Frame 16765: 1406 bytes on wire (11248 bits), 1406 bytes captured (11248 bits) Encapsulation type: Ethernet (1) Arrival Time: Jul 22, 2017 02:51:11.175440000 UTC UTC Arrival Time: Jul 22, 2017 02:51:11.175440000 UTC Epoch Arrival Time: 1500691871.175440000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000035000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 456.650091000 seconds] Frame Number: 16765 Frame Length: 1406 bytes (11248 bits) Capture Length: 1406 bytes (11248 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) Destination: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 3] Internet Protocol Version 4, Src: 63.217.21.41, Dst: 172.16.45.52 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1392 Identification: 0x6adb (27355) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 59 Protocol: TCP (6) Header Checksum: 0x30cc [validation disabled] [Header checksum status: Unverified] Source Address: 63.217.21.41 Destination Address: 172.16.45.52 [Source GeoIP: Tin Shui Wai, HK, ASN 3491, CONSOLE-CONNECT-ASN] [Source GeoIP City: Tin Shui Wai] [Source or Destination GeoIP City: Tin Shui Wai] [Source GeoIP Country: Hong Kong] [Source or Destination GeoIP Country: Hong Kong] [Source GeoIP ISO Two Letter Country Code: HK] [Source or Destination GeoIP ISO Two Letter Country Code: HK] [Source GeoIP AS Number: 3491] [Source or Destination GeoIP AS Number: 3491] [Source GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source or Destination GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source GeoIP Latitude: 22.4489] [Source or Destination GeoIP Latitude: 22.4489] [Source GeoIP Longitude: 113.9984] [Source or Destination GeoIP Longitude: 113.9984] [Stream index: 40] Transmission Control Protocol, Src Port: 80, Dst Port: 49194, Seq: 27678, Ack: 1475, Len: 1352 Source Port: 80 Destination Port: 49194 [Stream index: 79] [Stream Packet Number: 44] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1352] Sequence Number: 27678 (relative sequence number) Sequence Number (raw): 4187076045 [Next Sequence Number: 29030 (relative sequence number)] Acknowledgment Number: 1475 (relative ack number) Acknowledgment number (raw): 2526152589 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 1033 [Calculated window size: 33056] [Window size scaling factor: 32] Checksum: 0x86fb [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 4.638535000 seconds] [Time since previous frame in this TCP stream: 0.000035000 seconds] [SEQ/ACK analysis] [iRTT: 0.076622000 seconds] [Bytes in flight: 2704] [Bytes sent since last PSH flag: 8112] TCP payload (1352 bytes) Hypertext Transfer Protocol File Data: 1352 bytes Data (1352 bytes) 0000 2a e4 5b ae 15 5f 1a 5f 9b aa f4 80 2c e1 01 d2 *.[.._._....,... 0010 d3 4f 42 26 2f f1 16 89 89 24 c6 8f 94 f2 90 2e .OB&/....$...... 0020 67 74 f5 d2 7c 65 bd 9d de 9f 02 3f 2a e9 7a 54 gt..|e.....?*.zT 0030 94 45 49 e5 53 6e b8 96 88 cd 37 72 67 27 ab 07 .EI.Sn....7rg'.. 0040 53 a0 44 c5 ed b1 22 60 b4 de c9 4f d4 63 95 bc S.D..."`...O.c.. 0050 99 4d ab a9 84 14 0d 0b b6 c9 f5 b0 30 35 92 69 .M..........05.i 0060 98 f1 6e 01 1c ab bb e1 82 65 b8 a6 24 39 22 1b ..n......e..$9". 0070 97 b9 8c c6 e5 34 36 ad 52 31 95 89 5a 26 60 94 .....46.R1..Z&`. 0080 c9 b4 2b 95 d9 66 7d ae 3d b8 40 a1 5e 0d aa 98 ..+..f}.=.@.^... 0090 be 27 50 5c 09 06 19 02 45 15 41 04 2a 3d 78 ee .'P\....E.A.*=x. 00a0 75 4d cd a5 1b 1b 42 64 6d 62 7a 3f 4c 51 65 57 uM....Bdmbz?LQeW 00b0 ae bb 02 81 7a 54 41 37 b5 84 69 8e ee 6f 7c a6 ....zTA7..i..o|. 00c0 11 12 37 c7 6b 89 c2 46 24 9f 70 e3 66 35 63 b7 ..7.k..F$.p.f5c. 00d0 e6 c7 2d 92 30 fc 41 47 56 f0 01 8f 6d e8 76 3c ..-.0.AGV...m.v< 00e0 95 2f 35 8a f5 d6 a3 47 ff c7 ff 78 f4 b9 47 8f ./5....G...x..G. 00f0 2a df ff dd d4 77 6f 85 7e e6 27 fe 7d 7b 78 2d *....wo.~.'.}{x- 0100 16 ad 97 f2 86 42 7c aa 53 49 32 a0 dc 01 48 0f .....B|.SI2...H. 0110 24 02 e5 21 71 df 98 19 2a 27 13 50 82 9c 9b 2a $..!q...*'.P...* 0120 6c 0c c5 0e 27 f3 1b 13 59 92 54 69 5a 57 d5 50 l...'...Y.TiZW.P 0130 3e 1a ae 27 c3 f3 f5 d4 ee 78 61 6f 3c bf 35 9a >..'.....xao<.5. 0140 05 db 1e cb af 0c 67 87 f2 b1 58 c8 32 0d cd 30 ......g...X.2..0 0150 54 dd 50 34 5d ee d1 14 c7 b2 53 e1 58 35 9e 6e T.P4].....S.X5.n 0160 a7 f3 13 e9 6c 3b 1e cd 45 4c 33 aa f0 29 8d cb ....l;..EL3..).. 0170 9b 7c d1 e4 72 3a 9d d2 d9 b8 6d c4 c3 c9 54 b2 .|..r:....m...T. 0180 56 80 a0 59 18 6f 94 67 89 e0 00 87 f4 09 98 87 V..Y.o.g........ 0190 e7 21 b1 f2 50 28 86 78 7d 20 13 b6 66 b1 14 af .!..P(.x} ..f... 01a0 ca 0a d9 e7 4f 39 66 42 a3 ea 51 bd 6c 32 86 41 ....O9fB..Q.l2.A 01b0 96 72 85 cd 99 9d e1 4a f3 e2 a5 6f 6f 0f c7 b7 .r.....J...oo... 01c0 a6 9a d7 ae bc 57 a8 64 1d 99 8a db fc c1 e2 48 .....W.d.......H 01d0 d6 a4 b7 db 21 97 13 45 28 e8 9f 0a b0 9f f8 11 ....!..E(....... 01e0 07 f3 1a 41 2f 94 5e bb 25 fe 77 7e fd 17 ff b7 ...A/.^.%.w~.... 01f0 87 d1 ef 5d 95 c3 3e a6 9c 5b cc 84 c9 52 de 9c ...]..>..[...R.. 0200 ed 28 ff e7 9f 7f f5 d1 ff f5 7b 6f bd f6 7a bb .(........{o..z. 0210 06 d7 9f f9 ab ff fd cf ee 2c 17 5d d5 6a 26 dd .........,.].j&. 0220 73 93 f9 cd 56 f4 ca 52 63 79 24 8e 61 32 24 e2 s...V..Rcy$.a2$. 0230 8e 93 c8 47 9c 46 d2 9d af 27 76 3a d9 9d 4e 7a ...G.F...'v:..Nz 0240 a3 9d dc 1c 49 6e 8d a6 17 9a a9 6a 32 62 aa 26 ....In.....j2b.& 0250 c7 69 bc a0 49 32 80 64 f6 58 aa 6b 9b 09 c7 c9 .i..I2.d.X.k.... 0260 b9 a1 42 24 52 8c 47 0b b1 50 3c 6a 68 71 95 cb ..B$R.G..P}. 02c0 71 b2 de ce 2a 8a a6 06 65 57 8c 18 6c de e1 0d q...*...eW..l... 02d0 bc 77 6d 38 ef 10 e4 f3 17 6e 68 24 a6 f9 7a 92 .wm8.....nh$..z. 02e0 8c 67 ab 6c 9e cc 6a f7 57 dc 06 d7 f3 fa 34 33 .g.l..j.W.....43 02f0 11 25 e2 18 73 b4 f0 e3 71 d5 2a 44 23 9d 5a ed .%..s...q.*D#.Z. 0300 fa a3 47 9d 85 cd 10 13 b6 55 51 a2 e4 31 a8 51 ..G......UQ..1.Q 0310 b3 e5 af bd 7d 36 16 8a 8c 64 d3 e0 68 4b 83 b1 ....}6...d..hK.. 0320 e3 b9 ca ce 70 02 32 29 24 40 9b 7a 2c 1b b2 1f ....p.2)$@.z,... 0330 63 b4 35 9a d9 1a 49 6d 0c c7 37 db 89 cd 76 72 c.5...Im..7...vr 0340 ae 1e 2f 46 5d 55 d0 68 4a a6 69 55 14 2d 4d 0b ../F]U.hJ.iU.-M. 0350 f5 d8 a2 62 89 9a 26 e8 aa 08 71 55 b7 35 3d a4 ...b..&...qU.5=. 0360 6b 61 45 88 29 4c 5a 67 81 47 79 83 cd 19 4c 25 kaE.)LZg.Gy...L% 0370 24 0d e7 dc 76 21 3e 5c 48 8f 96 6a 13 b5 f6 54 $...v!>\H..j...T 0380 63 ac fb 63 4e c0 eb 1f e8 1d 38 f3 29 55 e4 18 c..cN.....8.)U.. 0390 12 32 39 44 e4 48 d8 48 79 02 11 9a 9f a8 db 49 .29D.H.Hy......I 03a0 0b b3 98 60 d9 95 00 f1 bd 5a f6 6f 3e de 7e 7b ...`.....Z.o>.~{ 03b0 37 7e 3c 02 e9 ef ca f2 60 7c 65 62 f0 c2 8d e5 7~<.....`|eb.... 03c0 37 9e bf 58 4a ca 51 15 a7 fa 9f ae 38 c1 c3 66 7..XJ.Q.....8..f 03d0 64 be 10 be b8 38 77 7e 72 ee c3 1b e7 df da 2d d....8w~r......- 03e0 3d b7 a0 dc 98 b5 3b 29 f1 d1 7f fa 39 19 0d ea =.....;)....9... 03f0 c1 fe 56 a6 ec 32 72 39 11 9e 9f 68 ae 4d 4c 4e ..V..2r9...h.MLN 0400 5b da ef ff 8b 5f 9c 59 bd 73 30 35 ef 4a ce 73 [...._.Y.s05.J.s 0410 d7 9f fd f6 57 bf 92 4d e4 46 72 f9 b5 76 7c ad ....W..M.Fr..v|. 0420 9d 39 3f 5d 5b ef 94 34 5d 40 82 50 57 cb 19 37 .9?][..4]@.PW..7 0430 54 4f 84 e7 ea 40 9f cc e6 48 7a 63 38 b1 d5 4e TO...@...Hzc8..N 0440 6e b5 53 73 b5 58 31 66 1b 92 ca 31 12 cb 28 a2 n.Ss.X1f...1..(. 0450 60 ea 6a b8 27 24 f0 0e c7 e9 34 03 35 91 25 32 `.j.'$....4.5.%2 0460 21 95 0b ab 6c 58 a6 23 12 99 50 e8 8c ce 64 34 !...lX.#..P...d4 0470 3a 63 30 b5 98 36 53 4b ec 8c 66 0f 26 72 7b 63 :c0..6SK..f.&r{c 0480 a5 dd d1 da f6 68 1d f1 f6 43 b9 0d 64 e9 de 03 .....h...C..d... 0490 c1 fc b6 4e 13 c8 d3 1c e5 2d 85 84 37 e7 aa 51 ...N.....-..7..Q 04a0 9a 8c aa ba c3 e3 09 4d 8b 09 4c db 51 55 9e fb .......M..L.QU.. 04b0 fb ef ae be 7a ae fc f1 73 ab 9f bb 37 fd fe ad ....z...s...7... 04c0 91 f6 a0 3b 3c 14 2b 58 4c 39 a5 44 14 54 24 02 ...;<.+XL9.D.T$. 04d0 29 ae 7f 48 f3 7f ef 17 de 78 f1 e2 ce bb e7 f7 )..H.....x...... 04e0 7e e5 c6 e1 33 1b a1 17 56 73 77 57 c2 2f ac d7 ~...3...VswW./.. 04f0 2f 75 72 13 05 59 78 b2 e7 de 85 3b ed f8 d0 62 /ur..Yx....;...b 0500 6e 6f b2 3c f6 97 7f f2 de 77 3f be f7 07 5f b9 no.<.....w?..._. 0510 f3 67 df fa c9 5c 38 d3 2a 14 36 66 5e fe bb bf .g...\8.*.6f^... 0520 ff fb 62 a2 59 4b e5 16 6a 89 a5 66 64 b6 66 cd ..b.YK..j..fd.f. 0530 76 4a 86 a6 13 41 c9 50 32 f9 48 aa 16 8f 4d 57 vJ...A.P2.H...MW 0540 53 eb c3 d9 8d 76 7a bd S....vz. Data […]: 2ae45bae155f1a5f9baaf4802ce101d2d34f42262ff116898924c68f94f2902e6774f5d27c65bd9dde9f023f2ae97a54944549e5536eb89688cd37726727ab0753a044c5edb12260b4dec94fd46395bc994daba984140d0bb6c9f5b03035926998f16e011cabbbe18265b8a62439221b97b [Length: 1352]