Frame 13725: 1406 bytes on wire (11248 bits), 1406 bytes captured (11248 bits) Encapsulation type: Ethernet (1) Arrival Time: Jul 22, 2017 02:51:07.857062000 UTC UTC Arrival Time: Jul 22, 2017 02:51:07.857062000 UTC Epoch Arrival Time: 1500691867.857062000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.004538000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 453.331713000 seconds] Frame Number: 13725 Frame Length: 1406 bytes (11248 bits) Capture Length: 1406 bytes (11248 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) Destination: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 3] Internet Protocol Version 4, Src: 184.25.56.229, Dst: 172.16.45.52 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1392 Identification: 0x894f (35151) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 57 Protocol: TCP (6) Header Checksum: 0x785b [validation disabled] [Header checksum status: Unverified] Source Address: 184.25.56.229 Destination Address: 172.16.45.52 [Source GeoIP: San Jose, US, ASN 20940, Akamai International B.V.] [Source GeoIP City: San Jose] [Source or Destination GeoIP City: San Jose] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP AS Number: 20940] [Source or Destination GeoIP AS Number: 20940] [Source GeoIP AS Organization: Akamai International B.V.] [Source or Destination GeoIP AS Organization: Akamai International B.V.] [Source GeoIP Latitude: 37.3388] [Source or Destination GeoIP Latitude: 37.3388] [Source GeoIP Longitude: -121.8916] [Source or Destination GeoIP Longitude: -121.8916] [Stream index: 42] Transmission Control Protocol, Src Port: 80, Dst Port: 49202, Seq: 254308, Ack: 733, Len: 1352 Source Port: 80 Destination Port: 49202 [Stream index: 86] [Stream Packet Number: 382] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1352] Sequence Number: 254308 (relative sequence number) Sequence Number (raw): 2807021311 [Next Sequence Number: 255660 (relative sequence number)] Acknowledgment Number: 733 (relative ack number) Acknowledgment number (raw): 2098305548 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 980 [Calculated window size: 31360] [Window size scaling factor: 32] Checksum: 0x5911 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 1.098704000 seconds] [Time since previous frame in this TCP stream: 0.069187000 seconds] [SEQ/ACK analysis] [iRTT: 0.081961000 seconds] [Bytes in flight: 1352] [Bytes sent since last PSH flag: 83824] TCP payload (1352 bytes) Hypertext Transfer Protocol File Data: 1352 bytes Data (1352 bytes) 0000 50 48 23 e5 e7 43 27 dd ad 04 49 1b 47 50 6c 29 PH#..C'...I.GPl) 0010 12 36 5c 9b 9e 55 1d ca 14 af ec a7 66 12 46 91 .6\..U......f.F. 0020 da c4 71 3d 68 24 58 76 c7 e2 e7 50 8d ec c7 77 ..q=h$Xv...P...w 0030 06 a9 a0 05 bd c7 54 16 15 06 3e e3 7f dd c2 80 ......T...>..... 0040 67 42 6d 47 c6 c7 69 90 c8 38 29 d6 f5 08 63 0e gBmG..i..8)...c. 0050 e5 4e ba 55 ec 40 b8 f0 de 46 16 27 5a 50 09 55 .N.U.@...F.'ZP.U 0060 43 d9 4e 96 a8 14 6b 5e da 75 a9 cd 24 72 3b b4 C.N...k^.u..$r;. 0070 6b c4 69 41 de 40 03 5b 9e 34 81 8a 9b 5e da 53 k.iA.@.[.4...^.S 0080 a0 25 49 1c a9 ee c1 48 27 43 c0 52 be d1 61 cf .%I....H'C.R..a. 0090 4a 02 42 3b 82 ec 76 81 c0 d4 65 f6 f3 b9 3c ea J.B;..v...e...<. 00a0 28 4a dc 7e ea 4d f2 d0 49 2d 6f 53 c2 91 05 4d (J.~.M..I-oS...M 00b0 87 11 4a 30 af a1 3b 6d c2 88 f0 96 b9 2d 66 02 ..J0..;m.....-f. 00c0 ff 00 1a 08 04 24 f1 bb 1a 32 b0 8e cc ba 81 c4 .....$...2...... 00d0 54 57 12 67 88 ce 06 d4 4e 35 18 ef b5 88 17 0b TW.g....N5...... 00e0 c6 a2 af ae 38 90 a4 c0 d8 38 d1 4f 2a 8b 48 c2 ....8....8.O*.H. 00f0 45 56 f6 ed d2 83 1b 38 ed 3b 35 c7 e1 e9 44 79 EV.....8.;5...Dy 0100 0a 48 5e 65 df 70 6c 2a 03 16 ee 44 11 80 dc 0d .H^e.pl*...D.... 0110 c8 e7 55 b7 76 df f9 c3 95 40 39 2e b2 5b 43 a1 ..U.v....@9..[C. 0120 a5 8f 1b cd 92 23 fb cf 7b 5e a0 94 ab 78 84 ab .....#..{^...x.. 0130 aa 8d 0f c6 ab 46 4a 37 75 8d 80 d0 0e b7 ad 48 .....FJ7u......H 0140 d6 09 09 c7 1a 38 07 75 f8 5c 55 3c 9c 46 8d 90 .....8.u.\U<.F.. 0150 da e8 c6 c0 f2 06 ae 44 96 3e dc db 64 b1 5b 5c .......D.>..d.[\ 0160 aa fa f0 a7 80 a4 b8 f2 a4 a2 cc ad ed 6f 4a 9b .............oJ. 0170 c6 9b 63 90 1f cd f9 04 63 8b 7a d0 ec 88 8e cd ..c.....c.z..... 0180 7d e0 d9 96 91 2a 0f 8c 9b 24 2a f7 31 8f 97 d2 }....*...$*.1... 0190 80 ab 75 bd f4 ab 38 a5 0f bd c8 03 e5 3f 03 56 ..u...8......?.V 01a0 cf 85 df 8e d2 e0 cc 25 64 d5 a2 3a 10 3d 2a e4 .......%d..:.=*. 01b0 55 c2 85 32 24 74 90 ed 55 5f 61 e1 72 6a 59 90 U..2$t..U_a.rjY. 01c0 37 8f 98 c0 c2 f2 15 0d bf d0 d5 64 76 47 1b c1 7..........dvG.. 01d0 52 a6 af 43 81 93 e4 0c 99 21 f7 88 b9 31 d4 8f R..C.....!...1.. 01e0 4a 64 53 3b c9 1b b4 07 9d 45 d7 63 ad f5 5e 74 JdS;.....E.c..^t 01f0 77 99 15 88 0a 48 02 c0 5b 9d 56 dc 6c 57 9f 1a w....H..[.V.lW.. 0200 a0 f2 c2 23 90 70 28 46 e5 22 82 59 98 8d da d5 ...#.p(F.".Y.... 0210 94 8d 1c 47 bc ed 05 49 bd 41 14 d9 de 36 ba a6 ...G...I.A...6.. 0220 84 d4 12 44 ff 00 67 dd b6 f2 16 b7 d9 4c ae b1 ...D..g......L.. 0230 c8 49 1a 73 06 a6 32 db 21 14 3b 04 30 f0 20 58 .I.s..2.!.;.0. X 0240 35 04 ca 24 62 ef c4 fe fa 03 0e e4 8a ce ab ec 5..$b........... 0250 1c 7d 2a 11 92 15 a4 23 87 cb d0 d4 37 48 ac 42 .}*....#....7H.B 0260 df 71 1a a1 d3 4a 2b 47 22 c6 aa c8 cb cd 79 a9 .q...J+G".....y. 0270 a2 87 75 2f ba f6 ea 05 1c 66 4d b4 c0 00 29 c4 ..u/.....fM...). 0280 02 35 a0 a1 54 3e e1 72 69 f6 3b 31 91 08 f6 8e .5..T>.ri.;1.... 0290 14 c0 10 48 8b 06 6d 07 3a 71 62 5b 6f cb 6d 05 ...H..m.:qb[o.m. 02a0 41 c8 22 f7 bd 13 19 d2 37 0e e2 ea 39 55 40 0b A.".....7...9U@. 02b0 31 40 a4 fb 47 01 44 c7 db dc f7 f0 00 d4 25 21 1@..G.D.......%! 02c0 99 98 0b 02 6e 29 e1 da 1c 06 d5 4f 1a 29 8d b6 ....n).....O.).. 02d0 b7 c6 99 41 27 4e 5c 68 aa f1 09 5a e3 f2 f5 d2 ...A'N\h...Z.... 02e0 99 76 01 61 f3 55 44 54 82 2c 69 3a 32 10 0f de .v.a.UDT.,i:2... 02f0 d4 7c 29 2f 02 47 1a 9c 92 19 9c 39 1c 00 16 1e .|)/.G.....9.... 0300 95 02 36 09 6b e8 79 52 de f6 d8 7d a0 72 ad 08 ..6.k.yR...}.r.. 0310 b0 e3 fa 17 95 ec 5d 7d c0 f4 aa ad 2a 64 16 9a ......]}....*d.. 0320 5d 1f 40 00 e7 6a 28 56 3b 4b 91 7d 6c 69 24 92 ].@..j(V;K.}li$. 0330 8b 05 24 0b dc 7c 69 e3 91 55 8e ed 47 11 45 32 ..$..|i..U..G.E2 0340 21 40 db 6e c3 98 e1 50 37 d6 cf c1 8e 97 d4 8e !@.n...P7....... 0350 35 19 0a d8 3e e2 1f 8f c6 82 6f b8 91 cf 95 31 5...>.....o....1 0360 24 8b 1e 14 c0 32 37 7e 61 dd 60 a0 e8 5a ad 40 $....27~a.`..Z.@ 0370 8b 8f 39 00 83 b7 dc ae 78 55 0d 01 03 8d 49 64 ..9.....xU....Id 0380 75 27 5b f2 3f 0a 58 34 32 ef f5 2a 52 e9 de 1f u'[.?.X42..*R... 0390 38 f9 5e 87 26 13 c7 3a ab b5 97 8e f5 d4 5f a5 8.^.&..:......_. 03a0 21 9c d2 e3 2e 23 80 20 4d 50 91 ee 07 e3 44 81 !....#. MP....D. 03b0 8c 4e 63 9d ca c6 be e5 35 9c 61 55 e6 01 dc de .Nc.....5.aU.... 03c0 4f 78 d0 83 55 c6 dd f6 3a a9 e7 56 32 c9 91 cb Ox..U...:..V2... 03d0 05 f6 5e e2 4b 5a f5 5c 8e 55 62 52 5b ab 68 47 ..^.KZ.\.UbR[.hG 03e0 c7 d2 ac 28 85 8a 84 1b 5f 9f 4a ad 6a b9 82 d0 ...(...._.J.j... 03f0 99 02 e5 03 b7 82 ba f2 f8 d2 87 8c a8 26 3e bc .............&>. 0400 aa 70 97 8a 40 c0 5a 45 f9 6f d2 86 56 25 c9 2a .p..@.ZE.o..V%.* 0410 8d f9 60 fb a4 fe 4a 4d b8 1d e8 c5 c2 9e 27 89 ..`...JM......'. 0420 15 9b 05 99 f2 a0 77 20 c7 6b 8f 71 1a 5c d5 48 ......w .k.q.\.H 0430 b1 cc 9b ca 9d db 75 db e9 44 92 5c 52 9d cd de ......u..D.\R... 0440 f6 e2 96 e1 55 a3 92 24 62 ae 58 6e d0 32 9e 14 ....U..$b.Xn.2.. 0450 90 3c 33 b7 b9 7e eb e9 6a 8d f5 f4 1c aa 25 36 .<3..~..j.....%6 0460 b5 b8 03 f2 b5 4c e3 c9 1f bf e6 07 5b d6 f0 82 .....L......[... 0470 97 73 01 80 35 a1 27 71 5f 5a 15 c6 db 7e 1e 14 .s..5.'q_Z...~.. 0480 e0 92 0f a7 0a 19 e5 6f b6 82 01 88 37 e7 4c c4 .......o....7.L. 0490 bf c6 a5 7b 71 1c 78 52 60 79 0a a2 68 34 04 f1 ...{q.xR`y..h4.. 04a0 14 cc f6 a8 82 54 13 ca 98 10 41 1c e8 18 9d c0 .....T....A..... 04b0 1e b4 da b0 b1 e3 4b 95 ba 52 4b b5 c8 17 3d 2a ......K..RK...=* 04c0 82 91 78 c1 3c 78 54 5d 2c 14 f5 a9 82 36 d9 aa ..x.