Frame 17011: 1406 bytes on wire (11248 bits), 1406 bytes captured (11248 bits) Encapsulation type: Ethernet (1) Arrival Time: Jul 22, 2017 02:51:11.310465000 UTC UTC Arrival Time: Jul 22, 2017 02:51:11.310465000 UTC Epoch Arrival Time: 1500691871.310465000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000493000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 456.785116000 seconds] Frame Number: 17011 Frame Length: 1406 bytes (11248 bits) Capture Length: 1406 bytes (11248 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) Destination: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 3] Internet Protocol Version 4, Src: 184.25.56.229, Dst: 172.16.45.52 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1392 Identification: 0x8339 (33593) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 57 Protocol: TCP (6) Header Checksum: 0x7e71 [validation disabled] [Header checksum status: Unverified] Source Address: 184.25.56.229 Destination Address: 172.16.45.52 [Source GeoIP: San Jose, US, ASN 20940, Akamai International B.V.] [Source GeoIP City: San Jose] [Source or Destination GeoIP City: San Jose] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP AS Number: 20940] [Source or Destination GeoIP AS Number: 20940] [Source GeoIP AS Organization: Akamai International B.V.] [Source or Destination GeoIP AS Organization: Akamai International B.V.] [Source GeoIP Latitude: 37.3388] [Source or Destination GeoIP Latitude: 37.3388] [Source GeoIP Longitude: -121.8916] [Source or Destination GeoIP Longitude: -121.8916] [Stream index: 42] Transmission Control Protocol, Src Port: 80, Dst Port: 49198, Seq: 602109, Ack: 733, Len: 1352 Source Port: 80 Destination Port: 49198 [Stream index: 82] [Stream Packet Number: 836] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1352] Sequence Number: 602109 (relative sequence number) Sequence Number (raw): 2638415056 [Next Sequence Number: 603461 (relative sequence number)] Acknowledgment Number: 733 (relative ack number) Acknowledgment number (raw): 288088846 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 980 [Calculated window size: 31360] [Window size scaling factor: 32] Checksum: 0xebef [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 4.552247000 seconds] [Time since previous frame in this TCP stream: 0.027811000 seconds] [SEQ/ACK analysis] [iRTT: 0.074982000 seconds] [Bytes in flight: 1352] [Bytes sent since last PSH flag: 52728] TCP payload (1352 bytes) Hypertext Transfer Protocol File Data: 1352 bytes Data (1352 bytes) 0000 6f d3 72 07 1f f1 52 7d ec d0 77 75 ea 8d 34 1d o.r...R}..wu..4. 0010 64 62 78 23 80 45 ff 00 c7 fc 6f ef c4 1a 54 1e dbx#.E....o...T. 0020 b7 40 a2 9d 78 39 17 fa 1b 1f a1 ff 00 1f 75 a9 .@..x9........u. 0030 00 82 7a b2 91 4a 75 99 49 fc d8 0f af e7 db 74 ..z..Ju.I......t 0040 20 f4 db 93 f8 4f 5c f8 e2 cd ff 00 13 ed d2 ed ....O\......... 0050 4a 70 ea a3 38 eb ca 6c 4d ae 01 16 3e eb 56 f5 Jp..8..lM...>.V. 0060 eb 60 53 af 37 26 d7 fc 01 7f a0 b7 d6 e7 de e8 .`S.7&.......... 0070 c4 71 ea 83 8e 3a c8 02 9b 0f c8 e3 81 f5 ff 00 .q...:.......... 0080 13 ed a1 ad 0d 4f 4f 12 ba 7a e4 05 bf 36 f6 fa .....OO..z...6.. 0090 a9 7c 9e 99 c1 e3 d7 3f af d3 ea 4f 16 e3 ea 3f .|.....?...O...? 00a0 a7 bf 32 e9 cf 5b a8 a6 93 c3 ae 21 4d ed fd 3f ..2..[.....!M..? 00b0 db fb b1 a9 3a bc ba b5 2a 7a e7 f5 5b fd 08 fe ....:...*z..[... 00c0 bf 4f 7b 63 51 8e bc 5b 1d 76 ab 72 49 e3 9f c7 .O{cQ..[.v.rI... 00d0 f8 ff 00 8f bd 64 0c f5 ec 71 eb 2a 8b 30 04 f1 .....d...q.*.0.. 00e0 c9 fa 73 c8 f6 de 2b 9e af a4 11 5e b2 87 07 fc ..s...+....^.... 00f0 17 f1 c7 b7 95 41 15 1d 68 9a 63 ae 77 00 8b 7f .....A..h.c.w... 0100 b7 ff 00 61 ef 60 8f 80 f5 a2 9e 7d 7b f4 ff 00 ...a.`.....}{... 0110 b1 1e da 71 e5 d6 a9 8e b9 7d 74 da df d4 ff 00 ...q.....}t..... 0120 5f f6 1e eb a4 37 0e a9 4e bb b7 d4 5f ea 7e bf _....7..N..._.~. 0130 f1 4f 7e 23 49 15 eb 7c 7a c9 fa 6c 49 07 8f f7 .O~#I..|z..lI... 0140 9f 6e 2d 49 ed eb 62 bc 0f 5d 13 71 c1 ff 00 5b .n-I..b..].q...[ 0150 8f 77 d6 6b d5 5a a7 87 59 02 f1 72 47 f5 fa 7b .w.k.Z..Y..rG..{ 0160 d1 62 c7 23 ad 8c 7d bd 78 dc 0f f5 bf d8 7f ad .b.#..}.x....... 0170 ef cd 9e 1d 36 54 f5 d8 23 fd 8f d3 dd 51 ba b8 ....6T..#....Q.. 0180 00 0a 9e bc cc 15 6e 4d 81 e0 5f f0 4f f5 3e ed ......nM.._.O.>. 0190 e2 0e 1d 5b 41 2b 5e 81 ae f8 ee 1d b1 d1 fd 6f ...[A+^........o 01a0 9b de fb 92 ac 46 68 69 a5 38 aa 11 2a 46 f9 3c .....Fhi.8..*F.< 01b0 ac ca 52 86 86 20 ff 00 52 cf 6d 40 7d 07 3e c8 ..R.. ..R.m@}.>. 01c0 b7 bd d2 2d be d5 9d a9 53 80 3d 4f 97 47 1b 4e ...-....S.=O.G.N 01d0 da f7 97 0a a0 54 79 9f 41 d6 ad d9 7d ef b8 b7 .....Ty.A...}... 01e0 ee ea dd 7b f3 77 4b 25 5e e5 dd 59 79 eb aa e7 ...{.wK%^..Yy... 01f0 26 56 8e 92 84 c8 7e db 19 40 65 f5 2c 31 c7 65 &V....~..@e.,1.e 0200 0b 7f a8 bf e7 dc 33 74 93 cd 31 b8 94 d5 89 e1 ......3t..1..... 0210 5e a4 36 b8 8e 02 2d a2 5a 00 3d 31 d4 3f 22 19 ^.6...-.Z.=1.?". 0220 19 d6 40 da 18 90 58 83 71 ab 85 60 3f c3 da 53 ..@...X.q..`?..S 0230 6a 48 ff 00 57 f9 7a dc 97 2a 06 a3 9f b3 a8 95 jH..W.z..*...... 0240 05 4c 81 51 c8 3c b3 b0 be 9b 1f a0 56 ff 00 78 .L.Q.<......V..x 0250 f7 b2 a1 57 41 e0 3a d0 ba 56 5a 0e 98 6b 58 a3 ...WA.:..VZ..kX. 0260 a8 47 b5 9f 53 7e a2 07 fa c7 f3 6f 6e c2 62 8d .G..S~.....on.b. 0270 4e 92 49 3d 35 33 9d 03 ec eb 92 54 cf a0 b9 a9 N.I=53.....T.... 0280 2a fa 82 ae 96 2b a8 5b eb 21 f6 49 77 0c 92 3d *....+.[.!.Iw..= 0290 50 79 f4 d4 6a 25 51 a7 3d 33 54 54 13 3c 92 ab Py..j%Q.=3TT.<.. 02a0 9f 4d b5 3a 5c 12 42 8d 46 e7 eb 6f 6f c0 d2 22 .M.:\.B.F..oo.." 02b0 50 d4 7e 47 ad f0 5a 91 d4 69 eb d2 58 83 bb d9 P.~G..Z..i..X... 02c0 a1 66 5b 44 4d e4 6b f0 c7 fa 83 f9 f6 63 6f 6d .f[DM.k......com 02d0 aa 2d 6c 73 53 c7 ad 19 42 0a 83 4e a1 4b 94 48 .-lsS...B..N.K.H 02e0 d9 24 24 b2 95 0b a4 d8 b2 b9 6b 00 17 eb f5 f7 .$$.......k..... 02f0 78 87 ea fd 9c 7a 4c 6f 22 53 42 73 f6 74 c3 55 x....zLo"SBs.t.U 0300 58 25 79 10 3b fa 5f 5e 99 07 a4 b2 f2 40 b7 f8 X%y.;._^.....@.. 0310 7b 35 8a 25 06 a7 f6 f4 92 79 fc 43 db c7 a6 ba {5.%.....y.C.... 0320 a9 1b d2 c0 04 d5 71 19 d3 66 61 7b fa af f5 f6 ......q..fa{.... 0330 f9 8d 4d 3c 33 5f 97 48 1a 62 8d 56 3d 33 d6 08 ..M<3_.H.b.V=3.. 0340 bc 25 de 39 7d 00 13 e2 b9 1f 5b 17 6b 7d 3f c7 .%.9}.....[.k}?. 0350 de f4 36 b0 a3 88 eb d2 4e 8c ba ab d3 25 21 86 ..6.....N....%!. 0360 49 91 a3 67 2b 1b eb 70 ad a4 b2 fd 74 86 f6 b2 I..g+..p....t... 0370 e1 5b c3 0a e3 35 1d 16 24 b1 ac b4 39 f9 74 e8 .[...5..$...9.t. 0380 57 5c d2 4e 26 93 4e 91 a2 26 7b 80 2d c9 65 1f W\.N&.N..&{.-.e. 0390 d3 eb ed 32 22 54 a9 1d e3 fc 1f 6f 46 5f 52 ac ...2"T.....oF_R. 03a0 ba 50 53 ae d8 2a 16 57 25 5e 40 40 b0 01 54 a8 .PS..*.W%^@@..T. 03b0 b9 2c 4f b7 d6 41 50 08 c0 e9 58 95 c2 52 bd 61 .,O..AP...X..R.a 03c0 47 05 59 1a ed a4 1f a0 d5 f4 e3 8f f5 ff 00 1e G.Y............. 03d0 d5 f6 f0 38 af 4b a0 9b 50 a5 73 4e b3 0a 77 d4 ...8.K..P.sN..w. 03e0 2c a4 29 52 43 05 37 fa 7e 47 ba 4c 20 44 d4 0e ,.)RC.7.~G.L D.. 03f0 7d 3a 54 9a cd 05 6a 3c eb d4 84 68 54 88 af 2b }:T...j<...hT..+ 0400 10 80 90 d6 0b 7b 73 60 3f af b4 25 7c 5e e4 a5 .....{s`?..%|^.. 0410 3a 74 96 8f b6 3c f5 e7 a1 94 99 8f 9a 14 f2 04 :t...<.......... 0420 62 ba 8a fe 94 1f 5f f6 23 dd 3c 29 21 cf fa a9 b....._.#.<)!... 0430 d3 d0 d1 82 53 f0 9e b1 c6 bf 6c b7 d6 41 65 d4 ....S.....l..Ae. 0440 7d 57 17 bd 89 bf b6 4b 12 e2 bd 3d ab 50 aa 67 }W.....K...=.P.g 0450 a6 da f9 18 0b b6 a6 8c 39 00 28 b9 3c f1 ed 4c ........9.(.<..L 0460 51 30 fd 4a 75 41 0b c8 03 b1 e3 e5 d3 3b d6 4a Q0.JuA.......;.J 0470 03 3a 2b 30 0c 07 2a 7d 3f 8b 7f c6 fd b5 22 f8 .:+0..*}?.....". 0480 ce 71 d3 8a a5 7b 4f 4d 15 d3 4b 2d 90 20 90 c8 .q...{OM..K-. .. 0490 ac de b1 ad 10 28 b1 58 c3 7f bc ff 00 8f bb da .....(.X........ 04a0 c7 1b c8 50 f1 1d 51 8e 89 0d 46 3d 47 40 8e ec ...P..Q...F=G@.. 04b0 db ff 00 c4 60 98 4a 52 48 5f c8 0c 73 12 18 02 ....`.JRH_..s... 04c0 79 0b f8 b5 be 9e d5 82 b0 49 41 83 d6 96 3f 15 y........IA...?. 04d0 f5 21 fd b8 e8 a1 6e ce bf a9 c2 57 47 95 c0 d5 .!....n....WG... 04e0 e4 28 e5 a6 91 a5 54 a6 99 92 06 2d ea fd 29 f9 .(....T....-..). 04f0 fe b7 fc 7b 3a b7 b8 2f 89 05 6b d5 e4 83 b6 95 ...{:../..k..... 0500 a7 d9 d1 9a e8 ce c3 6c dc 03 15 97 94 45 94 a4 .......l.....E.. 0510 65 d2 ee fa 7c c8 a3 49 3e af a3 7f 5f 6a e6 81 e...|..I>..._j.. 0520 a4 a2 9e 93 2b 18 81 00 57 a3 67 14 88 f1 c6 cc ....+...W.g..... 0530 ff 00 b6 c6 45 f4 3d d4 11 fe 07 fa f1 ed 28 83 ....E.=.......(. 0540 c3 6c 9c 7c ba 47 34 c6 .l.|.G4. Data […]: 6fd372071ff1527decd07775ea8d341d646278238045ff00c7fc6fefc41a541eb740a29d783917fa1b1fa1ff001f75a900827ab2914a759949fcd80fafe7db7420f4db93f84f5cf8e2cdff0013edd2ed4a70eaa338ebca6c4dae01163eeb56f5eb6053af3726d7fc017fa0b7d6e7dee8c47 [Length: 1352]