Frame 17161: 1406 bytes on wire (11248 bits), 1406 bytes captured (11248 bits) Encapsulation type: Ethernet (1) Arrival Time: Jul 22, 2017 02:51:11.425151000 UTC UTC Arrival Time: Jul 22, 2017 02:51:11.425151000 UTC Epoch Arrival Time: 1500691871.425151000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000181000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 456.899802000 seconds] Frame Number: 17161 Frame Length: 1406 bytes (11248 bits) Capture Length: 1406 bytes (11248 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) Destination: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 3] Internet Protocol Version 4, Src: 63.217.21.41, Dst: 172.16.45.52 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1392 Identification: 0x6b43 (27459) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 59 Protocol: TCP (6) Header Checksum: 0x3064 [validation disabled] [Header checksum status: Unverified] Source Address: 63.217.21.41 Destination Address: 172.16.45.52 [Source GeoIP: Tin Shui Wai, HK, ASN 3491, CONSOLE-CONNECT-ASN] [Source GeoIP City: Tin Shui Wai] [Source or Destination GeoIP City: Tin Shui Wai] [Source GeoIP Country: Hong Kong] [Source or Destination GeoIP Country: Hong Kong] [Source GeoIP ISO Two Letter Country Code: HK] [Source or Destination GeoIP ISO Two Letter Country Code: HK] [Source GeoIP AS Number: 3491] [Source or Destination GeoIP AS Number: 3491] [Source GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source or Destination GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source GeoIP Latitude: 22.4489] [Source or Destination GeoIP Latitude: 22.4489] [Source GeoIP Longitude: 113.9984] [Source or Destination GeoIP Longitude: 113.9984] [Stream index: 40] Transmission Control Protocol, Src Port: 80, Dst Port: 49194, Seq: 142598, Ack: 1475, Len: 1352 Source Port: 80 Destination Port: 49194 [Stream index: 79] [Stream Packet Number: 184] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1352] Sequence Number: 142598 (relative sequence number) Sequence Number (raw): 4187190965 [Next Sequence Number: 143950 (relative sequence number)] Acknowledgment Number: 1475 (relative ack number) Acknowledgment number (raw): 2526152589 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 1033 [Calculated window size: 33056] [Window size scaling factor: 32] Checksum: 0x96c2 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 4.888246000 seconds] [Time since previous frame in this TCP stream: 0.000181000 seconds] [SEQ/ACK analysis] [iRTT: 0.076622000 seconds] [TCP Analysis Flags] [Expert Info (Warning/Sequence): Previous segment(s) not captured (common at capture start)] [Previous segment(s) not captured (common at capture start)] [Severity level: Warning] [Group: Sequence] TCP payload (1352 bytes) Hypertext Transfer Protocol […] E:�FD�(o���ALn�u#\017�j�n��5۪�b\b\000�o�w�\f!�=��せ\J.��3-5���G(rD\016\021�����\032՝0W�\016���c˯Z^��3A:�@�n\023iv��o�\016�颴�A���x\004R\016� […] �/���n��O�U��\024�j\0058\032��d\026 �0xI�D�TG��(�\025�4\177B:#`]�\032\035P�B�l\035A��&�r�fS\ta��L�e��q\004Ȱ\001��F��&*p����%�\037�e�\017Q�ce�� [Expert Info (Warning/Protocol): Illegal characters found in header name] [Illegal characters found in header name] [Severity level: Warning] [Group: Protocol] �Q��&S�J{&oJ\025G�l\031�A��<\031���\025\t�@\005t\0240(�S0>:\r [Expert Info (Warning/Protocol): Illegal characters found in header name] [Illegal characters found in header name] [Severity level: Warning] [Group: Protocol] File Data: 882 bytes Data (882 bytes) 0000 fb c3 e5 bf 1a c7 01 3f 1c 02 98 b2 a6 1c 05 c7 .......?........ 0010 c4 c5 8a aa b9 b2 62 f0 02 56 b0 74 49 d3 0c ce ......b..V.tI... 0020 b8 70 2b de c8 a6 c5 51 91 bc 18 5c 0f 12 96 b9 .p+....Q...\.... 0030 1c 49 8d e0 66 ca 34 bd 5c a0 ef 15 98 95 22 b3 .I..f.4.\.....". 0040 5c 24 eb c0 0a 99 a4 ac 5c 59 29 e5 ca 5f e6 5b \$......\Y).._.[ 0050 f0 2e 7d 8b 1e 60 28 27 91 a1 79 32 ef 75 d2 cd ..}..`('..y2.u.. 0060 c5 e4 54 15 7c df c1 41 b2 ab 6e e0 69 b6 af 38 ..T.|..A..n.i..8 0070 ae 68 fb ba 1f 68 7e a0 fb 55 33 f2 14 37 b6 c2 .h...h~..U3..7.. 0080 50 73 9b 41 1d d5 64 a0 da a8 2f c9 e0 b9 25 7c Ps.A..d.../...%| 0090 32 8c 61 19 d6 91 2d 02 4f 80 94 98 7f 7e 65 b5 2.a...-.O....~e. 00a0 2c f3 ba 2a 98 ba e4 98 6a 60 eb 91 6b c2 a3 26 ,..*....j`..k..& 00b0 a1 93 56 bd 46 cd 6f 26 41 23 0d d2 66 f6 40 15 ..V.F.o&A#..f.@. 00c0 a9 ef c3 a8 1b 85 bd 28 e8 67 1a 54 83 61 ae 38 .......(.g.T.a.8 00d0 18 e5 aa 85 e3 5b 8d 6a 11 34 ac 45 83 38 ec 57 .....[.j.4.E.8.W 00e0 c3 6e 84 0b c6 6f 78 5e e2 38 b1 65 21 94 21 91 .n...ox^.8.e!.!. 00f0 c1 fe 00 40 ba 20 92 a9 ab 58 50 86 93 c8 70 e5 ...@. ...XP...p. 0100 37 ca 9a e4 b9 5c 00 b7 40 b1 4b b1 e9 df a9 76 7....\..@.K....v 0110 b7 6e 78 50 55 87 5c 14 aa 48 73 c2 d7 14 64 ba .nxPU.\..Hs...d. 0120 79 a9 43 2e 91 f1 73 ca b6 07 ba 73 23 1c 62 22 y.C...s....s#.b" 0130 94 b7 5c 26 ca a1 4b 64 78 44 e4 a5 8f b2 a1 5a ..\&..KdxD.....Z 0140 81 66 11 36 65 78 ca 8a 8d 73 a7 2a 64 b8 b1 41 .f.6ex...s.*d..A 0150 50 15 9b a8 c3 51 bd fb af 89 6c c1 bb d5 1b 65 P....Q....l....e 0160 fb 67 7f 08 c3 9c 35 10 92 f4 8e a5 c1 c2 30 cb .g....5.......0. 0170 1a 25 c8 65 16 f6 18 35 b4 ce 4a ae 6e a7 d5 3a .%.e...5..J.n..: 0180 19 81 05 b8 f4 c2 50 75 03 d9 c9 4d 50 cb ad d7 ......Pu...MP... 0190 4d 5c 0a 8e 5a 41 f1 56 c8 93 84 8a e5 c0 3d 31 M\..ZA.V......=1 01a0 72 a4 da 80 91 2f 1a b0 51 b8 62 4c 1e 97 aa 85 r..../..Q.bL.... 01b0 a2 a4 31 1a ea 7e 8b 55 74 4a 84 b7 92 8b ac b8 ..1..~.UtJ...... 01c0 4a e7 35 24 99 9e 90 cc 32 48 d1 05 72 0d a1 0c J.5$....2H..r... 01d0 0b 14 b6 17 20 b5 c2 70 2b 45 24 32 29 c3 25 47 .... ..p+E$2).%G 01e0 c4 b0 2b 34 b3 4c 61 89 75 54 7d c2 6a 89 5f 2e ..+4.La.uT}.j._. 01f0 92 3a 70 b9 c8 af 14 d9 7b 2b dc f2 0a bf 52 10 .:p.....{+....R. 0200 0b 25 b1 50 cc 96 44 52 b1 2c 15 c9 12 e4 05 73 .%.P..DR.,.....s 0210 51 6d e2 33 65 ac 94 68 9d 42 ad 4e 1a 4d 0d 9a Qm.3e..h.B.N.M.. 0220 37 81 36 56 34 08 ce 14 5f d2 02 59 47 6e 0f 64 7.6V4..._..YGn.d 0230 35 56 8c 5a f6 ac f6 7c be 39 3f d9 26 c6 b2 e9 5V.Z...|.9?.&... 0240 b6 63 ab df 8a ce 8e 36 7a ad 20 74 cd d0 41 3d .c.....6z. t..A= 0250 cd 98 59 4c 00 40 35 96 43 31 d6 39 56 61 29 81 ..YL.@5.C1.9Va). 0260 a9 68 64 ca 34 da f1 a4 c5 d6 b0 d6 08 44 99 62 .hd.4........D.b 0270 b9 82 61 30 51 20 d9 26 a3 94 96 4d 8a 36 68 d6 ..a0Q .&...M.6h. 0280 b7 8d 20 b1 d2 d4 87 c8 ad fa ca 8a 54 5c 96 56 .. .........T\.V 0290 ef a9 85 92 bc ba c2 af de e3 8b ef 60 a3 58 5c ............`.X\ 02a0 56 2a 45 a9 b8 2a 16 57 95 72 51 2e ad 72 cb cb V*E..*.W.rQ..r.. 02b0 fc f2 b2 5c 2c 6a 14 99 9b 42 29 63 49 e1 27 93 ...\,j...B)cI.'. 02c0 9f bf 4a 8e 83 74 2b b9 58 26 87 a8 50 a4 56 57 ..J..t+.X&..P.VW 02d0 4a f7 ee 11 2d df 2b 2f df 2b bc fd 76 79 79 99 J...-.+/.+..vyy. 02e0 2e e0 c8 af 56 56 10 2a 97 b1 ac ac 16 80 8f d2 ....VV.*........ 02f0 bd 02 bd 42 d3 ab 54 ae ca 72 05 a2 57 6f b6 30 ...B..T..r..Wo.0 0300 05 3a 17 5b 22 14 66 c9 a9 ac e4 62 8a 14 84 95 .:.[".f....b.... 0310 9f 63 50 25 63 44 d9 b3 eb 8e 9e 76 92 1d 53 6e .cP%cD.....v..Sn 0320 f6 9a 9b bd 6a 7f ab 33 fe f0 f4 60 56 b3 77 3a ....j..3...`V.w: 0330 d5 a7 7b eb 5b ed e6 76 a7 75 38 1e ec f6 3b fb ..{.[..v.u8...;. 0340 83 de b8 1e c7 a6 31 6a 24 ed 30 18 37 d2 61 2d ......1j$.0.7.a- 0350 66 29 9a 2a 96 f2 19 dc 32 c1 6c 2a f9 14 95 39 f).*....2.l*...9 0360 83 54 d1 d2 65 d7 54 7c 4b bb 03 50 a3 ea 35 6b .T..e.T|K..P..5k 0370 41 2b A+ Data […]: fbc3e5bf1ac7013f1c0298b2a61c05c7c4c58aaab9b262f00256b07449d30cceb8702bdec8a6c55191bc185c0f1296b91c498de066ca34bd5ca0ef15989522b35c24ebc00a99a4ac5c5929e5ca5fe65bf02e7d8b1e60282791a17932ef75d2cdc5e454157cdfc141b2ab6ee069b6af38ae6 [Length: 882]