Frame 16303: 1406 bytes on wire (11248 bits), 1406 bytes captured (11248 bits) Encapsulation type: Ethernet (1) Arrival Time: Jul 22, 2017 02:51:10.662668000 UTC UTC Arrival Time: Jul 22, 2017 02:51:10.662668000 UTC Epoch Arrival Time: 1500691870.662668000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000176000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 456.137319000 seconds] Frame Number: 16303 Frame Length: 1406 bytes (11248 bits) Capture Length: 1406 bytes (11248 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) Destination: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 3] Internet Protocol Version 4, Src: 63.217.21.41, Dst: 172.16.45.52 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1392 Identification: 0xbf06 (48902) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 59 Protocol: TCP (6) Header Checksum: 0xdca0 [validation disabled] [Header checksum status: Unverified] Source Address: 63.217.21.41 Destination Address: 172.16.45.52 [Source GeoIP: Tin Shui Wai, HK, ASN 3491, CONSOLE-CONNECT-ASN] [Source GeoIP City: Tin Shui Wai] [Source or Destination GeoIP City: Tin Shui Wai] [Source GeoIP Country: Hong Kong] [Source or Destination GeoIP Country: Hong Kong] [Source GeoIP ISO Two Letter Country Code: HK] [Source or Destination GeoIP ISO Two Letter Country Code: HK] [Source GeoIP AS Number: 3491] [Source or Destination GeoIP AS Number: 3491] [Source GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source or Destination GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source GeoIP Latitude: 22.4489] [Source or Destination GeoIP Latitude: 22.4489] [Source GeoIP Longitude: 113.9984] [Source or Destination GeoIP Longitude: 113.9984] [Stream index: 40] Transmission Control Protocol, Src Port: 80, Dst Port: 49192, Seq: 203676, Ack: 1468, Len: 1352 Source Port: 80 Destination Port: 49192 [Stream index: 77] [Stream Packet Number: 286] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1352] Sequence Number: 203676 (relative sequence number) Sequence Number (raw): 2762782960 [Next Sequence Number: 205028 (relative sequence number)] Acknowledgment Number: 1468 (relative ack number) Acknowledgment number (raw): 3518731413 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 1032 [Calculated window size: 33024] [Window size scaling factor: 32] Checksum: 0x7c9e [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 4.404624000 seconds] [Time since previous frame in this TCP stream: 0.000176000 seconds] [SEQ/ACK analysis] [iRTT: 0.081306000 seconds] [Bytes in flight: 2704] [Bytes sent since last PSH flag: 43064] TCP payload (1352 bytes) Hypertext Transfer Protocol File Data: 1352 bytes Data (1352 bytes) 0000 63 bb 4c ec a1 29 96 7b 63 23 d2 2c 95 24 63 b1 c.L..).{c#.,.$c. 0010 38 0b f3 85 39 98 29 c8 c2 5c 91 4e 5a 0b 7c be 8...9.)..\.NZ.|. 0020 3c 07 b3 62 aa 6b 65 29 9d bb 1a f3 35 82 bb 9b <..b.ke)....5... 0030 b0 d6 dc c2 ea 58 87 69 7e 6d d2 5c 82 11 b2 f6 .....X.i~m.\.... 0040 68 79 36 86 0b 35 68 c9 49 41 4f 79 b1 b4 21 ec hy6..5h.IAOy..!. 0050 87 1f 7c 8a ff f1 6f bf c3 ff fb af bf 85 92 d9 ..|...o......... 0060 22 99 21 2d 8d 4e 6c d0 0a d7 8d 46 8b 51 8e 31 ".!-.Nl....F.Q.1 0070 e2 db 0c 05 ba 6c 16 4c 4c a7 65 e7 9b 28 52 a3 .....l.LL.e..(R. 0080 57 9c 97 2c 22 4a 66 04 2a d3 a3 50 9c 19 89 02 W..,"Jf.*..P.... 0090 4d 2c 8a f5 74 ed fc 54 d4 94 d2 f0 2a 34 68 34 M,..t..T....*4h4 00a0 6b d1 c0 73 da 64 4a 46 ad 31 02 d5 5a 1f 98 92 k..s.dJF.1..Z... 00b0 5d 61 4e 72 64 45 b7 a1 d1 04 a2 8f 02 9e aa 48 ]aNrdE.........H 00c0 61 47 4d c3 4a 55 1a 56 ab 92 29 6e 9e 23 66 91 aGM.JU.V..)n.#f. 00d0 4d 8a 79 bd 4c 4e 54 89 a1 d0 e5 92 8b 8b b6 41 M.y.LNT........A 00e0 07 17 41 73 89 81 74 9a b9 49 cc 1f ea d7 aa 18 ..As..t..I...... 00f0 2a 59 89 b3 e3 a5 99 98 93 fa 48 b2 37 ab bc 21 *Y........H.7..! 0100 42 12 f8 04 05 2e 70 65 8c e2 1e c9 0a 60 a7 08 B.....pe.....`.. 0110 46 1f 59 bc 9f 99 4c 08 bd 97 8e 2e c4 de ae 0a F.Y...L......... 0120 c1 89 da 74 15 6a 93 55 a8 49 4e 26 53 a5 b0 54 ...t.j.U.IN&S..T 0130 25 a3 22 3d 59 12 7b 53 76 06 da 72 d3 d0 57 a4 %."=Y.{Sv..r..W. 0140 93 6e 06 89 20 33 50 98 81 fe 32 2d 86 59 32 27 .n.. 3P...2-.Y2' 0150 bb 5a 31 3d 3a 8c 95 c9 61 6c ce f6 e0 60 a6 09 .Z1=:...al...`.. 0160 87 53 25 b8 35 92 25 09 5b b4 9b 63 59 6c 14 f9 .S%.5.%.[..cYl.. 0170 b8 06 fb 23 e9 d8 1d cf c0 ce 58 3a d6 47 35 d8 ...#......X:.G5. 0180 18 ca c4 fa 40 06 16 ba 53 30 db 26 04 ce 40 58 ....@...S0.&..@X 0190 95 84 c1 72 05 7a 88 1c ad 59 31 a8 4f 09 e7 eb ...r.z...Y1.O... 01a0 0b 41 1d 71 45 3c 7e 26 9a 74 13 41 13 82 06 f6 .A.qE<~&.t.A.... 01b0 e0 e6 dc 28 b4 17 c6 a0 9b 21 a6 87 27 71 a8 2a ...(.....!..'q.* 01c0 05 c3 96 14 8c 30 e4 0c f1 82 f4 11 53 7a 58 96 .....0......SzX. 01d0 5b b3 95 ec c4 62 9a 6f 08 8c 0a 2f e8 03 9d 90 [....b.o.../.... 01e0 e2 7a 19 0a a7 73 08 a6 a0 bd 2e be 06 a7 33 df .z...s........3. 01f0 81 f3 99 ef b1 fd 39 dc 2e fd 05 3c ad 5f 81 bf ......9....<._.. 0200 fd eb 08 a6 c0 65 5e 97 e1 7a c3 1a aa b8 10 fc .....e^..z...... 0210 fc 83 5b b8 df a3 c7 ed ba 64 dc 64 69 5e cd 0b ..[......d.di^.. 0220 c3 62 be 8c 01 4a 8e 9d ca 44 c9 99 8e 2c 99 38 .b...J...D...,.8 0230 a8 cd e2 e7 d9 bc c0 59 bc d0 59 2c d9 3a 2c 9b .......Y..Y,.:,. 0240 8a 30 55 52 8a d9 92 02 cc 99 cb 30 5f 69 c2 02 .0UR.......0_i.. 0250 db 62 5d 35 16 6a 6b 30 5f 57 85 d5 26 c1 dd 8d .b]5.jk0_W..&... 0260 44 93 46 4c d6 5a c8 b7 55 c7 37 7e d8 29 fa f2 D.FL.Z..U.7~.).. 0270 52 d1 63 60 2b cd 67 a0 ab 27 16 b4 e2 37 bf fe R.c`+.g..'...7.. 0280 27 fc db 1f fe 09 ff f7 1f 7f 05 45 4c 00 92 94 '..........EL... 0290 e1 48 4e 92 41 93 2c 83 8e 26 51 44 0c e9 35 c6 .HN.A.,..&QD..5. 02a0 b1 4a 24 53 e0 a9 58 ab cc c0 12 31 6a a2 34 09 .J$S..X....1j.4. 02b0 7d 39 4a 49 e0 b5 74 f9 2a 1a 40 a9 b4 0c 5b 3c }9JI..t.*.@...[< 02c0 b1 24 01 15 f9 6a d4 95 6b d0 44 37 6e ab 36 a0 .$...j..k.D7n.6. 02d0 d5 c2 8e 55 ce 2a 5f cc 00 9a 1d 84 e2 74 2f e4 ...U.*_......t/. 02e0 27 38 a2 28 de 01 55 49 2e 68 a3 f0 fa 8d 0c 9a '8.(..UI.h...... 02f0 25 f1 74 6f 06 6e b1 51 2e ff cf a6 59 dc fa 27 %.to.n.Q....Y..' 0300 be 95 c5 62 85 79 65 ad 24 5a 5a 63 5d 12 b8 29 ...b.ye.$ZZc]..) 0310 0e 9b 34 26 71 57 75 2e 4f dc 85 56 62 58 9f 20 ..4&qWu.O..VbX. 0320 dd c3 18 e5 eb 18 65 06 98 22 da 4d e5 44 b2 03 ......e..".M.D.. 0330 c8 8e 1d 5c 1f 2a dd f4 11 02 1f d5 06 62 50 17 ...\.*.......bP. 0340 24 89 5c 8c aa f4 a7 87 a0 8f 22 ef 4b 63 00 a5 $.\.......".Kc.. 0350 76 4e d4 50 dc 55 6a 0a 5b 95 44 ae 56 c1 92 4c vN.P.Uj.[.D.V..L 0360 07 4f 55 4b 02 6f d6 a7 13 4d b2 31 54 ac 63 a9 .OUK.o...M.1T.c. 0370 cf c2 b4 49 87 99 ea 12 4c 34 d6 60 b2 b7 0f 33 ...I....L4.`...3 0380 93 b3 98 9f 5f c3 da ca 36 b6 d7 d7 71 b8 3a 8b ...._...6...q.:. 0390 a3 e5 0e 1c 4d 17 62 7f 58 83 5b c3 19 b8 3d aa ....M.b.X.[...=. 03a0 c3 cd f1 2c 1c 4e 64 61 7f 9c 17 7d 2a 0b 7b 13 ...,.Nda...}*.{. 03b0 7a 6c 4d ea b1 39 96 8b 55 b1 1d 74 6f 26 e6 3a zlM..9..U..to&.: 03c0 33 30 d9 98 84 d1 3a 15 fa ca 12 d1 4d e4 68 21 30....:.....M.h! 03d0 1b 36 b1 7c d6 aa 23 50 c7 17 5b 97 2c 8e 11 0c .6.|..#P..[.,... 03e0 bb 11 a8 e7 d7 1b 79 61 9a 73 a3 d1 c6 9f ed 26 ......ya.s.....& 03f0 e3 f5 57 f2 82 59 d4 e8 ab 54 a1 9f ce d1 47 07 ..W..Y...T....G. 0400 ed 66 39 6e 63 f0 6c d6 45 a1 9a bf 57 ae 0c 42 .f9nc.l.E...W..B 0410 76 84 17 d2 7d 5d c8 d7 36 90 d9 5c 84 ef 95 37 v...}]..6..\...7 0420 e0 74 e1 7b b8 7e f6 55 38 9c fa 1e 1c 2f bc ca .t.{.~.U8..../.. 0430 cf 5f 81 27 05 ef 65 fd 9f 11 e2 2a 76 fc 72 86 ._.'..e....*v.r. 0440 dd d5 f3 d0 93 0b 7f f2 ec 80 55 4a 8f 43 4b 1c ..........UJ.CK. 0450 ee 50 e0 b7 ab 15 58 37 06 61 81 a8 22 dc 6a bb .P....X7.a..".j. 0460 2c 01 87 e2 61 88 9a 74 dc ac 37 e2 b0 3e 1f 3b ,...a..t..7..>.; 0470 35 46 ac 98 73 31 55 9a 8b 71 53 31 a6 cb ca e9 5F..s1U..qS1.... 0480 d8 55 58 ae aa c3 5a 1d c5 6c a9 c5 32 05 bb d1 .UX...Z..l..2... 0490 d1 85 65 3a f7 62 63 23 9d bb 56 12 f7 70 49 21 ..e:.bc#..V..pI! 04a0 3b 7c 3a 45 9a 2a dd 84 eb 2e 31 61 a8 b2 1a 33 ;|:E.*....1a...3 04b0 fc fe ed 9d 47 f8 e3 1f fe 15 ff f6 cf ff 88 3f ....G..........? 04c0 fe fe af 11 1b 19 08 b9 22 12 31 8a 50 24 31 2b ........".1.P$1+ 04d0 25 b1 62 a9 55 14 3a 9d b9 86 a6 d1 92 27 c7 14 %.b.U.:......'.. 04e0 2b db 6a 79 26 af 67 32 2b 33 cf 71 96 0c 4d 1a +.jy&.g2+3.q..M. 04f0 39 05 1e 01 b3 2e 06 95 0c a2 95 3c 67 15 34 87 9..........