Frame 16970: 1406 bytes on wire (11248 bits), 1406 bytes captured (11248 bits) Encapsulation type: Ethernet (1) Arrival Time: Jul 22, 2017 02:51:11.286719000 UTC UTC Arrival Time: Jul 22, 2017 02:51:11.286719000 UTC Epoch Arrival Time: 1500691871.286719000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.004065000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 456.761370000 seconds] Frame Number: 16970 Frame Length: 1406 bytes (11248 bits) Capture Length: 1406 bytes (11248 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) Destination: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 3] Internet Protocol Version 4, Src: 63.217.21.41, Dst: 172.16.45.52 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1392 Identification: 0xbf97 (49047) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 59 Protocol: TCP (6) Header Checksum: 0xdc0f [validation disabled] [Header checksum status: Unverified] Source Address: 63.217.21.41 Destination Address: 172.16.45.52 [Source GeoIP: Tin Shui Wai, HK, ASN 3491, CONSOLE-CONNECT-ASN] [Source GeoIP City: Tin Shui Wai] [Source or Destination GeoIP City: Tin Shui Wai] [Source GeoIP Country: Hong Kong] [Source or Destination GeoIP Country: Hong Kong] [Source GeoIP ISO Two Letter Country Code: HK] [Source or Destination GeoIP ISO Two Letter Country Code: HK] [Source GeoIP AS Number: 3491] [Source or Destination GeoIP AS Number: 3491] [Source GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source or Destination GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source GeoIP Latitude: 22.4489] [Source or Destination GeoIP Latitude: 22.4489] [Source GeoIP Longitude: 113.9984] [Source or Destination GeoIP Longitude: 113.9984] [Stream index: 40] Transmission Control Protocol, Src Port: 80, Dst Port: 49192, Seq: 385044, Ack: 1468, Len: 1352 Source Port: 80 Destination Port: 49192 [Stream index: 77] [Stream Packet Number: 528] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1352] Sequence Number: 385044 (relative sequence number) Sequence Number (raw): 2762964328 [Next Sequence Number: 386396 (relative sequence number)] Acknowledgment Number: 1468 (relative ack number) Acknowledgment number (raw): 3518731413 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 1032 [Calculated window size: 33024] [Window size scaling factor: 32] Checksum: 0xf974 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 5.028675000 seconds] [Time since previous frame in this TCP stream: 0.006557000 seconds] [SEQ/ACK analysis] [iRTT: 0.081306000 seconds] [Bytes in flight: 1352] [Bytes sent since last PSH flag: 106808] TCP payload (1352 bytes) Hypertext Transfer Protocol File Data: 1352 bytes Data (1352 bytes) 0000 78 aa ba 53 76 96 c4 9d 92 f9 1b c4 ef 08 c4 09 x..Sv........... 0010 a5 07 25 78 f9 b0 02 07 4f 6b d4 9d f2 46 c2 0c ..%x....Ok...F.. 0020 d7 04 e4 ad 0a f1 f7 5b 2d 78 bb 4e 88 af d5 13 .......[-x.N.... 0030 f2 55 84 38 d5 eb 53 02 fc 51 21 2f 7e 29 7e 25 .U.8..S..Q!/~)~% 0040 9b 9a 79 58 25 c4 9f 10 e2 8f ac 09 78 30 78 08 ..yX%.......x0x. 0050 71 5f ad 9d 22 10 b7 57 3a 63 dc 72 92 10 97 ba q_.."..W:c.r.... 0060 17 7f 32 96 d0 8e 02 58 03 49 bf 25 fd 18 11 2b ..2....X.I.%...+ 0070 47 d0 47 88 77 25 7f 8d ca 38 17 64 46 05 21 da G.G.w%...8.dF.!. 0080 df 17 e1 7e 5e 08 f1 f5 40 80 97 13 fc 5c 2e c0 ...~^...@....\.. 0090 cf f9 3c c7 f3 08 f6 3a 89 84 a0 cb 30 c5 07 a0 ..<....:....0... 00a0 20 de 1b ed e9 01 18 29 8d c1 62 55 1c 9e 34 a7 ......)..bU..4. 00b0 12 e2 b9 d8 6c 37 61 97 60 7e 29 f1 dd bc 31 0f ....l7a.`~)...1. 00c0 24 ae 5b 21 5e 4a 68 97 a8 af 5b 22 50 f6 6e 8a $.[!^Jh...["P.n. 00d0 6f 5c 5c 2b 26 9a 99 70 2f c5 81 80 bb b3 0c 6f o\\+&..p/......o 00e0 fa b8 62 e9 e7 64 d7 5f 45 e5 5d af 3e f0 f7 d6 ..b..d._E.].>... 00f0 16 fc 34 76 15 1f 6c fc ae 46 6f e3 c3 44 37 de ..4v..l..Fo..D7. 0100 5a 6f e3 1d 55 f7 4b 2a f3 03 35 81 f8 75 bc 99 Zo..U.K*..5..u.. 0110 ec c6 fe 58 3f 0e a6 86 69 84 33 c1 bd 67 eb 37 ...X?...i.3..g.7 0120 dc 29 04 f7 01 55 f9 cb 49 2b c1 3d a8 09 40 3b .)...U..I+.=..@; 0130 36 03 e6 3b 02 6f 09 17 94 48 93 b1 51 02 5c 0a 6..;.o...H..Q.\. 0140 66 51 55 8f 8e 60 67 72 02 2f a6 a8 be 05 e2 d6 fQU..`gr./...... 0150 71 4d f6 59 1b 9d d0 68 94 cd c9 69 8d 23 df b6 qM.Y...h...i.#.. 0160 cf a8 3a 17 80 4b b8 e1 86 d4 5d 99 b2 f3 fa 21 ..:..K....]....! 0170 cc 17 66 f0 66 c9 4e 93 d0 c2 45 7c a0 22 7f bb ..f.f.N...E|.".. 0180 40 a5 cf cf b7 3a dc 8f 85 ae 4e 8c 5c 6d 45 83 @....:....N.\mE. 0190 a5 0c e9 f1 29 08 f2 0f 82 9b bb 0b ed 12 2e 5d ....)..........] 01a0 f8 01 ee ce 12 a3 cf 91 8a 3c c0 db 05 ae 97 7e .........<.....~ 01b0 c0 e5 f3 df 53 6d fb 20 c0 d7 17 81 81 41 3c f6 ....Sm. .....A<. 01c0 47 5c bc d4 4c 09 44 c0 95 10 04 f8 f9 c0 9c 1e G\..L.D......... 01d0 83 86 d4 4b 3c df ff 05 6b e2 1f 78 0d 7c a2 d7 ...K<...k..x.|.. 01e0 82 5e 13 49 46 98 a9 c0 bb 2f 9e 0a 3c ce 00 78 .^.IF..../..<..x 01f0 2f 9f ef 12 55 9e fa 25 ba 93 ff aa 10 ef 49 fe /...U..%......I. 0200 4a dd 2b 83 19 c7 60 cb b9 48 35 ee 85 e9 92 20 J.+...`..H5.... 0210 cc d7 c6 11 e2 a9 0a f1 27 03 45 58 1d 2b c5 fa ........'.EX.+.. 0220 ac 01 f1 2d e9 9f b9 d2 c8 55 a4 b8 53 ae 1a 4a ...-.....U..S..J 0230 7c a9 15 ab 73 ad 78 6c 6f c4 9d f1 46 2c 58 6b |...s.xlo...F,Xk 0240 31 d3 57 8f f1 9e 4a 8c f0 fa e8 6d b7 e0 66 93 1.W...J....m..f. 0250 19 b7 1a 0a 70 b5 c6 84 d6 2a 13 9a aa 8a 7e 73 ....p....*....~s 0260 a7 94 51 9d 97 9a d4 57 de 68 c9 51 15 5e 53 98 ..Q....W.h.Q.^S. 0270 f1 11 e2 aa c8 15 e2 89 46 88 a1 42 3c 52 37 2e ........F..B.k.W. 0430 ca fe 93 a6 da 0f 25 fe bb ef 53 37 38 1d 61 87 ......%...S78.a. 0440 12 9d 32 90 e1 8e 06 2e 0f 93 c2 c2 11 1b e2 8f ..2............. 0450 c8 00 6f 84 78 49 a8 21 cd db 19 c1 3e 67 11 e2 ..o.xI.!....>g.. 0460 7d 0a 71 81 97 91 1f e7 43 65 e7 84 c6 14 1f 8c }.q.....Ce...... 0470 14 44 62 ae 3a 5d ab 0f 3e 6c cd c1 c6 d5 22 6c .Db.:]..>l...."l 0480 5d 2f d4 4d 4b 81 f8 9b 9e 2a 8d 34 79 dd 55 81 ]/.MK....*.4y.U. 0490 d7 dd e5 78 d5 5d 81 37 bd d5 3c e6 64 d6 cd ef ...x.].7..<.d... 04a0 a3 9b ef eb 24 f0 bb a9 c4 7b 05 f8 15 04 7f 99 ....$....{...... 04b0 ba 51 de f1 7d ef 07 6a f0 7e b0 01 3f 52 89 ff .Q..}..j.~..?R.. 04c0 68 23 c8 69 3f 4e b4 e1 a7 a9 4e fc 32 dd 8d 0f h#.i?N....N.2... 04d0 d3 7d f8 71 76 08 af c7 ba f1 4e 9a 2e 8c f7 68 .}.qv.....N....h 04e0 dd 94 3d 5b 2f af d1 7e 82 5c 6a a8 10 de 56 da ..=[/..~.\j...V. 04f0 e8 00 81 3d 40 88 f7 ab 1a df a3 6d db 06 0c 55 ...=@......m...U 0500 3e 31 ac 8f d5 c5 22 49 41 53 93 1a b1 b2 4f 70 >1...."IAS....Op 0510 4b ea fd da c8 a0 6e 78 ee da 25 4a 45 14 f8 8c K.....nx..%JE... 0520 46 a1 ec da e7 08 71 3b 76 ec f2 78 06 5b d3 12 F.....q;v..x.[.. 0530 37 3e a5 25 6a 57 45 c9 4f 4f e2 d5 c2 3c f6 66 7>.%jWE.OO...<.f 0540 c6 78 1d 4d 10 da 13 78 .x.M...x Data […]: 78aaba537696c49d92f91bc4ef08c409a5072578f9b002074f6bd49df246c20cd704e4ad0af1f75b2d78bb4e88afd513f2558438d5eb5302fc51212f7e297e259b9a795825c49f10e28fac0978307808715fad9d2210b7573a63dc72921097ba177f3296d08e02580349bf25fd18112b47d [Length: 1352]