Frame 16547: 1406 bytes on wire (11248 bits), 1406 bytes captured (11248 bits) Encapsulation type: Ethernet (1) Arrival Time: Jul 22, 2017 02:51:10.907416000 UTC UTC Arrival Time: Jul 22, 2017 02:51:10.907416000 UTC Epoch Arrival Time: 1500691870.907416000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.002865000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 456.382067000 seconds] Frame Number: 16547 Frame Length: 1406 bytes (11248 bits) Capture Length: 1406 bytes (11248 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) Destination: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 3] Internet Protocol Version 4, Src: 63.217.21.41, Dst: 172.16.45.52 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1392 Identification: 0xbf4c (48972) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 59 Protocol: TCP (6) Header Checksum: 0xdc5a [validation disabled] [Header checksum status: Unverified] Source Address: 63.217.21.41 Destination Address: 172.16.45.52 [Source GeoIP: Tin Shui Wai, HK, ASN 3491, CONSOLE-CONNECT-ASN] [Source GeoIP City: Tin Shui Wai] [Source or Destination GeoIP City: Tin Shui Wai] [Source GeoIP Country: Hong Kong] [Source or Destination GeoIP Country: Hong Kong] [Source GeoIP ISO Two Letter Country Code: HK] [Source or Destination GeoIP ISO Two Letter Country Code: HK] [Source GeoIP AS Number: 3491] [Source or Destination GeoIP AS Number: 3491] [Source GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source or Destination GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source GeoIP Latitude: 22.4489] [Source or Destination GeoIP Latitude: 22.4489] [Source GeoIP Longitude: 113.9984] [Source or Destination GeoIP Longitude: 113.9984] [Stream index: 40] Transmission Control Protocol, Src Port: 80, Dst Port: 49192, Seq: 286348, Ack: 1468, Len: 1352 Source Port: 80 Destination Port: 49192 [Stream index: 77] [Stream Packet Number: 404] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1352] Sequence Number: 286348 (relative sequence number) Sequence Number (raw): 2762865632 [Next Sequence Number: 287700 (relative sequence number)] Acknowledgment Number: 1468 (relative ack number) Acknowledgment number (raw): 3518731413 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 1032 [Calculated window size: 33024] [Window size scaling factor: 32] Checksum: 0xe0bc [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 4.649372000 seconds] [Time since previous frame in this TCP stream: 0.002865000 seconds] [SEQ/ACK analysis] [iRTT: 0.081306000 seconds] [Bytes in flight: 1352] [Bytes sent since last PSH flag: 9464] TCP payload (1352 bytes) Hypertext Transfer Protocol File Data: 1352 bytes Data (1352 bytes) 0000 4d ef 86 54 98 da 4e db 2b 99 99 54 b2 12 54 c9 M..T..N.+..T..T. 0010 99 02 4b 1d 35 58 ea 6a 92 10 5f eb 6a c8 41 9c ..K.5X.j.._.j.A. 0020 15 50 6c 55 76 2d 60 92 20 bf e6 cf c5 0e 2b 9a .PlUv-`. .....+. 0030 78 7c 9b b7 b7 68 e9 a2 dc 16 27 66 3c f6 bf 0c x|...h....'f<... 0040 b1 6c 09 33 f7 3a f8 78 ce ce b7 7c 6d 7c 9e 00 .l.3.:.x...|m|.. 0050 f7 88 71 3f 33 d6 ba 2d 58 68 13 b3 56 34 4c 7d ..q?3..-Xh..V4L} 0060 99 2a d2 28 26 cd b5 18 37 a9 68 70 2a c4 0c 2a .*.(&...7.hp*..* 0070 44 b5 65 08 13 e0 c2 c4 c5 a2 5e bd 35 97 65 f8 D.e.......^.5.e. 0080 aa 4f 13 de c7 25 c4 fd d5 5f 10 d8 9f 49 88 f7 .O...%..._...I.. 0090 56 fe 8e f1 3e 8d fc 37 e8 a9 fe 2d fa ab 7e 81 V...>..7...-..~. 00a0 40 c5 3f 10 e4 ef f3 f7 e5 b1 a3 85 8b 69 85 6f @.?..........i.o 00b0 09 ed 57 69 3b 7e 14 43 2b c3 0e bc 22 bc 5f 26 ..Wi;~.C+..."._& 00c0 c5 09 4d 86 98 2b 9e 6c e5 f3 02 e2 1d 8c 6e 3c ..M..+.l......n< 00d0 16 43 2a 51 07 8f 0b b3 8e 01 1b ae 06 5a b0 e2 .C*Q.........Z.. 00e0 17 4b 8d da 65 63 bb 42 88 4e 36 54 61 b6 41 85 .K..ec.B.N6Ta.A. 00f0 39 83 1a c3 9a 5a 8c da b5 b8 33 1b c1 83 e5 04 9....Z....3..... 0100 ee cd 86 f1 f4 6a 02 3f ec 8f e2 df ee 8d e3 e7 .....j.?........ 0110 eb 13 78 73 25 89 9f 0f 13 f8 f9 d1 75 bc 78 fa ..xs%.......u.x. 0120 04 2f 9f bc c6 ed 5b 4f b1 71 75 0f d7 77 f7 b1 ./....[O.qu..w.. 0130 7d e3 01 16 96 af 23 3b b5 89 cc e4 26 86 53 eb }.....#;....&.S. 0140 b0 d4 74 c1 ac 72 c1 5a eb 40 8b aa 0d 41 83 1f ..t..r.Z.@...A.. 0150 43 ad 21 84 9b 34 98 63 2a be da cb e3 d2 e7 c4 C.!..4.c*....... 0160 f5 78 2f f6 92 bd 04 78 84 00 1f c2 fd c9 34 cb .x/....x......4. 0170 84 b4 ef 3b e3 29 9a 7c 94 75 dd 8b eb c9 01 82 ...;.).|.u...... 0180 3a 26 4f 6c 0a a8 df c9 a6 58 c6 e5 1c 70 31 1e :&Ol.....X...p1. 0190 7e 3d dd 87 ed 58 0f d6 23 5e ac 46 7d e8 65 43 ~=...X..#^.F}.eC 01a0 ed 52 7c 89 ee b2 6f 08 f1 ef f8 db 9e c8 9d cc .R|...o......... 01b0 ac 79 37 16 de 70 0e e1 c6 0b 72 28 25 cd 4e 2e .y7..p....r(%.N. 01c0 6d ca 97 43 29 59 a6 ed 8b cc f4 56 dc 0d 34 52 m..C)Y.....V..4R 01d0 71 32 53 9c d8 33 11 5a 56 1c 86 ec 04 98 5d 6e q2S..3.ZV.....]n 01e0 7b 77 18 6d c7 e1 10 23 e6 64 3b e0 fd 21 a7 7c {w.m...#.d;..!.| 01f0 ec 56 84 c1 f2 40 9c 9f 60 5c 0b 3b b0 11 b2 e2 .V...@..`\.;.... 0200 2a 01 b8 46 00 2e f7 ea c9 06 c2 93 19 f5 74 80 *..F..........t. 0210 50 f5 d4 62 c2 5d 85 d1 f6 72 a4 ed 45 18 b2 e6 P..b.]...r..E... 0220 63 d0 74 0e 21 cd 09 c2 e7 04 06 b5 5f 21 4e 30 c.t.!......._!N0 0230 8f d0 b2 27 ec a7 09 f1 f3 c8 b6 7f 4f 6b 3e 83 ...'........Ok>. 0240 ac f7 0c 66 fc 67 f8 5e f9 e4 4a 11 66 5c 17 31 ...f.g.^..J.f\.1 0250 6e 3d 85 51 cb 39 c6 65 0c b7 14 60 ac 4d 89 0c n=.Q.9.e...`.M.. 0260 b9 31 4d 38 cf 13 cc 4b ec d8 c5 79 b5 d5 a0 e8 .1M8...K...y.... 0270 48 8d b8 1a 34 b2 63 31 62 3d a8 61 30 a3 ed 69 H...4.c1b=.a0..i 0280 66 06 a7 63 06 a6 c3 ad b0 00 b7 91 d9 9d 09 0f f..c............ 0290 23 66 dc 67 06 72 2f da 82 bb 83 56 dc 09 99 59 #f.g.r/....V...Y 02a0 a7 2c b8 ee a7 20 79 8c b8 d2 61 90 36 2e a6 1c .,... y...a.6... 02b0 ce b5 18 fe 3a 3e ce 98 91 40 57 d3 d2 73 20 9f ....:>...@W..s . 02c0 b1 37 12 e0 75 58 63 ac b7 d6 62 53 74 96 1d 35 .7..uXc...bSt..5 02d0 72 43 f0 6d 6f 03 33 9f 7a 6c 53 3e b6 79 7f 83 rC.mo.3.zlS>.y.. 02e0 d2 7a a5 4b cc 96 11 93 19 6a 98 0d d3 ca 29 73 .z.K.....j....)s 02f0 62 99 80 51 b2 21 6d ad 24 23 2b 91 64 47 25 86 b..Q.!m.$#+.dG%. 0300 8c 64 30 9b 1f 32 d2 d2 f5 62 59 01 25 fa 09 f4 .d0..2...bY.%... 0310 5e 4d 09 02 9a 22 78 d9 61 77 ab 15 78 6f d9 ef ^M..."x.aw..xo.. 0320 62 c3 20 b4 19 cb 02 ca c1 4e 82 9a d6 1d 74 cb b. ......N....t. 0330 72 3e 40 f3 f6 76 60 d6 cb db 3e 0f 7b bd 4e de r>@..v`...>.{.N. 0340 76 23 4b 50 4f d3 bc e7 84 79 7b 02 58 e0 63 0b v#KPO....y{.X.c. 0350 3e 37 ef bb 31 d3 d5 8e 39 67 07 7b 19 2b ed db >7..1...9g.{.+.. 0360 88 24 01 1e b5 34 20 6a ae e1 6d da 1e 3f f0 48 .$...4 j..m..?.H 0370 5b 19 26 bb 0a 79 30 8a 70 a5 bf 14 3b 34 f1 43 [.&..y0.p...;4.C 0380 42 fc fe 84 1a 47 19 2d 9e ce ea f0 6c 41 4f 48 B....G.-....lAOH 0390 6b f1 92 36 fe 72 d9 98 8b 45 31 9c 22 40 4e 0b k..6.r...E1."@N. 03a0 17 7b 6b 0a 1b 27 d0 5f 2c 88 2d da 1a 69 e4 2a .{k..'._,.-..i.* 03b0 3c ce d2 c6 33 15 7c 2f 9a f8 78 09 1b 52 3e 6f <...3.|/..x..R>o 03c0 17 30 bd 2d 60 83 52 e0 ce 88 02 b7 46 8a 71 33 .0.-`.R.....F.q3 03d0 55 c8 ff 59 8a 83 a4 02 07 71 25 0e 86 2a b1 27 U..Y.....q%..*.' 03e0 76 fa 19 2c c3 36 3f d3 56 50 89 4d b1 8e 8a b7 v..,.6?.VP.M.... 03f0 1c 57 bb c5 5a 2a 4a ac b6 2b 78 d0 d8 38 5a c5 .W..Z*J..+x..8Z. 0400 3a 2a 45 ec 95 69 3d 34 f0 8c a1 84 f0 2e c8 41 :*E..i=4.......A 0410 5c 57 f4 97 ab b9 c6 4c 05 84 78 09 26 6d c2 c6 \W.....L..x.&m.. 0420 95 98 62 af 2b e6 e9 e6 86 52 6a b0 28 86 52 e4 ..b.+....Rj.(.R. 0430 ca 6b 0d 34 f1 26 5c a1 2d 5d f5 a8 b1 c1 06 b7 .k.4.&\.-]...... 0440 e9 d7 62 93 15 74 3b 68 cc c1 5c 06 a1 2d b6 fd ..b..t;h..\..-.. 0450 f2 8b d9 2b ac b4 ac 74 1b dd 22 15 b4 fe a5 dc ...+...t.."..... 0460 92 c3 2d f6 9c a1 8b b1 3e 8f 85 ef 6d c3 aa cb ..-.....>...m... 0470 80 85 76 02 bc 55 87 89 d6 dc 6a 88 63 d6 3a 69 ..v..U....j.c.:i 0480 e0 69 63 15 e2 cc 1e 22 ba 0a 84 35 a5 18 68 2c .ic...."...5..h, 0490 92 6b bc f4 30 5d f3 57 9f 80 b7 fa 1b f8 2a 8f .k..0].W......*. 04a0 c1 5b 25 82 20 af a4 05 56 7c 81 60 59 2e 02 65 .[%. ...V|.`Y..e 04b0 9f 31 3e e2 ed df 23 50 f9 5b f8 cb 7f 85 9e f2 .1>...#P.[...... 04c0 5f 63 a0 fc 03 6c 32 95 7d 41 20 bf 4d bb f0 26 _c...l2.}A .M..& 04d0 25 c6 c0 75 78 9b 6c 61 88 b1 70 de 8f 59 f1 22 %..ux.la..p..Y." 04e0 2a 40 de 22 e7 94 bf 18 71 e2 e5 44 27 e1 ef c3 *@."....q..D'... 04f0 d3 31 37 ee f2 6f ef 25 5c cc 92 2c cc 9c da 68 .17..o.%\..,...h 0500 8d 2e 3c 20 68 6e f7 99 b0 ed aa c7 06 eb d7 81 ..< hn.......... 0510 b3 15 7b 36 a6 c6 2d 6d b8 d7 d1 8d 3d 57 37 56 ..{6..-m....=W7V 0520 cd 6d 58 70 38 70 38 1c c3 e3 85 09 1c ad 8c 60 .mXp8p8........` 0530 6f ca 8f 25 31 0e 7c 6b 15 0f 1f dc c7 c1 f5 43 o..%1.|k.......C 0540 cc c6 a7 10 6f e9 67 3d ....o.g= Data […]: 4def865498da4edb2b999954b21254c999024b1d3558ea6a92105feb6ac8419c15506c55762d609220bfe6cfc50e2b9a787c9bb7b768e9a2dc1627663cf6bf0cb16c0933f73af878ceceb77c6d7c9e00f788713f33d6ba2d586813b356344c7d992ad22826cdb51837a968702ac40c2a44b [Length: 1352]