Frame 16534: 1406 bytes on wire (11248 bits), 1406 bytes captured (11248 bits) Encapsulation type: Ethernet (1) Arrival Time: Jul 22, 2017 02:51:10.900506000 UTC UTC Arrival Time: Jul 22, 2017 02:51:10.900506000 UTC Epoch Arrival Time: 1500691870.900506000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000238000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 456.375157000 seconds] Frame Number: 16534 Frame Length: 1406 bytes (11248 bits) Capture Length: 1406 bytes (11248 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) Destination: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 3] Internet Protocol Version 4, Src: 63.217.21.41, Dst: 172.16.45.52 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1392 Identification: 0xbf45 (48965) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 59 Protocol: TCP (6) Header Checksum: 0xdc61 [validation disabled] [Header checksum status: Unverified] Source Address: 63.217.21.41 Destination Address: 172.16.45.52 [Source GeoIP: Tin Shui Wai, HK, ASN 3491, CONSOLE-CONNECT-ASN] [Source GeoIP City: Tin Shui Wai] [Source or Destination GeoIP City: Tin Shui Wai] [Source GeoIP Country: Hong Kong] [Source or Destination GeoIP Country: Hong Kong] [Source GeoIP ISO Two Letter Country Code: HK] [Source or Destination GeoIP ISO Two Letter Country Code: HK] [Source GeoIP AS Number: 3491] [Source or Destination GeoIP AS Number: 3491] [Source GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source or Destination GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source GeoIP Latitude: 22.4489] [Source or Destination GeoIP Latitude: 22.4489] [Source GeoIP Longitude: 113.9984] [Source or Destination GeoIP Longitude: 113.9984] [Stream index: 40] Transmission Control Protocol, Src Port: 80, Dst Port: 49192, Seq: 276884, Ack: 1468, Len: 1352 Source Port: 80 Destination Port: 49192 [Stream index: 77] [Stream Packet Number: 392] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1352] Sequence Number: 276884 (relative sequence number) Sequence Number (raw): 2762856168 [Next Sequence Number: 278236 (relative sequence number)] Acknowledgment Number: 1468 (relative ack number) Acknowledgment number (raw): 3518731413 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 1032 [Calculated window size: 33024] [Window size scaling factor: 32] Checksum: 0x8da8 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 4.642462000 seconds] [Time since previous frame in this TCP stream: 0.008094000 seconds] [SEQ/ACK analysis] [iRTT: 0.081306000 seconds] [Bytes in flight: 1352] [Bytes sent since last PSH flag: 29544] TCP payload (1352 bytes) Hypertext Transfer Protocol File Data: 1352 bytes Data (1352 bytes) 0000 69 b5 4d 0c 35 16 3b 34 58 77 19 f8 ff 44 85 33 i.M.5.;4Xw...D.3 0010 13 dc 56 5c f5 da b0 e1 b3 62 8d f0 be e2 35 31 ..V\.....b....51 0020 55 36 63 9e 70 9f ed b6 60 8a 20 1f 6d d1 21 61 U6c.p...`. .m.!a 0030 6b 46 c2 a2 46 dc d8 88 a8 a1 1e 61 9a c5 80 ae kF..F......a.... 0040 1e 7d da 3a 04 1b 69 31 8d 15 f0 89 63 52 a3 42 .}.:..i1....cR.B 0050 07 b3 ae f6 aa 52 38 2a cb 60 af 60 87 2b 6d 9c .....R8*.`.`.+m. 0060 56 4e 43 57 97 5c fa 0b c4 d5 c5 ac 28 25 27 78 VNCW.\......(%'x 0070 fb 38 b4 05 5f 43 97 f7 19 8c 84 b8 b5 e0 53 1a .8.._C........S. 0080 f9 87 b0 17 fd 0e 9d ca 4f 70 30 4a 08 cf 88 2b ........Op0J...+ 0090 35 c3 78 33 d9 4b ab 16 00 ee a2 81 77 b3 6c c3 5.x3.K......w.l. 00a0 9b 11 82 9c c6 fd e3 98 b0 6e be 96 e0 7e 1e b6 .........n...~.. 00b0 e2 95 58 58 4b 00 57 cc 41 4f d1 d2 69 ea 2f 09 ..XXK.W.AO..i./. 00c0 e3 97 84 f7 f3 84 0f 8f a3 2e 3c 1c 74 e2 56 8f ..........<.t.V. 00d0 0d fb 5e 23 f6 09 4e 31 8d ec d6 40 ab 5c 83 fc ..^#..N1...@.\.. 00e0 66 d0 84 1b 8e 32 dc e8 a8 c4 21 8f cb 55 2b 41 f....2....!..U+A 00f0 d4 7c 12 93 0d c7 30 4b 3b ba 62 2b c4 cd 8e 6a .|....0K;.b+...j 0100 dc f7 37 e2 51 8f 0e 4f 23 04 3b a1 fb 34 e5 a3 ..7.Q..O#.;..4.. 0110 41 f7 e3 28 15 61 e7 1e c2 ed e8 00 f6 23 fd b8 A..(.a.......#.. 0120 c5 b8 1b 1b c4 51 3a 86 87 04 a9 18 f7 7e 30 9c .....Q:......~0. 0130 c4 fd 78 0a bb fd 31 2c 74 77 61 c9 6f 67 07 ab ..x...1,twa.og.. 0140 66 36 d0 84 03 bf d8 e4 c2 86 a3 58 17 ff 26 f7 f6.........X..&. 0150 9e 2f 47 23 78 3e 16 c7 ab c9 11 bc 60 3c 9f 1a ./G#x>......`<.. 0160 c7 b3 cc 38 01 3f c5 8c 91 9d 45 36 23 a7 22 de ...8.?....E6#.". 0170 a5 71 df 1d 1f c1 e1 84 30 6f 02 7c 24 8d dd 54 .q......0o.|$..T 0180 4c 2e 63 7b 6d 38 2a 2f b5 df 48 0e 62 2b 19 c1 L.c{m8*/..H.b+.. 0190 b6 b8 e0 87 ef 2b 62 67 34 2c a7 1a de 9e 99 a1 .....+bg4,...... 01a0 c5 5f c1 7e 32 88 50 23 a1 a1 3a 2e 87 23 7c 35 ._.~2.P#..:..#|5 01b0 5f 48 88 07 eb be 41 0f 7f 87 de a6 53 ac 7b 27 _H....A.....S.{' 01c0 09 97 53 88 19 2f 20 66 b9 84 91 d6 7c c6 25 4c ..S../ f....|.%L 01d0 3a 8b 31 ed 2a c6 5c 57 19 16 3a 14 58 ee aa 64 :.1.*.\W..:.X..d 01e0 fd a6 bc 74 57 63 cd 53 c5 fa 57 86 2b dd 4a 3e ...tWc.S..W.+.J> 01f0 a6 c0 6a 67 31 16 5d f9 98 73 9e 67 96 78 06 93 ..jg1.]..s.g.x.. 0200 04 fa a8 91 86 ae 63 67 d0 7c 1c 71 1a 7e ac e9 ......cg.|.q.~.. 0210 53 82 fc 23 02 99 50 ae f8 0d 41 fe 2b f4 29 ff S..#..P...A.+.). 0220 07 7a 85 7d 2b ff 46 da 77 50 c0 5b 58 b8 f2 17 .z.}+.F.wP.[X... 0230 12 e2 03 8a bf e1 6b 7f 4b 93 ff 0c 43 35 c7 10 ......k.K...C5.. 0240 6f 3c c9 f7 62 27 a3 39 8f 28 85 28 6a 28 44 3f o<..b'.9.(.(j(D? 0250 8d bc df 58 8a 5e 66 ac 41 8a 8f 47 a7 40 67 73 ...X.^f.A..G.@gs 0260 11 da 09 40 87 00 60 c3 25 74 8b a1 4c 7d 29 86 ...@..`.%t..L}). 0270 c8 15 71 21 d6 34 25 6b 81 ed f3 8a a3 8e 10 6f ..q!.4%k.......o 0280 a2 85 eb 70 4d ec 05 eb 31 11 e8 26 5c 75 19 b1 ...pM...1..&\u.. 0290 da 66 c2 52 8b 11 33 56 1d a6 d8 76 26 2d 8d b9 .f.R..3V...v&-.. 02a0 d2 dc c4 ce aa 51 42 7c 42 57 8b 09 66 cb e3 ba .....QB|BW..f... 02b0 0a 02 bd 0a 23 5a 05 6f 17 62 8c 9f 6d 4c 5f c0 ....#Z.o.b..mL_. 02c0 db 05 cc 58 78 df 74 19 23 a6 02 82 fd 32 86 08 ...Xx.t.#....2.. 02d0 74 99 49 68 0a d0 cb cf e9 6d 2c 26 d0 0b e0 25 t.Ih.....m,&...% 02e0 a4 dd 8d a5 68 67 26 de 2a 3f fb 25 59 b6 a9 f3 ....hg&.*?.%Y... 02f0 e1 a0 d8 39 9a 99 35 d3 f2 ed f5 b9 68 e1 6d ab ...9..5.....h.m. 0300 98 61 a6 12 1b 4d 30 68 e3 c6 ea 9c 91 ab 2b 4f .a...M0h......+O 0310 cb f3 58 ef 45 2c 5a f4 1a f5 b4 62 2d bc a6 66 ..X.E,Z....b-..f 0320 78 f4 cd e8 d4 a8 e1 6e 6a e6 9b d6 b3 d7 a8 83 x......nj....... 0330 55 d5 00 33 e1 2c 20 6d a2 ad 1b 2b 2a a0 2b af U..3., m...+*.+. 0340 80 81 a5 a5 a2 8a 56 57 8d 96 9a 1a 38 eb 6a d0 ......VW....8.j. 0350 d9 d4 c4 1e a8 19 41 75 23 e1 d1 8c 30 3b 88 41 ......Au#...0;.A 0360 51 ea d5 ec 59 1b 30 a0 69 40 84 80 89 9a 6b 91 Q...Y.0.i@....k. 0370 6a a9 c1 84 5b 6c ef 55 87 f5 70 03 ae 0d d5 12 j...[l.U..p..... 0380 06 0d b4 12 2d 8e 66 8c 84 b8 85 96 61 c7 ab 79 ....-.f.....a..y 0390 a3 dc ab 33 37 2b 45 9c d4 cc c1 fc 59 56 4b 88 ...37+E.....YVK. 03a0 8b 25 68 eb ff 62 e3 4f c4 f6 70 62 48 45 5c b5 .%h..b.O..pbHE\. 03b0 29 e7 86 e7 2c fc 9e 28 93 17 71 3b 99 2f 21 7e )...,..(..q;./!~ 03c0 4b 8c 8b 47 df 8d 8d 47 08 f1 50 31 f6 7a cb b1 K..G...G..P1.z.. 03d0 17 28 c7 8e 5f 89 1d 4f 25 61 5e 85 4d 56 e8 2d .(.._..O%a^.MV.- 03e0 4f 0d b6 ba eb 58 99 eb 70 d5 53 4f b8 d6 11 e2 O....X..p.SO.... 03f0 35 58 63 aa b6 d2 5e c7 4a a0 62 8f 5e 85 39 a6 5Xc...^.J.b.^.9. 0400 7c 02 e2 a3 4c ed 86 09 ea 14 8d 3b ce 03 18 6d |...L......;...m 0410 e2 41 6d 16 43 27 a5 32 92 3a 1a 3b 2b c3 18 0d .Am.C'.2.:.;+... 0420 3c 63 ad a3 e1 34 32 fd 6b c2 62 7b 33 96 5d 34 ....5w.. 0440 10 e5 15 8f 5d c6 92 cb 84 05 a7 01 f3 ac 88 53 ....]..........S 0450 6d 3a 39 7e 3e 62 6f a2 5d b1 b4 35 d1 48 9a 90 m:9~>bo.]..5.H.. 0460 62 a5 8c 1b 6b d8 18 54 3c 16 d5 3c 26 b4 99 a6 b...k..T<..<&... 0470 72 f8 1b 14 4c f7 68 e7 b5 0a b4 55 0b 98 17 a1 r...L.h....U.... 0480 b5 bc 00 96 f2 4b 30 2b 2e c1 a8 38 07 7d c9 69 .....K0+...8.}.i 0490 e8 8a 4e 43 53 78 42 86 fa e2 17 d0 5d f8 04 26 ..NCSxB.....]..& 04a0 86 95 26 de 7a e9 03 38 f2 df 87 b3 f8 03 cc 75 ..&.z..8.......u 04b0 37 4a 13 7f 35 1d c2 db d9 3e bc cd 88 99 28 3e 7J..5....>....(> 04c0 1a b9 00 b9 0b 6f 46 05 c4 3b 69 db 8c 54 3b 5e .....oF..;i..T;^ 04d0 c5 5b 19 0e bc 8c d8 e5 ed 97 71 3e 96 70 e1 f9 .[........q>.p.. 04e0 90 43 82 f6 21 e3 51 b4 15 8f 06 6d b8 1d b2 e1 .C..!.Q....m.... 04f0 66 8f 15 07 41 33 4b 0b 6e 85 5b 71 27 dc 86 9b f...A3K.n.[q'... 0500 ec 04 0e 07 4c 38 f0 69 e4 09 4e d1 40 57 d9 b1 ....L8.i..N.@W.. 0510 2e d8 6a 98 1d 55 f3 18 b0 61 69 69 95 86 cb 98 ..j..U...aii.... 0520 a6 d5 2d 9a 2e 61 d3 ce 6c 8b d9 d4 8e ab 1e 3b ..-..a..l......; 0530 9d 0d d8 6c ab c1 8a 95 c7 4c 7d 0e 91 8a 2f 30 ...l.....L}.../0 0540 a8 38 8d 70 e9 69 44 cb .8.p.iD. Data […]: 69b54d0c35163b34587719f8ff44853313dc565cf5dab0e1b3628df0bee235315536639e709fedb6608a201f6dd121616b46c2a246dcd888a8a11e619ac580ae1e7dda3a041b69318d15f0896352a34207b3aef6aa52382acb60af60872b6d9c564e4357975cfa0bc4d5c5ac28252778fb3 [Length: 1352]