Frame 13624: 1406 bytes on wire (11248 bits), 1406 bytes captured (11248 bits) Encapsulation type: Ethernet (1) Arrival Time: Jul 22, 2017 02:51:07.787160000 UTC UTC Arrival Time: Jul 22, 2017 02:51:07.787160000 UTC Epoch Arrival Time: 1500691867.787160000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000128000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 453.261811000 seconds] Frame Number: 13624 Frame Length: 1406 bytes (11248 bits) Capture Length: 1406 bytes (11248 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) Destination: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 3] Internet Protocol Version 4, Src: 184.25.56.229, Dst: 172.16.45.52 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1392 Identification: 0x894d (35149) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 57 Protocol: TCP (6) Header Checksum: 0x785d [validation disabled] [Header checksum status: Unverified] Source Address: 184.25.56.229 Destination Address: 172.16.45.52 [Source GeoIP: San Jose, US, ASN 20940, Akamai International B.V.] [Source GeoIP City: San Jose] [Source or Destination GeoIP City: San Jose] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP AS Number: 20940] [Source or Destination GeoIP AS Number: 20940] [Source GeoIP AS Organization: Akamai International B.V.] [Source or Destination GeoIP AS Organization: Akamai International B.V.] [Source GeoIP Latitude: 37.3388] [Source or Destination GeoIP Latitude: 37.3388] [Source GeoIP Longitude: -121.8916] [Source or Destination GeoIP Longitude: -121.8916] [Stream index: 42] Transmission Control Protocol, Src Port: 80, Dst Port: 49202, Seq: 251604, Ack: 733, Len: 1352 Source Port: 80 Destination Port: 49202 [Stream index: 86] [Stream Packet Number: 378] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1352] Sequence Number: 251604 (relative sequence number) Sequence Number (raw): 2807018607 [Next Sequence Number: 252956 (relative sequence number)] Acknowledgment Number: 733 (relative ack number) Acknowledgment number (raw): 2098305548 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 980 [Calculated window size: 31360] [Window size scaling factor: 32] Checksum: 0x476e [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 1.028802000 seconds] [Time since previous frame in this TCP stream: 0.000128000 seconds] [SEQ/ACK analysis] [iRTT: 0.081961000 seconds] [Bytes in flight: 2704] [Bytes sent since last PSH flag: 81120] TCP payload (1352 bytes) Hypertext Transfer Protocol File Data: 1352 bytes Data (1352 bytes) 0000 70 a1 87 2c 3d a6 cc 78 d4 f2 08 84 f6 2e 4a 01 p..,=..x......J. 0010 7f fa 55 50 bb 35 9a f6 22 b5 11 26 1b 1b 69 e1 ..UP.5.."..&..i. 0020 4e 42 ed ba f1 3a 54 99 95 c7 c3 42 29 95 82 8b NB...:T....B)... 0030 0d 6d 54 58 8e 26 ec 9f 75 85 ff 00 7d 10 4a a7 .mTX.&..u...}.J. 0040 6c 4c 2e c0 5a e2 a3 10 06 32 4e ab 43 0a d2 3f lL..Z....2N.C..? 0050 e5 9b 11 ad b9 9a c5 16 cb 63 c7 28 59 41 65 2b .........c.(YAe+ 0060 c2 fc 0d 51 66 63 25 d6 ec 97 e5 c6 d5 39 37 4c ...Qfc%......97L 0070 80 26 8e bf 31 34 3c 79 26 c5 9c 4c ba db 46 53 .&..14..G8. 00a0 63 f7 1b a7 c2 b2 c8 01 76 83 a0 27 69 1d 29 3a c.......v..'i.): 00b0 fa 05 99 b2 1a 32 ef 11 d1 f4 63 55 89 52 03 53 .....2....cU.R.S 00c0 97 71 1e 8b f9 6b a3 37 2a 86 9b 47 25 e5 5a 90 .q...k.7*..G%.Z. 00d0 a1 82 77 5f d6 a4 54 12 4f 4a 89 d4 9b 0a 45 93 ..w_..T.OJ....E. 00e0 69 dc 0e ee 44 56 a2 20 54 91 fc 15 34 50 b1 82 i...DV. T...4P.. 00f0 75 66 d6 dd 28 77 37 1f ba 8a b7 07 87 c6 ae 44 uf..(w7........D 0100 37 0e 27 53 51 dd a5 4a 40 37 12 79 d3 cb 10 8f 7.'SQ..J@7.y.... 0110 69 0c 18 30 be 9c bd 2a e4 08 0a 95 81 d0 d2 b1 i..0...*........ 0120 a7 6d 00 a0 96 fb 85 1f 87 85 28 d7 79 6d 2e 46 .m........(.ym.F 0130 b4 33 c2 a7 0b ed f8 f3 a0 27 64 6c 3b b4 24 d3 .3.......'dl;.$. 0140 82 02 15 53 aa f0 a4 58 39 24 b6 9d 28 7d c5 0f ...S...X9$..(}.. 0150 a0 b2 da b2 24 ca ea 14 27 06 1a d1 f7 c5 db b3 ....$...'....... 0160 a6 e6 b5 85 cd ac 68 31 48 d6 20 f0 e4 6a 21 b7 ......h1H. ..j!. 0170 13 b8 de 80 64 b2 e8 7e ca 75 52 f7 eb 53 60 85 ....d..~.uR..S`. 0180 86 ee 03 85 21 22 82 48 1c 74 15 44 0a b2 a5 ce ....!".H.t.D.... 0190 86 a5 15 c3 06 e9 ad 27 2d b6 c7 51 d6 93 36 cf .......'-..Q..6. 01a0 81 a0 2e 41 df 6b 1d 38 9f 8d 01 6d f0 23 9d 14 ...A.k.8...m.#.. 01b0 91 24 22 df 32 d0 ac 36 de fa f4 a0 29 05 42 95 .$".2..6....).B. 01c0 d6 8e 23 b0 0d 6d 07 b8 8e b4 14 1b 80 b7 cd d2 ..#..m.......... 01d0 8b 23 19 48 8c fb 08 a9 50 07 7f 73 1b 58 1d 40 .#.H....P..s.X.@ 01e0 14 41 b5 a3 52 78 9e 22 86 f1 85 70 a8 78 71 a8 .A..Rx."...p.xq. 01f0 86 f7 81 c8 50 58 68 ef ab 7b 54 72 a1 2b 6d 62 ....PXh..{Tr.+mb 0200 c8 7d a2 9d c4 84 71 a0 da e2 82 6c c0 92 47 da .}....q....l..G. 0210 2a 49 70 43 11 a7 4a 87 6c 02 3d 68 8c f6 3b 07 *IpC..J.l.=h..;. 0220 4d 6a 8b d8 6f 0b 24 8d 27 b6 35 1c 38 13 f0 ad Mj..o.$.'.5.8... 0230 3c 3f 1f 85 e4 f0 7d b2 b2 c9 19 36 41 c7 f6 56 4........)f..I 0250 1b b2 3a 1f bb 58 b3 aa c4 26 8e 4c 6c 96 89 c1 ..:..X...&.Ll... 0260 00 36 85 85 ae 2a 0d 6d fa 70 ab 5e 4f c9 c9 e4 .6...*.m.p.^O... 0270 19 3b 86 e5 07 1b 58 d5 31 a9 ad 40 51 13 32 ee .;....X.1..@Q.2. 0280 1a fa 54 02 95 6f 70 b5 22 c4 10 cb a5 aa 6a 7b ..T..op.".....j{ 0290 9a b1 e1 55 11 65 52 34 37 a9 20 bf d9 4e e2 0f ...U.eR47. ..N.. 02a0 6f 69 48 63 f3 5f 85 41 6e 1e d4 1a 78 dd c6 30 oiHc._.An...x..0 02b0 c9 0c 83 bc ec 13 67 01 6f 5a df c9 87 0d 22 32 ......g.oZ...."2 02c0 30 11 64 c5 cd 48 b3 1a e4 e2 90 c2 f7 41 ef 1a 0.d..H.......A.. 02d0 af c6 b4 a3 cc 93 32 60 d2 c4 10 d8 29 23 81 6e ......2`....)#.n 02e0 b5 cb 96 74 6f 5a d3 33 63 e5 62 87 cb 88 4a aa ...toZ.3c.b...J. 02f0 7d a1 78 83 58 66 29 61 f2 20 3a 18 d4 9b aa 9d }.x.Xf)a. :..... 0300 0e d3 5d 3c 18 d8 d8 30 36 e7 09 3c 83 d8 cd c0 ..]<...06..<.... 0310 1a e6 f3 c3 49 36 f9 32 c4 f2 f0 62 39 7a 57 3e ....I6.2...b9zW> 0320 2f 4a ec 3e 2b 3c 1e 4d 6c d6 1b af 61 c0 de ba /J.>+<.Ml...a... 0330 57 63 1c 6d 2c dd c7 27 80 53 ed b5 72 38 c0 b3 Wc.m,..'.S..r8.. 0340 85 dd ee e0 0d 74 58 73 40 15 a3 9e 62 c2 3e 1b .....tXs@...b.>. 0350 b9 9e 82 b3 cb 3a e4 d5 4d 60 91 98 c7 88 9b 0b .....:..M`...... 0360 9b bb db 5d 6a d4 7e 36 1c 2c 95 22 53 34 9b 77 ...]j.~6.,."S4.w 0370 12 35 b1 e8 68 a9 34 b1 b7 e5 7b 05 ee c8 78 91 .5..h.4...{...x. 0380 42 79 84 79 6c f0 26 de e6 a5 46 b6 3c cd 70 ef By.yl.&...F.<.p. 0390 9d 63 58 59 89 0c 8a 77 c8 14 b9 b8 53 d2 b3 ff .cXY...w....S... 03a0 00 52 c7 3b e1 c7 04 46 ca 0d dc 0e 83 a9 ad 0d .R.;...F........ 03b0 d1 e4 e1 c9 25 83 6d 07 87 e2 15 99 97 95 2c 5e ....%.m.......,^ 03c0 32 f9 31 87 46 e0 47 10 6a f1 7d bc ad f0 73 78 2.1.F.G.j.}...sx 03d0 64 09 0b 5b 80 20 1f 5a 9b 1e 37 ab 0f 3c 99 18 d..[. .Z..7..<.. 03e0 ca 4a ac 71 a9 ba a2 8b 1f b6 aa 93 7a f7 9a 78 .J.q........z..x 03f0 24 bc 29 e9 87 0a 7a 36 7a 54 d4 f5 15 23 c2 a0 $.)...z6zT...#.. 0400 6a 57 d2 a2 69 0a 8f 3a 9a 4a c8 6e a6 c6 86 47 jW..i..:.J.n...G 0410 b8 5b 9d 39 1b 4d 8d 5b 12 5c 3a 2f 19 9d 2c 88 .[.9.M.[.\:/..,. 0420 d1 b0 57 0c 2c 37 72 35 4b 27 22 45 c9 21 a4 04 ..W.,7r5K'"E.!.. 0430 1d 2c 06 82 b3 a1 c9 92 17 52 87 9d 69 4e e1 a3 .,.......R..iN.. 0440 dc 53 6b 69 6b 8e 20 d7 3e dc 54 e4 b9 99 57 36 .Skik. .>.T...W6 0450 33 24 0f 68 a3 94 5b 71 e0 41 e6 6a c7 9b 79 a1 3$.h..[q.A.j..y. 0460 c6 87 09 86 e8 22 1f 97 28 d4 6b eb 4f 83 16 0b ....."..(.k.O... 0470 4a 67 cb 60 51 0f b5 49 d2 81 e7 fc a2 66 76 e0 Jg.`Q..I.....fv. 0480 81 42 41 1e a1 40 b6 b5 d3 59 d6 38 7a 18 d4 a9 .BA..@...Y.8z... 0490 52 ae ac 1a f4 af 4a 95 14 a9 52 a5 40 a9 1a 54 R.....J...R.@..T 04a0 a8 1a 88 c7 40 7d 28 7c e8 89 c0 5f 95 04 76 92 ....@}(|..._..v. 04b0 2f ca 96 d1 ce ac 5d 76 10 38 d4 14 03 c6 82 02 /.....]v.8...... 04c0 35 3a 0a 70 bb 38 54 ed a9 22 98 8b d0 c9 c1 26 5:.p.8T..".....& 04d0 99 ea 26 e3 51 4d be fc 6a 58 de 4f 57 b1 b2 dc ..&.QM..jX.OW... 04e0 e1 b6 00 50 43 b6 ed d6 d4 55 14 56 91 b6 a0 b9 ...PC....U.V.... 04f0 3c 2a e6 35 e0 dc 18 59 ea 58 b0 39 15 96 fa 55 <*.5...Y.X.9...U 0500 43 c6 b4 64 94 90 45 be da ce 3f 31 ab 19 d8 f4 C..d..E...?1.... 0510 a9 a9 f9 51 92 a5 ca 9a 95 05 de fb 3c 68 8d aa ...Q........