP (6) Header Checksum: 0xdd08 [validation disabled] [Header checksum status: Unverified] Source Address: 63.217.21.41 Destination Address: 172.16.45.52 [Source GeoIP: Tin Shui Wai, HK, ASN 3491, CONSOLE-CONNECT-ASN] [Source GeoIP City: Tin Shui Wai] [Source or Destination GeoIP City: Tin Shui Wai] [Source GeoIP Country: Hong Kong] [Source or Destination GeoIP Country: Hong Kong] [Source GeoIP ISO Two Letter Country Code: HK] [Source or Destination GeoIP ISO Two Letter Country Code: HK] [Source GeoIP AS Number: 3491] [Source or Destination GeoIP AS Number: 3491] [Source GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source or Destination GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source GeoIP Latitude: 22.4489] [Source or Destination GeoIP Latitude: 22.4489] [Source GeoIP Longitude: 113.9984] [Source or Destination GeoIP Longitude: 113.9984] [Stream index: 40] Transmission Control Protocol, Src Port: 80, Dst Port: 49192, Seq: 105461, Ack: 632, Len: 1352 Source Port: 80 Destination Port: 49192 [Stream index: 77] [Stream Packet Number: 118] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1352] Sequence Number: 105461 (relative sequence number) Sequence Number (raw): 2762684745 [Next Sequence Number: 106813 (relative sequence number)] Acknowledgment Number: 632 (relative ack number) Acknowledgment number (raw): 3518730577 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 980 [Calculated window size: 31360] [Window size scaling factor: 32] Checksum: 0x7723 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 0.617528000 seconds] [Time since previous frame in this TCP stream: 0.000117000 seconds] [SEQ/ACK analysis] [iRTT: 0.081306000 seconds] [Bytes in flight: 33800] [Bytes sent since last PSH flag: 35152] TCP payload (1352 bytes) Hypertext Transfer Protocol File Data: 1352 bytes Data (1352 bytes) 0000 28 a7 3a 26 76 e7 c8 ef c7 47 5f 8f ce d6 d4 8e (.:&v....G_..... 0010 10 0f 72 ac b5 08 0f e3 9b c6 87 0f f0 30 8d a7 ..r..........0.. 0020 a9 2c b0 00 e9 fe 77 27 01 a5 62 d5 f6 a9 4b 0e .,....w'..b...K. 0030 a9 67 06 87 01 bf 5d e4 d8 3b dc a3 f7 ef 21 e3 .g....]..;....!. 0040 5f 7e 6f df cf db fc 7c db ef 1c fd 78 d6 3e 88 _~o....|....x.>. 0050 b6 0f 1f 9c b5 ce 8e ce 0e cf fc b3 e0 ec 78 10 ..............x. 0060 04 ed c3 e3 d1 84 79 c1 fa f9 a7 73 da 0f 55 92 ......y....s..U. 0070 70 d1 a7 01 36 a7 53 30 d0 34 dd 32 3e 8e 32 31 p...6.S0.4.2>.21 0080 40 b1 d1 f3 13 b8 8a 1c fe de cf fb f7 06 03 d1 @............... 0090 da 43 13 7e 6a 4c 43 ac 75 b8 47 02 55 8a b8 1b .C.~jLC.u.G.U... 00a0 fe ef 46 09 3e 24 62 ad 2b 82 fc 2c 51 7d 6a 3e ..F.>$b.+..,Q}j> 00b0 90 8e db d7 3d 28 9b 45 28 bf 82 b2 33 c5 74 96 ....=(.E(...3.t. 00c0 f0 7b 80 ce f2 68 c1 5d 5d 73 1c 60 a2 24 b4 b8 .{...h.]]s.`.$.. 00d0 ae 8f 4d 7e e1 8b 91 76 a3 62 d6 47 bb f3 d5 f5 ..M~...v.b.G.... 00e0 41 11 34 3a 44 b0 68 1b 3b 06 0e 72 5a dc 96 e2 A.4:D.h.;..rZ... 00f0 37 bd 7c fd dc ab 3d d4 d1 79 1c 14 a7 5e 91 23 7.|...=..y...^.# 0100 ea 17 d7 83 90 3e a3 91 eb 9c 42 94 93 9b 4d 1f .....>....B...M. 0110 e0 8e 42 b3 19 4c 05 ce a4 db 85 bd 45 c4 9a 43 ..B..L......E..C 0120 2a 82 a8 20 3d d3 17 ed eb 78 35 2f df 41 a6 e5 *.. =....x5/.A.. 0130 02 d8 27 8d 48 3e d5 31 db db 2c f6 8a b2 f6 3d ..'.H>.1..,....= 0140 b6 6d 2e 3e be dd 5e b5 3f af e3 a2 8e 88 9d e9 .m.>..^.?....... 0150 7e 7d bb c5 9d c0 36 f7 c0 1c 4e 43 fe 7b 3a 26 ~}....6...NC.{:& 0160 9a 07 bd 86 31 7c d0 2b b7 cd 18 e2 ef 2e e7 30 ....1|.+.......0 0170 36 f9 03 75 cf 11 35 eb 61 ce e7 73 57 80 ff 9d 6..u..5.a..sW... 0180 be 9c 8d fc 0c 07 54 a3 a0 7b d5 36 e0 df f2 0e ......T..{.6.... 0190 51 8e 24 ae 2c 5b 21 44 7d a2 98 88 09 93 46 99 Q.$.,[!D}.....F. 01a0 5e b5 76 a5 33 d3 58 50 83 5f 19 24 0a a8 06 a9 ^.v.3.XP._.$.... 01b0 9e c8 af 69 5b ec 9f 1c da 9d 51 99 ab 7b c0 18 ...i[.....Q..{.. 01c0 91 10 4d 3f 63 35 dc 10 2d a3 2d 13 1b 39 09 f6 ..M?c5..-.-..9.. 01d0 7d 8f a5 b8 e3 f3 65 3e f2 98 55 b2 49 a3 c9 b0 }.....e>..U.I... 01e0 92 b2 9c 57 f3 ac af 46 2d 40 92 02 90 a0 e2 08 ...W...F-@...... 01f0 36 8e d7 cf 88 e0 5f ae 72 d9 04 c3 e3 e3 eb 6b 6....._.r......k 0200 31 68 6b 5f 7f df 5e ac 46 c7 ef df 1d 9f fe fe 1hk_..^.F....... 0210 fc e4 e4 78 28 19 ff eb 25 0a f5 94 77 d2 3e 81 ...x(...%...w.>. 0220 2b 3a 71 6f b4 83 ae 26 5e 8b 21 c4 61 b0 c6 88 +:qo...&^.!.a... 0230 c0 38 5d f0 89 10 ac 2f 13 12 2b fd 8e fa 11 99 .8]..../..+..... 0240 d7 97 cb 53 66 e0 22 c3 dc a1 b5 fa 01 9b df 69 ...Sf."........i 0250 3e ac 48 d6 56 6f d4 8d 8d 56 70 4e 99 07 07 ee >.H.Vo...VpN.... 0260 0b 07 07 fb 45 b1 38 8a 75 86 f2 46 6b d8 85 65 ....E.8.u..Fk..e 0270 0a 55 cc 2a 37 62 d3 8b 7b b7 ae 37 56 0d 2f ee .U.*7b..{..7V./. 0280 7e fa a6 5c bf 3b 2b b2 f3 9b 59 44 ee 0f 3d 85 ~..\.;+...YD..=. 0290 23 4f db 3b 3d a4 47 8a fe f7 a5 82 03 4f 32 45 #O.;=.G......O2E 02a0 45 56 4a 48 87 a3 e8 49 b9 e5 3c e5 a7 2d a2 f0 EVJH...I..<..-.. 02b0 78 d9 6b 3d 6b 79 03 cf 08 c2 90 aa e9 f2 32 fa x.k=ky........2. 02c0 9d fe 6e 18 96 ef b1 5a 97 6b ec 74 16 7f 72 83 ..n....Z.k.t..r. 02d0 cb e8 5a 59 61 a1 71 13 db fb 28 9e 81 b1 92 8b ..ZYa.q...(..... 02e0 1d 3e 49 2b f9 2e ca ca e6 a5 12 cc 75 b1 62 60 .>I+........u.b` 02f0 17 da ef af 64 79 e4 6b d6 d8 34 38 bb 56 32 e8 ....dy.k..48.V2. 0300 88 80 7c c3 e0 40 e6 c6 f7 7c 6c 8c c2 55 ed 75 ..|..@...|l..U.u 0310 da c4 58 05 3a 3c 8a 29 a1 57 6f 03 ac 3c 9c 32 ..X.:<.).Wo..<.2 0320 62 9b 77 47 34 66 f6 fa b7 4a fd 9a 4d a3 b8 15 b.wG4f...J..M... 0330 af 7f 6b 82 6f a1 e2 bf 63 c8 17 bd 95 30 9d 6a ..k.o...c....0.j 0340 60 71 be e3 e3 99 00 bc 92 21 29 9d 87 1c 57 96 `q.......!)...W. 0350 9d f4 93 9d 8c 38 5b 9e 32 20 65 f3 b7 1e f7 e3 .....8[.2 e..... 0360 01 b2 8a 64 88 41 6c 22 63 86 e3 10 c2 f4 ca 2a ...d.Al"c......* 0370 33 45 aa 82 c1 2b 0c c5 84 a6 ca ed bd c1 8e 47 3E...+.........G 0380 d7 48 9c a5 cf 73 a4 4f 6a de 3c 5b 37 04 1b 8d .H...s.Oj.<[7... 0390 cc 89 96 58 ab 49 be a8 3f e8 8e bb c1 98 a1 28 ...X.I..?......( 03a0 1c 45 92 e8 90 88 6e 02 61 22 5e 71 28 ed 35 22 .E....n.a"^q(.5" 03b0 69 67 62 b7 74 74 82 d0 6d 44 69 c7 d6 11 13 87 igb.tt..mDi..... 03c0 cb 38 ab 1e c7 ab 47 1b bf 10 d1 03 45 74 6a 3f .8....G.....Etj? 03d0 c2 76 c5 aa e2 82 36 1f ab 16 71 7c e2 f4 ea b1 .v....6...q|.... 03e0 57 9c 29 2d 69 9d d8 b8 ea 6c 70 33 2e 8c ec 15 W.)-i....lp3.... 03f0 e5 c4 e7 87 70 95 2a 3e 3f 74 df 1f d2 fb 38 70 ....p.*>?t....8p 0400 89 c6 b0 c5 05 38 2d 22 e0 e9 1b 25 5a 8e 04 d1 .....8-"...%Z... 0410 6c c4 e8 8b 3d 3d 9d 7a fd a5 5a 52 af b5 9c db l...==.z..ZR.... 0420 8e fa 19 0d 04 b4 8a 70 e4 b9 21 16 00 f7 cc 28 .......p..!....( 0430 64 82 8d 15 83 8a 9f dc 44 72 8a c4 5d 6b e2 17 d.......Dr..]k.. 0440 d9 c8 6c 3a 1d d3 a2 50 42 d5 38 63 66 c7 56 6c ..l:...PB.8cf.Vl 0450 77 23 16 45 36 e4 7b 8d 80 65 93 2b ee 3b 2d 3c w#.E6.{..e.+.;-< 0460 c2 6a 9f 3d 3d 39 f2 9d 9b d2 4d cb f7 d1 5b 55 .j.==9....M...[U 0470 79 27 fa 4d c5 0d 29 ae 53 71 1a a8 15 0d 9e 6b y'.M..).Sq.....k 0480 3c 19 97 ce fe 39 83 e3 33 b8 42 8c ea da 87 b2 <....9..3.B..... 0490 da 87 72 d3 41 2b a2 90 ff b4 2b d4 32 7b b5 39 ..r.A+....+.2{.9 04a0 ee c7 d8 9e df d3 22 85 6a b2 98 ea 45 54 5d a8 ......".j...ET]. 04b0 4c 75 dc 18 88 9d 0a 32 27 9b bc 9c 74 75 9c 59 Lu.....2'...tu.Y 04c0 9a 0a 13 a3 0d 19 3f 1c f1 02 9f c0 46 3b 8d 9c ......?.....F;.. 04d0 55 eb eb 49 ad 63 01 0e 19 77 95 d6 a6 da 47 d8 U..I.c...w....G. 04e0 ac 32 49 62 b7 49 ff 3c 72 09 0c ec 2e 19 6d 30 .2Ib.I.