Frame 16713: 1406 bytes on wire (11248 bits), 1406 bytes captured (11248 bits) Encapsulation type: Ethernet (1) Arrival Time: Jul 22, 2017 02:51:11.134608000 UTC UTC Arrival Time: Jul 22, 2017 02:51:11.134608000 UTC Epoch Arrival Time: 1500691871.134608000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000143000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 456.609259000 seconds] Frame Number: 16713 Frame Length: 1406 bytes (11248 bits) Capture Length: 1406 bytes (11248 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) Destination: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 3] Internet Protocol Version 4, Src: 63.217.21.41, Dst: 172.16.45.52 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1392 Identification: 0xbf80 (49024) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 59 Protocol: TCP (6) Header Checksum: 0xdc26 [validation disabled] [Header checksum status: Unverified] Source Address: 63.217.21.41 Destination Address: 172.16.45.52 [Source GeoIP: Tin Shui Wai, HK, ASN 3491, CONSOLE-CONNECT-ASN] [Source GeoIP City: Tin Shui Wai] [Source or Destination GeoIP City: Tin Shui Wai] [Source GeoIP Country: Hong Kong] [Source or Destination GeoIP Country: Hong Kong] [Source GeoIP ISO Two Letter Country Code: HK] [Source or Destination GeoIP ISO Two Letter Country Code: HK] [Source GeoIP AS Number: 3491] [Source or Destination GeoIP AS Number: 3491] [Source GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source or Destination GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source GeoIP Latitude: 22.4489] [Source or Destination GeoIP Latitude: 22.4489] [Source GeoIP Longitude: 113.9984] [Source or Destination GeoIP Longitude: 113.9984] [Stream index: 40] Transmission Control Protocol, Src Port: 80, Dst Port: 49192, Seq: 356652, Ack: 1468, Len: 1352 Source Port: 80 Destination Port: 49192 [Stream index: 77] [Stream Packet Number: 484] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1352] Sequence Number: 356652 (relative sequence number) Sequence Number (raw): 2762935936 [Next Sequence Number: 358004 (relative sequence number)] Acknowledgment Number: 1468 (relative ack number) Acknowledgment number (raw): 3518731413 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 1032 [Calculated window size: 33024] [Window size scaling factor: 32] Checksum: 0x5de6 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 4.876564000 seconds] [Time since previous frame in this TCP stream: 0.000143000 seconds] [SEQ/ACK analysis] [iRTT: 0.081306000 seconds] [Bytes in flight: 2704] [Bytes sent since last PSH flag: 75712] TCP payload (1352 bytes) Hypertext Transfer Protocol File Data: 1352 bytes Data (1352 bytes) 0000 4d 19 e8 6e 48 43 17 57 6f 63 3a ba 5b b2 b9 32 M..nHC.Woc:.[..2 0010 d0 db 92 8c a1 d6 54 0d ee ad 59 84 78 1e 46 af ......T...Y.x.F. 0020 d3 d6 fb c4 ea c5 ee 09 ef 11 13 16 46 4d 58 be ............FMX. 0030 55 8c a5 b1 62 2c 4e 94 62 e9 b6 4d 19 f9 ba 40 U...b,N.b..M...@ 0040 5c 2e ac ce da ec 17 5a 2b b0 bb 64 c3 dd e5 4a \......Z+..d...J 0050 ae 32 02 bd 5a 65 cd 3c 96 ce 89 9b cd 2a cf fc .2..Ze.<.....*.. 0060 29 cf 32 a4 00 e9 c1 72 93 36 14 42 ef 26 79 e2 ).2....r.6.B.&y. 0070 87 54 3f 71 89 89 0b c4 2b 08 f1 86 b4 8b e8 cc .T?q....+....... 0080 b9 a2 99 b8 55 2a 36 65 d2 7d 24 96 db e3 b1 29 ....U*6e.}$....) 0090 65 f7 52 ec 33 a2 5d 24 7c 3d 99 87 fd 99 5c 0d e.R.3.]$|=....\. 00a0 e2 8b 06 fc 2a 26 ce f5 fb 9a 55 cb 15 17 88 6f ....*&....U....o 00b0 12 d0 5b 55 04 39 2d 7b 87 a0 be 4b e3 56 61 14 ..[U.9-{...K.Va. 00c0 b9 90 59 81 ff 91 8e 85 f7 b8 a4 dc fe 9e 8d 16 ..Y............. 00d0 5e a6 ba 17 4a df 94 df 64 34 db 4a 21 7e 92 21 ^...J...d4.J!~.! 00e0 c9 f3 79 78 3f 43 48 4e 66 aa 3e e2 af 46 93 f0 ..yx?CHNf.>..F.. 00f0 6a 24 09 2f 09 f1 e7 43 c9 aa f9 d5 a3 de 58 3c j$./...C......X< 0100 90 98 38 2d fc 21 ef 4b 6c fc b1 40 9c 3f f3 f3 ..8-.!.Kl..@.?.. 0110 11 81 78 36 9e 8f e5 ab ac 1a 89 89 0b c4 0f 66 ..x6...........f 0120 4b b1 4f 13 38 b0 43 fc c3 92 06 f1 0f cb 32 a5 K.O.8.C.......2. 0130 a8 e4 0b c4 65 86 df bc f9 bf 20 ae 7a a7 08 bc ....e..... .z... 0140 a5 8f ca 9c f4 4d d1 7f 01 f9 6a 2e de 48 86 8a .....M....j..H.. 0150 3d 2e fe 8e 67 25 07 bb 95 5a 76 8a d8 f8 d3 56 =...g%...Zv....V 0160 35 7e 4d ca ea 7f 79 d9 af ec 5b 2b b9 a7 8d ef 5~M...y...[+.... 0170 f5 ab c1 ae bf 4b 41 c3 eb eb aa 77 8a d8 b8 1a .....KA....w.... 0180 d5 26 6d 69 ef 35 e0 ad e4 89 4b 03 2c 6e 16 2f .&mi.5....K.,n./ 0190 08 f1 c7 d2 53 5c 7a a7 dc b4 87 92 a4 77 4a ab ....S\z......wJ. 01a0 9f ea 62 b8 52 a5 41 7c 9a a7 b9 b3 fc 00 4e db ..b.R.A|......N. 01b0 a7 dc cf e7 1e 52 b3 34 e7 f3 ff 2f 88 13 f0 0b .....R.4.../.... 01c0 f6 f9 9b b7 73 cf c0 12 ed 4c f3 14 68 47 11 6c ....s....L..hG.l 01d0 34 49 7f 3f 35 b7 32 26 28 18 c9 91 91 08 f6 74 4I.?5.2&(......t 01e0 46 a8 af 0b 82 5c bf 55 a6 1b 1b e4 01 df 2b c7 F....\.U......+. 01f0 55 89 7c b8 af 3b 3c 2f 7c 03 2f de 16 80 8b 89 U.|..;Ep.S.. 0230 2c 16 bf 6b 87 08 f7 43 7c ed 21 b8 11 d2 de d7 ,..k...C|.!..... 0240 68 ea ae 27 e1 e7 f6 1d 02 af 9d 44 80 e7 19 04 h..'.......D.... 0250 b8 7e 85 40 cf 13 b4 eb 4b 88 f6 b3 5b be f7 25 .~.@....K...[..% 0260 24 d2 ce 63 68 fb f1 21 de 84 f6 15 6e 4a 5e fc $..ch..!....nJ^. 0270 99 3d 11 17 e0 c5 c7 fc 91 18 12 80 64 c2 3b 25 .=..........d.;% 0280 3a 02 49 91 a1 48 8d 8b 42 1a 57 66 92 0e 29 b1 :.I..H..B.Wf..). 0290 71 88 a7 45 27 c7 c5 21 8b 06 9d 93 95 87 dc 8c q..E'..!........ 02a0 5c 98 f2 cd 30 16 16 23 3f ab 00 05 7a 23 72 d2 \...0..#?...z#r. 02b0 72 91 9b a9 57 f7 8d 7a 03 72 78 3b 2d 29 91 80 r...W..z.rx;-).. 02c0 4f 45 46 4a 2a 0c 79 79 28 32 14 a2 d4 64 84 ad OEFJ*.yy(2...d.. 02d0 a8 18 36 73 01 ac c6 2c 54 5b b2 51 aa 0f 87 35 ..6s...,T[.Q...5 02e0 3b 02 d5 e6 28 75 f1 b2 b7 36 06 9b b4 b9 d5 f1 ;...(u...6...... 02f0 62 0c 34 47 a3 af 3e 0e ed 55 51 a8 2d 0e 43 71 b.4G..>..UQ.-.Cq 0300 b6 3f ca 0c b1 b0 e4 c6 71 53 e0 86 18 ea 83 e4 .?......qS...... 0310 64 da 78 44 ac 6a 97 1b 1d 93 02 7f bf 60 84 85 d.xD.j.......`.. 0320 c7 22 3c 2c 1a 61 21 11 e8 ce 8b c2 8a e5 7b 42 ."<,.a!.......{B 0330 9c 20 36 9f e5 91 b0 36 11 d6 3c ae 98 8f aa 6e . 6....6..<....n 0340 95 eb 62 e0 66 01 f9 77 1a c4 8d 47 b8 be 22 e8 ..b.f..w...G..". 0350 4f 63 d5 7c 92 5f a7 ad 13 ec ab e6 e3 ff 02 fe Oc.|._.......... 0360 31 2e 3e 47 c2 31 66 47 2c f3 7b ac 5a ce 63 dd 1.>G.1fG,.{.Z.c. 0370 ea 8c cd 72 0f 6c 54 06 62 bb 4e 2e b8 27 e0 7e ...r.lT.b.N..'.~ 0380 b7 a4 15 ea f1 74 ca 84 e7 8b 65 78 b3 59 a5 e4 .....t....ex.Y.. 0390 e4 e3 93 0e 95 6d f2 d7 de 30 a1 3d a6 42 29 ff .....m...0.=.B). 03a0 f9 61 5c 5d d8 94 10 8a 8c 4f fb 4d e6 5f be 92 .a\].....O.M._.. 03b0 d2 f5 4e bc bd d7 85 e7 5b 6d 04 5e 23 b6 17 6b ..N.....[m.^#..k 03c0 b1 32 5d 45 eb 2d c3 f4 48 09 8d bb 98 76 6c c6 .2]E.-..H....vl. 03d0 68 a7 91 36 5d 40 d8 16 72 99 d0 d5 9a 8d ce 86 h..6]@..r....... 03e0 4c 02 3b 13 1d 75 19 68 ad 4c 42 47 75 8a 3a 36 L.;..u.h.LBGu.:6 03f0 57 24 a2 95 b7 db ab 93 d0 56 95 8c 56 ae b6 0a W$.......V..V... 0400 7e bd 2a 05 d7 6b 32 d1 5e 4b a0 d7 67 10 f8 29 ~.*..k2.^K..g..) 0410 e8 6b 49 41 0f 4d bc 97 50 17 5b 1f e9 2e c0 cd .kIA.M..P.[..... 0420 5e 23 46 fb 0b 55 da e1 d4 50 21 16 46 8c aa ff ^#F..U...P!.F... 0430 fb 92 ac db 25 58 be 6d c5 f2 a4 55 65 bf ac 4f ....%X.m...Ue..O 0440 97 62 63 da 8a ad e9 32 6c ce d8 b0 33 a7 15 09 .bc....2l...3... 0450 dd 59 fc 54 28 24 55 9f ff 6a 81 4b 33 7f bc d1 .Y.T($U..j.K3... 0460 84 07 2b 4d 5a 9e b8 f4 12 37 f8 11 e2 be 0e 30 ..+MZ....7.....0 0470 d3 c4 cb a2 be 43 75 c2 39 34 65 5d 46 a7 fe 2a .....Cu.94e]F..* 0480 4d dc 5b 85 53 c6 ab 42 54 4c 7c a5 5d a7 20 7e M.[.S..BTL|.]. ~ 0490 97 56 fb 60 44 0b 4d bc 9d cc c7 de 74 be 76 61 .V.`D.M.....t.va 04a0 73 c9 48 0b 2f c1 af 2b 5a ff 94 df 65 6d 94 ab s.H./..+Z...em.. 04b0 90 ca 9f 3b d5 04 b3 95 26 6e a5 91 97 d3 c4 09 ...;....&n...... 04c0 72 ae ff 10 e0 ff 70 09 d8 25 7f fc 2f 39 f2 eb r.....p..%../9.. 04d0 7f 6e 13 ea 1b 56 fc 26 0d b5 96 a5 97 b8 a4 18 .n...V.&........ 04e0 16 e2 60 5a 2a 36 b3 f1 e6 76 2a 5e 8d 11 e2 37 ..`Z*6...v*^...7 04f0 93 69 e2 b4 70 31 f1 41 82 bb 27 16 f7 09 72 01 .i..p1.A..'...r. 0500 f8 a3 81 44 3c e2 e9 9a 58 b8 ac 97 32 0f f4 66 ...D<...X...2..f 0510 0e 5e dc 2a e0 19 84 41 01 5c d6 fb d9 52 05 f2 .^.*...A.\...R.. 0520 77 72 9c 2f 55 10 17 03 ff 61 e5 0b c4 3f 5d dc wr./U....a...?]. 0530 94 21 d0 ef e7 8b 3e 43 fc 60 c1 a8 c5 c9 79 7c .!....>C.`....y| 0540 33 9b 4b 88 67 71 e5 e0 3.K.gq.. Data […]: 4d19e86e484317576f633aba5bb2b932d0db928ca1d6540deead5984781e46afd3d6fbc4eac5ee09ef111316464d58be558ca5b1622c4e9462e9b64d19f9ba405c2eaccedaec175a2bb0bb64c3dde54aae3202bd5a65cd3c96ce899bcd2acffc29cf32a400e9c17293361442ef2679e2875 [Length: 1352]