Frame 16995: 1406 bytes on wire (11248 bits), 1406 bytes captured (11248 bits) Encapsulation type: Ethernet (1) Arrival Time: Jul 22, 2017 02:51:11.294620000 UTC UTC Arrival Time: Jul 22, 2017 02:51:11.294620000 UTC Epoch Arrival Time: 1500691871.294620000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000183000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 456.769271000 seconds] Frame Number: 16995 Frame Length: 1406 bytes (11248 bits) Capture Length: 1406 bytes (11248 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) Destination: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 3] Internet Protocol Version 4, Src: 198.232.125.113, Dst: 172.16.45.52 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1392 Identification: 0x54b5 (21685) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 59 Protocol: TCP (6) Header Checksum: 0x579a [validation disabled] [Header checksum status: Unverified] Source Address: 198.232.125.113 Destination Address: 172.16.45.52 [Source GeoIP: White Plains, US, ASN 1828, UNITAS] [Source GeoIP City: White Plains] [Source or Destination GeoIP City: White Plains] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP AS Number: 1828] [Source or Destination GeoIP AS Number: 1828] [Source GeoIP AS Organization: UNITAS] [Source or Destination GeoIP AS Organization: UNITAS] [Source GeoIP Latitude: 41.0274] [Source or Destination GeoIP Latitude: 41.0274] [Source GeoIP Longitude: -73.7797] [Source or Destination GeoIP Longitude: -73.7797] [Stream index: 44] Transmission Control Protocol, Src Port: 80, Dst Port: 49247, Seq: 25689, Ack: 308, Len: 1352 Source Port: 80 Destination Port: 49247 [Stream index: 132] [Stream Packet Number: 34] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1352] Sequence Number: 25689 (relative sequence number) Sequence Number (raw): 2960075863 [Next Sequence Number: 27041 (relative sequence number)] Acknowledgment Number: 308 (relative ack number) Acknowledgment number (raw): 2168171791 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 30 [Calculated window size: 30720] [Window size scaling factor: 1024] Checksum: 0x7061 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 0.216307000 seconds] [Time since previous frame in this TCP stream: 0.000183000 seconds] [SEQ/ACK analysis] [iRTT: 0.065093000 seconds] [Bytes in flight: 4056] [Bytes sent since last PSH flag: 27040] TCP payload (1352 bytes) Hypertext Transfer Protocol File Data: 1352 bytes Data (1352 bytes) 0000 54 ce ae 8e 35 61 cf f9 0a e1 b0 16 07 ce e0 01 T...5a.......... 0010 f3 db 3b 90 31 0c 96 04 ef 03 03 d7 70 32 de 1b ..;.1.......p2.. 0020 c2 df 46 e5 0b 72 4c bb bc e4 8d 43 99 dd fc fe ..F..rL....C.... 0030 ca 6e d9 f8 5b ee d6 2b 77 f2 83 de f4 d3 04 ac .n..[..+w....... 0040 10 de 2f 16 55 d0 8f 6b 03 5c e4 fe 37 d7 9b e4 ../.U..k.\..7... 0050 81 b5 e4 1e f8 86 22 79 0d cd 61 ab ae 03 ca 40 ......"y..a....@ 0060 53 a0 34 56 e0 33 47 79 4a d5 c3 2c 31 51 3a 12 S.4V.3GyJ..,1Q:. 0070 6d cb e1 76 bd 22 e2 69 e3 1d 44 60 78 51 b5 e2 m..v.".i..D`xQ.. 0080 08 18 4b 81 70 af 73 a2 dc cb 86 ab 95 c1 17 d4 ..K.p.s......... 0090 08 87 89 19 86 14 e0 3d d2 09 d1 96 2e 26 d5 6d .......=.....&.m 00a0 5b e7 b3 25 31 14 d4 04 b1 b0 4c 3a d4 d7 16 35 [..%1.....L:...5 00b0 a7 c4 f2 0a 35 b2 32 29 87 e1 40 93 aa f1 c8 d4 ....5.2)..@..... 00c0 ee 07 e1 14 12 98 86 a2 3a 7d 13 08 bf 1c 98 51 ........:}.....Q 00d0 bd a1 26 9d a9 1d 87 0f a1 50 64 b1 e6 c7 1f b9 ..&......Pd..... 00e0 96 9d 21 21 c2 4b 86 72 68 cb 07 92 ea f6 da ca ..!!.K.rh....... 00f0 f1 6a ec bd 2f 1b 3a 79 f4 58 c8 ed 74 6e ba 40 .j../.:y.X..tn.@ 0100 b6 f6 80 74 3d 85 ae 95 1e 11 e7 5a cd 49 35 ae ...t=......Z.I5. 0110 5c 85 9a 4f 8c 63 e2 b9 33 e3 3c 1d ee bb cd 10 \..O.c..3.<..... 0120 d5 9f 85 6c c7 1e b9 87 9b c0 05 99 fb 3e 4c 46 ...l.........>LF 0130 c9 c1 5b a2 b9 fe f0 18 3d bb 58 6f ba 4f b8 88 ..[.....=.Xo.O.. 0140 be 08 c2 49 bd 70 00 63 2a de 57 23 32 15 d2 63 ...I.p.c*.W#2..c 0150 8e 5c 87 e3 77 1e c0 d6 26 6b cb 21 0f 68 b0 76 .\..w...&k.!.h.v 0160 d6 8f 1d 4b a6 4d e5 c8 0a 99 8a 11 a4 86 80 5e ...K.M.........^ 0170 7e 4c 3d 08 aa 37 71 e2 f4 9b aa 4f 83 82 a2 8c ~L=..7q....O.... 0180 64 34 a0 6e 1a 1c 83 ed 97 a0 b9 47 c5 bb b1 f1 d4.n.......G.... 0190 56 8f 02 43 f6 e0 ee 23 57 c9 90 67 b0 d2 5a fc V..C...#W..g..Z. 01a0 f8 9d 00 7b 34 1a e0 8e ac 70 82 c9 58 e5 11 aa ...{4....p..X... 01b0 ba 6c d8 ea 2c 4d ff 9b 05 07 13 08 97 3b ac f1 .l..,M.......;.. 01c0 75 29 13 de d5 e6 25 e4 75 a8 aa 5f 72 48 ba 4b u)....%.u.._rH.K 01d0 f8 f5 9d e6 c3 18 fd b7 39 c5 f1 43 6d 15 5f 6a ........9..Cm._j 01e0 9f e6 ac e6 be 85 73 eb 39 34 db bf ad 98 71 81 ......s.94....q. 01f0 71 86 da 67 9e 5c 95 6b 2e 38 6a f2 cf 56 00 c6 q..g.\.k.8j..V.. 0200 c8 62 14 86 74 3f 61 6c 72 bf f8 95 f4 31 0a ee .b..t?alr....1.. 0210 53 48 c0 fe 40 00 9f ea a9 82 10 49 33 b1 11 5b SH..@......I3..[ 0220 e9 5d f9 22 54 70 d3 47 4e 38 33 36 eb a8 bd af .]."Tp.GN836.... 0230 57 7d 67 5c 41 b9 70 f1 11 95 37 43 e6 02 05 f6 W}g\A.p...7C.... 0240 61 96 fc 2f f7 e7 89 fe 78 e3 53 72 5a 49 a5 88 a../....x.SrZI.. 0250 c8 81 ae be 67 94 25 52 55 70 19 71 e4 79 a2 8b ....g.%RUp.q.y.. 0260 ae e5 61 d2 96 a4 cd 98 d0 2c a1 1c bc d6 98 9c ..a......,...... 0270 fb 5e 29 21 5f 2e df 86 70 67 10 dc 14 e4 58 16 .^)!_...pg....X. 0280 5b 0c c5 09 32 54 73 9c 0d 7c 55 71 d4 e2 ff 48 [...2Ts..|Uq...H 0290 c2 2e 9c 99 39 1f ba 18 f3 1a 50 c4 cc 54 6b 3b ....9.....P..Tk; 02a0 44 bf 71 19 3f 94 03 49 db 83 11 6b 67 b4 38 70 D.q.?..I...kg.8p 02b0 5b 41 46 c9 94 24 0d 13 ef 2e 75 d5 1a 61 ba 32 [AF..$....u..a.2 02c0 2b d2 88 73 30 13 df 4c 13 dc d5 a4 5d 03 32 77 +..s0..L....].2w 02d0 22 e5 70 30 80 d6 44 b7 bd 15 7c e4 46 f7 b8 8b ".p0..D...|.F... 02e0 65 01 19 3d 40 80 f2 84 60 7d 77 c7 9d ca 67 f2 e..=@...`}w...g. 02f0 9b 90 1b 50 e1 26 93 70 87 43 80 a0 88 58 49 75 ...P.&.p.C...XIu 0300 14 dc 34 1e cf dd 5e d5 09 5a b6 55 82 c8 bd 33 ..4...^..Z.U...3 0310 ab 86 ba 24 68 88 79 21 89 84 ad 21 71 ce e2 59 ...$h.y!...!q..Y 0320 5d 0a 8d d6 35 41 44 8d 48 7b 01 da 02 4b c2 86 ]...5AD.H{...K.. 0330 2b d9 3e 6a e1 b2 34 ed fa 4c 5a ae 7e 34 11 92 +.>j..4..LZ.~4.. 0340 ae 2e 6e c8 cd 51 c3 86 30 12 c3 41 d5 19 c7 7d ..n..Q..0..A...} 0350 03 f4 5a 5f c2 d1 48 07 4d 35 d8 59 55 16 64 67 ..Z_..H.M5.YU.dg 0360 52 54 d9 97 4d 41 84 d5 b6 89 d4 94 3a 1a b9 e3 RT..MA......:... 0370 f6 fc a0 1f 71 2c cd 23 0e 0d 89 44 53 4b e5 66 ....q,.#...DSK.f 0380 98 9f 0f 8c d4 26 0b 79 62 b7 2a a2 c9 cb 52 dd .....&.yb.*...R. 0390 8c c6 2a 77 c4 52 9b 12 3c 0e 80 d7 11 05 63 b5 ..*w.R..<.....c. 03a0 47 f4 90 fd 6b 67 1f 38 e4 19 da 4e 19 b5 7a 13 G...kg.8...N..z. 03b0 3b 81 c1 3f c7 48 4d 90 94 a3 3b 17 38 98 75 e2 ;..?.HM...;.8.u. 03c0 85 2b fc e3 c8 dc 56 c9 a8 ae 44 d0 35 e7 fd 2d .+....V...D.5..- 03d0 ec 24 a9 b9 7f b1 d8 ea 89 6e d5 69 93 f6 65 0d .$.......n.i..e. 03e0 be 11 ba 91 36 e9 95 df a2 4d df d6 9b 89 8d ec ....6....M...... 03f0 a5 4d 5e e7 d2 b3 be a3 0c 9f cf de e1 b9 22 86 .M^...........". 0400 f1 2c 4a a4 9e 46 dd 19 9f d6 5f c0 fd f7 68 d4 .,J..F...._...h. 0410 81 9c 76 7b 48 8e 68 b7 ba d0 00 8c 87 82 bf ee ..v{H.h......... 0420 8e 27 42 67 21 dc 15 82 37 ec fd eb e4 42 31 a4 .'Bg!...7....B1. 0430 f9 f0 5f 24 0d 7a 59 a6 24 1f b9 c4 c6 2f 06 2e .._$.zY.$..../.. 0440 2c 7b 7f 80 cb 0e 21 51 5d 24 0b f7 8d 81 e8 07 ,{....!Q]$...... 0450 83 9e 85 28 22 8c 40 a8 8e 1f b7 ba 17 5e e9 73 ...(".@......^.s 0460 44 5d f5 71 90 04 e7 77 6f 2a 42 6a 8a 4d ab f7 D].q...wo*Bj.M.. 0470 b8 7b 74 ac e0 0f 0f 1d c5 82 2f 95 aa a1 cc dc .{t......./..... 0480 cf b9 a2 9a 1e 67 b6 ac 15 1b ae bf 6a b1 a1 3d .....g......j..= 0490 5b 63 c1 46 b3 e3 bc 22 3b de 8d 74 75 2b aa 93 [c.F...";..tu+.. 04a0 73 aa 90 90 b0 4f 8c 9a 54 b7 45 5b aa 5f b1 45 s....O..T.E[._.E 04b0 83 96 91 d3 bb 21 37 c2 96 9d b6 69 b4 89 fd c1 .....!7....i.... 04c0 4b 07 ee e3 b4 dd 5f eb 65 47 65 f2 2b 05 3c d8 K....._.eGe.+.<. 04d0 5f a3 6f 16 f3 f7 5c 92 29 f3 a5 95 e0 10 98 ca _.o...\.)....... 04e0 f9 dc 67 0f f9 5f df fa 74 10 3e 59 be e5 d1 42 ..g.._..t.>Y...B 04f0 f7 97 7a 49 57 1c 61 f3 55 a1 d3 3b c7 0a 07 f9 ..zIW.a.U..;.... 0500 d4 a5 c8 e8 05 4b 23 fc 6c e4 8a fd a6 6a 19 bb .....K#.l....j.. 0510 2d 22 b1 6d b8 3a e3 34 3d 33 0d 26 bc c4 47 55 -".m.:.4=3.&..GU 0520 81 3c 50 6a 59 3a 23 d0 fd 99 12 c4 72 de 06 32 .