Frame 14712: 1406 bytes on wire (11248 bits), 1406 bytes captured (11248 bits) Encapsulation type: Ethernet (1) Arrival Time: Jul 22, 2017 02:51:09.250405000 UTC UTC Arrival Time: Jul 22, 2017 02:51:09.250405000 UTC Epoch Arrival Time: 1500691869.250405000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000128000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 454.725056000 seconds] Frame Number: 14712 Frame Length: 1406 bytes (11248 bits) Capture Length: 1406 bytes (11248 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) Destination: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 3] Internet Protocol Version 4, Src: 63.217.21.24, Dst: 172.16.45.52 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1392 Identification: 0x36a2 (13986) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 59 Protocol: TCP (6) Header Checksum: 0x6516 [validation disabled] [Header checksum status: Unverified] Source Address: 63.217.21.24 Destination Address: 172.16.45.52 [Source GeoIP: Tin Shui Wai, HK, ASN 3491, CONSOLE-CONNECT-ASN] [Source GeoIP City: Tin Shui Wai] [Source or Destination GeoIP City: Tin Shui Wai] [Source GeoIP Country: Hong Kong] [Source or Destination GeoIP Country: Hong Kong] [Source GeoIP ISO Two Letter Country Code: HK] [Source or Destination GeoIP ISO Two Letter Country Code: HK] [Source GeoIP AS Number: 3491] [Source or Destination GeoIP AS Number: 3491] [Source GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source or Destination GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source GeoIP Latitude: 22.4489] [Source or Destination GeoIP Latitude: 22.4489] [Source GeoIP Longitude: 113.9984] [Source or Destination GeoIP Longitude: 113.9984] [Stream index: 47] Transmission Control Protocol, Src Port: 80, Dst Port: 49211, Seq: 18929, Ack: 293, Len: 1352 Source Port: 80 Destination Port: 49211 [Stream index: 96] [Stream Packet Number: 30] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1352] Sequence Number: 18929 (relative sequence number) Sequence Number (raw): 3543426247 [Next Sequence Number: 20281 (relative sequence number)] Acknowledgment Number: 293 (relative ack number) Acknowledgment number (raw): 1001508130 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 946 [Calculated window size: 30272] [Window size scaling factor: 32] Checksum: 0x6172 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 0.478045000 seconds] [Time since previous frame in this TCP stream: 0.184704000 seconds] [SEQ/ACK analysis] [iRTT: 0.076467000 seconds] [Bytes in flight: 1352] [Bytes sent since last PSH flag: 20280] TCP payload (1352 bytes) Hypertext Transfer Protocol File Data: 1352 bytes Data (1352 bytes) 0000 21 31 fe 66 0b 91 44 ec bb 4c 84 75 7a f3 2e c7 !1.f..D..L.uz... 0010 72 1d c3 67 80 f6 84 3b 00 a7 90 71 86 ea 19 41 r..g...;...q...A 0020 ae b3 ec 9a af 80 5a 1c 84 5d 1a 48 7a e1 02 c4 ......Z..].Hz... 0030 c0 b5 75 5d 9f 60 79 12 63 f3 aa 3d 49 4a 47 7f ..u].`y.c..=IJG. 0040 5a 2d 4f a1 9e 75 41 9f 8c 5f 6f 49 e3 0b 6a ac Z-O..uA.._oI..j. 0050 d3 24 c4 3a 49 a8 12 74 7f 62 87 7e 74 41 d6 81 .$.:I..t.b.~tA.. 0060 9e 9a ea 6c f8 b7 33 24 a2 52 fc 57 cf e9 93 19 ...l..3$.R.W.... 0070 bc 19 70 33 5b 3a f3 f8 9c 23 46 90 91 94 83 90 ..p3[:...#F..... 0080 a5 00 7a 97 f0 1e a3 fc e2 72 3c 98 8d fe f8 bf ..z......r<..... 0090 1f bf 3f 04 ff 87 d9 ed 08 9c d9 a0 09 a6 e3 65 ..?............e 00a0 07 68 b6 c1 e9 e9 88 9c ca a0 14 1c 6c 5c 06 40 .h..........l\.@ 00b0 1c f6 d3 b7 9a 02 3c f4 7c e2 2b d8 7a 08 10 0f ......<.|.+.z... 00c0 58 c5 64 8f 01 ec 94 42 7c 96 fe 4e c1 10 57 34 X.d....B|..N..W4 00d0 bb 89 48 02 e2 6d 44 f4 82 f6 0f db 28 fc 52 56 ..H..mD.....(.RV 00e0 17 94 95 54 fd fd 41 38 2e d4 0b 50 e7 fa 1c e0 ...T..A8...P.... 00f0 7d cc e1 be 54 15 c7 fc ad 49 c8 38 c7 dc 14 2a }...T....I.8...* 0100 c0 94 c4 01 7a 69 dc 14 d0 f6 75 51 2d 57 27 0b ....zi....uQ-W'. 0110 d7 5e 4b f0 87 6a 34 dc 44 4b 30 59 71 49 59 00 .^K..j4.DK0YqIY. 0120 ab 6f 01 b3 30 be 1e cd 38 94 be 3e 4b 63 ef 52 .o..0...8..>Kc.R 0130 0e 5b 42 7e a4 bf 5e bc 07 39 fe 35 5f 5e 71 18 .[B~..^..9.5_^q. 0140 13 fd 52 bf 95 00 b9 a0 ee 75 7b 84 68 5f d6 7d ..R......u{.h_.} 0150 33 7d 31 9b 5d e7 e3 66 d7 f5 17 dd 3b 8c 03 3e 3}1.]..f....;..> 0160 39 78 f4 fd c1 01 43 c3 32 72 80 77 19 98 47 79 9x....C.2r.w..Gy 0170 26 e4 3e a4 99 41 93 5d ca 67 37 9b 89 71 a6 5d &.>..A.].g7..q.] 0180 af 23 99 d5 3a f5 88 00 38 ab 17 82 67 d7 5b ae .#..:...8...g.[. 0190 35 55 5a c1 55 91 1b 50 a4 a1 32 75 a2 4b 68 f8 5UZ.U..P..2u.Kh. 01a0 24 48 f1 46 bf 38 d2 5c 81 c6 f6 54 a7 83 37 68 $H.F.8.\...T..7h 01b0 18 5a df 4e 86 7b 53 e3 05 6c 7d 3a bf 15 9d 5b .Z.N.{S..l}:...[ 01c0 28 e5 0c d5 55 df 56 3e 9a 83 5a db 86 82 4e 00 (...U.V>..Z...N. 01d0 eb 4e 8a 87 95 99 8e 4e 6a 6c fb f4 b7 0f 9f 7f .N.....Njl...... 01e0 7b f8 1a fe 3f 04 2a ce 1d 68 48 99 0f 0b ec ce {...?.*..hH..... 01f0 df 3e 7c 7d ab eb f2 ed c3 97 aa 94 fe bf 93 81 .>|}............ 0200 ea f9 9d 0c 59 ce 47 6d dc bb 80 1d 17 36 95 03 ....Y.Gm.....6.. 0210 88 bf 3b ef 0c 8a c5 d1 47 38 db c7 ae 9b 8d fe ..;.....G8...... 0220 be ff f8 ff f9 e9 a7 f7 a3 d1 b0 01 7d 05 ea 96 ............}... 0230 cd f3 cf e3 89 72 a9 17 37 a0 2e 41 fa ba c2 3a .....r..7..A...: 0240 1b 84 a3 65 a1 05 03 b2 bf cd 47 47 10 de f9 0e ...e......GG.... 0250 b5 2d 6e e0 5c 7f 7a e9 d6 f6 db c7 3f 14 83 e2 .-n.\.z.....?... 0260 0c 68 7e fb f8 e5 b7 87 4f 86 9f 87 d7 73 94 42 .h~.....O....s.B 0270 cb 55 21 c1 72 7e 03 76 86 20 cf b7 37 6d ca 85 .U!.r~.v. ..7m.. 0280 7b 83 1d c2 17 b5 fd 3c f9 3e 88 87 51 27 6e da {......<.>..Q'n. 0290 63 10 ce 60 39 a3 7a 62 52 07 da fa f0 e0 51 e3 c..`9.zbR.....Q. 02a0 32 fb fe f0 a0 01 36 22 41 6c 3a be 0d 37 cc a0 2.....6"Al:..7.. 02b0 3d b8 bc 9e 72 74 a8 e1 0c 6c 86 9d cb b6 96 fd =...rt...l...... 02c0 11 06 c1 fd e3 61 f7 f0 f0 bb ee a3 3f 7e 2f e8 .....a......?~/. 02d0 cd bb 4f ba 61 82 23 ba 2d 8c ab fd 7d 6c 0a 58 ..O.a.#.-...}l.X 02e0 c0 69 ea c3 9b 23 ad 7a 77 d1 bb 8b 1b 6e 89 db .i...#.zw....n.. 02f0 5c b7 c3 e1 a3 6f bf fb e1 cf 7f 7e f3 f2 db ef \....o.....~.... 0300 76 6b 07 7d ed 65 70 33 0f f2 9c 8f b4 fe 2c 26 vk.}.ep3......,& 0310 c3 11 49 e2 d1 61 f7 bb 47 4f f4 d4 65 06 41 6c ..I..a..GO..e.Al 0320 73 e8 4a b2 7b 87 0a 38 0c 96 80 75 da 5f b8 11 s.J.{..8...u._.. 0330 05 98 30 8c 38 93 c5 61 63 37 d1 f8 8c 42 92 65 ..0.8..ac7...B.e 0340 15 c4 c3 cc 06 a4 d4 18 7e 5e 0e 2e 45 1b 0e 46 ........~^..E..F 0350 d8 d3 be 9e df 61 b1 d8 91 df d1 cd bc 4d a5 e0 .....a.......M.. 0360 72 00 12 8c 42 60 2b eb 61 1a 7e e8 eb 82 08 4e r...B`+.a.~....N 0370 ec 7f 01 c6 bb 07 df 7d 87 ad 7a c7 b6 1e 8d e6 .......}..z..... 0380 e1 4a dd b4 2f c1 6b ee 16 56 69 43 f4 a0 d2 4b .J../.k..ViC...K 0390 14 d2 f4 cb d9 ec 72 32 3e 9b 42 23 13 d5 33 20 ......r2>.B#..3 03a0 d2 30 a9 c3 9b 86 2e 34 8b 17 79 3d 1c 16 c1 32 .0.....4..y=...2 03b0 af 01 13 a3 60 fc ef a7 41 a1 cb 7b 79 33 c7 49 ....`...A..{y3.I 03c0 10 07 6c 30 3f 76 f0 77 7b 50 cc 3f cb 81 0e 96 ..l0?v.w{P.?.... 03d0 77 38 9b 05 49 2e 2f db c5 6c 38 ba a1 3e 7b fb w8..I./..l8..>{. 03e0 d9 a8 ef 91 5e 7f 18 f6 65 3b c3 8a 28 dc 57 3f ....^...e;..(.W? 03f0 b5 47 9f da 30 06 c1 4e 74 9f 06 e5 61 e7 b6 73 .G..0..Nt...a..s 0400 34 cb 47 fe b4 b1 18 45 5b bb 47 ea e2 2a 0b 94 4.G....E[.G..*.. 0410 88 1d f6 c8 92 f0 e8 41 3b 92 8e 42 d3 3e ff f5 .......A;..B.>.. 0420 97 57 bb 37 ee c5 e2 3a 3e 03 a0 be 5d 80 dc b0 .W.7...:>...]... 0430 26 7a 1a e8 1c 41 55 ba 0f 1f 3e 7c d2 b8 59 66 &z...AU...>|..Yf 0440 87 dd 87 52 30 f3 f9 74 fc f9 36 dc 72 4e 4d e9 ...R0..t..6.rNM. 0450 2f 68 f2 f4 73 81 f5 83 8a e7 e7 f6 13 85 c0 53 /h..s..........S 0460 cd d7 0f 6e 83 f9 94 07 37 d6 77 d0 f5 9d 64 b1 ...n....7.w...d. 0470 04 e3 ef 86 ee bb 5f 2c 21 31 d2 89 11 b7 b1 fb ......_,!1...... 0480 80 5c a3 05 e9 48 42 ac 07 fc de 6a 84 6d 1f 6e .\...HB....j.m.n 0490 de ba 14 ec 45 56 c5 b0 84 c7 eb b4 67 86 7f b2 ....EV......g... 04a0 6c 00 31 b3 07 a2 40 b7 d2 ad d5 b1 94 bd 37 e7 l.1...@.......7. 04b0 60 6c 2b ab ae 65 15 22 03 87 76 a4 a4 f7 15 ee `l+..e."..v..... 04c0 9a 76 8f f7 d3 b4 b6 a4 7c 77 7f 40 56 9a 08 3b .v......|w.@V..; 04d0 85 4d dc 81 33 8f a5 c2 b2 94 ba 84 9c 4b 9e 85 .M..3........K.. 04e0 e5 4b 02 a5 b8 66 4d 55 47 a5 cc 3f 18 97 7e 02 .K...fMUG..?..~. 04f0 6f cd c9 4b 7d 95 b8 99 04 6a 91 4f 87 0b dc 43 o..K}....j.O...C 0500 6f 6e a7 ac d6 4e a9 a8 26 c5 26 b8 a5 b3 11 27 on...N..&.&....' 0510 87 17 d2 6c f7 91 59 c2 de eb 66 71 21 2d 95 75 ...l..Y...fq!-.u 0520 55 5f 13 ce ba 24 02 49 9f 6f 54 5b f5 79 7a 20 U_...$.I.oT[.yz 0530 49 39 bf 5b 2a 55 ad 0d a4 b5 38 00 0e ef 49 b9 I9.[*U....8...I. 0540 78 ee cb e1 08 43 76 fe x....Cv. Data […]: 2131fe660b9144ecbb4c84757af32ec7721dc36780f6843b00a7907186ea1941aeb3ec9aaf805a1c845d1a487ae102c4c0b5755d9f60791263f3aa3d494a477f5a2d4fa19e75419f8c5f6f49e30b6aacd324c43a49a812747f62877e7441d6819e9aea6cf8b73324a252fc57cfe99319bc1 [Length: 1352]