Frame 17298: 1406 bytes on wire (11248 bits), 1406 bytes captured (11248 bits) Encapsulation type: Ethernet (1) Arrival Time: Jul 22, 2017 02:51:11.499520000 UTC UTC Arrival Time: Jul 22, 2017 02:51:11.499520000 UTC Epoch Arrival Time: 1500691871.499520000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000238000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 456.974171000 seconds] Frame Number: 17298 Frame Length: 1406 bytes (11248 bits) Capture Length: 1406 bytes (11248 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) Destination: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 3] Internet Protocol Version 4, Src: 63.217.21.41, Dst: 172.16.45.52 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1392 Identification: 0x6b5d (27485) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 59 Protocol: TCP (6) Header Checksum: 0x304a [validation disabled] [Header checksum status: Unverified] Source Address: 63.217.21.41 Destination Address: 172.16.45.52 [Source GeoIP: Tin Shui Wai, HK, ASN 3491, CONSOLE-CONNECT-ASN] [Source GeoIP City: Tin Shui Wai] [Source or Destination GeoIP City: Tin Shui Wai] [Source GeoIP Country: Hong Kong] [Source or Destination GeoIP Country: Hong Kong] [Source GeoIP ISO Two Letter Country Code: HK] [Source or Destination GeoIP ISO Two Letter Country Code: HK] [Source GeoIP AS Number: 3491] [Source or Destination GeoIP AS Number: 3491] [Source GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source or Destination GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source GeoIP Latitude: 22.4489] [Source or Destination GeoIP Latitude: 22.4489] [Source GeoIP Longitude: 113.9984] [Source or Destination GeoIP Longitude: 113.9984] [Stream index: 40] Transmission Control Protocol, Src Port: 80, Dst Port: 49194, Seq: 177350, Ack: 1475, Len: 1352 Source Port: 80 Destination Port: 49194 [Stream index: 79] [Stream Packet Number: 222] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1352] Sequence Number: 177350 (relative sequence number) Sequence Number (raw): 4187225717 [Next Sequence Number: 178702 (relative sequence number)] Acknowledgment Number: 1475 (relative ack number) Acknowledgment number (raw): 2526152589 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 1033 [Calculated window size: 33056] [Window size scaling factor: 32] Checksum: 0xc409 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 4.962615000 seconds] [Time since previous frame in this TCP stream: 0.000238000 seconds] [SEQ/ACK analysis] [iRTT: 0.076622000 seconds] [Bytes in flight: 42112] [Bytes sent since last PSH flag: 55232] TCP payload (1352 bytes) Hypertext Transfer Protocol File Data: 1352 bytes Data (1352 bytes) 0000 6c b4 ce 37 db 56 da ac eb 1d d6 8d 2e cb 66 8f l..7.V........f. 0010 79 ab c7 b4 d5 63 dc dc 65 03 a2 d7 b4 d9 67 de y....c..e.....g. 0020 ec b7 6e 0d 3a ce 8e b8 ce 8e 7a b7 46 bc 03 31 ..n.:.....z.F..1 0030 55 4d 75 25 1c 5e 2b 91 8a 10 a8 fa aa ba 2a 4e UMu%.^+.......*N 0040 71 6e 00 0b aa 80 6a ea 2a d1 58 84 44 26 44 61 qn....j.*.X.D&Da 0050 8a f3 6e 11 a8 3a 06 40 61 b0 a8 f5 f0 aa e2 ee ..n..:.@a....... 0060 45 f5 15 78 3c 92 09 00 70 44 55 35 64 a5 ea a3 E..x<...pDU5d... 0070 18 6c 7d 4d 6d 29 89 82 60 30 89 2c 36 85 46 c7 .l}Mm)..`0.,6.F. 0080 d3 e9 78 90 4b 47 d7 55 50 e8 78 07 81 e8 29 2d ..x.KG.UP.x...)- 0090 b7 57 d5 59 ab 31 ae 0a 9c a7 12 6f ad c2 c4 b8 .W.Y.1.....o.... 00a0 6c 1b b5 a6 39 08 fa 54 6c b3 98 c2 c6 57 68 c5 l...9..Tl....Wh. 00b0 0c 90 8e 15 b3 69 7c 3a 09 20 62 d8 64 1c c8 20 .....i|:. b.d.. 00c0 43 83 2a 48 92 b3 71 04 a8 20 8a 18 88 2f 5d e9 C.*H..q.. .../]. 00d0 fe e7 af cd de db 6e be bd ea 78 f5 94 f3 a5 13 ......n...x..... 00e0 b6 b9 06 f4 cb 63 81 37 4f e6 96 da 15 43 2d 8a .....c.7O....C-. 00f0 a1 76 4b 7b c6 a4 e5 e3 1a 64 e5 ef 6f f9 77 76 .vK{.....d..o.wv 0100 de 8c 83 b0 4f 3f 79 ef ef 7f fd d6 e7 5f bc f7 ....O?y......_.. 0110 f9 17 ff f1 77 28 01 7c 01 1d 84 5f fc e5 ef 50 ....w(.|..._...P 0120 22 f8 ed 4b b7 c6 77 76 3e 2a d8 60 7f 7f 27 f2 "..K..wv>*.`..'. 0130 fd 55 f0 ad 36 fc 1b 79 d6 5b 2d bc 36 a7 4c 4e .U..6..y.[-.6.LN 0140 2e 67 20 8f f0 49 35 1d 61 bd 88 50 ce c3 54 12 .g ..I5.a..P..T. 0150 2a 0e 90 ab 8f b0 a1 41 88 80 26 e3 99 5c 4c cd *......A..&..\L. 0160 c3 87 0f dd fd e0 b7 62 b1 a9 d9 62 36 f1 19 01 .......b...b6... 0170 b3 42 84 2e 73 d0 eb 3d 84 2a 3b 00 ef 31 70 87 .B..s..=.*;..1p. 0180 34 cc 0c 88 99 28 c4 09 d5 0f ec fc e8 99 04 05 4....(.......... 0190 d6 a1 42 04 a9 7b 7f 7d 7b f0 27 33 b6 3f 3c 97 ..B..{.}{.'3.?<. 01a0 dd f9 f4 c2 67 3b 1f 7d f1 d9 e7 5f fc 65 e7 f3 ....g;.}..._.e.. 01b0 2f be d8 f9 ec 9d cf de 5e f8 d3 85 9e 3b 71 e9 /.......^....;q. 01c0 71 1b 7c 40 53 d1 67 c2 64 95 f0 76 3d 36 2e 28 q.|@S.g.d..v=6.( 01d0 99 f2 72 3b 0d 18 3f fd 2b 53 71 fa 7c 23 73 22 ..r;..?.+Sq.|#s" 01e0 88 9d 8d 52 86 fd f8 99 06 7e 9f 9f 9e d6 20 3c ...R.....~.... < 01f0 52 3a a5 72 af 4f c3 d3 83 54 9b 12 84 fe 72 da R:.r.O...T....r. 0200 83 aa 8e 90 56 04 d0 b0 35 65 3e 39 f3 89 21 ff ....V...5e>9..!. 0210 c5 5e e7 63 fd ce cb 83 ee ab 63 9e eb d3 f6 67 .^.c......c....g 0220 8e 9b 9f 5d b2 3c 7d 4c 71 7d 5a f0 f5 33 9e 7b ...].<}Lq}Z..3.{ 0230 a7 d2 67 da a4 4f 0c 1a 9f 1c 34 5d ee 56 3d 31 ..g..O....4].V=1 0240 68 39 d3 65 3e d9 a9 5f 2b a8 d7 bb b5 eb bd da h9.e>.._+....... 0250 95 16 e1 a9 0e f9 d9 3e ed f6 90 71 bd 4d ba d9 .......>...q.M.. 0260 a5 da e8 16 bf ff 64 e8 fb b7 da c3 e2 fa 8e 84 ......d......... 0270 b9 35 e4 f4 ab 25 66 01 47 cb 65 a8 40 b6 04 64 .5...%f.G.e.@..d 0280 0b 18 4c bd 58 22 05 00 31 8d e2 37 e8 dc 1a a5 ..L.X"..1..7.... 0290 98 8c 17 91 31 16 11 90 0f 59 ce 1f 1f 1e 6c 72 ....1....Y....lr 02a0 37 9a 79 8d 06 ca 44 52 d9 a0 c1 ac b4 78 4e b6 7.y...DR.....xN. 02b0 05 73 7a 96 a0 76 af 9e 52 e9 00 b1 36 01 dc 23 .sz..v..R...6..# 02c0 ac ef f2 f0 86 13 ca 91 06 e3 74 d6 b6 94 d3 bc ..........t..... 02d0 71 2e f7 dc 6a 62 a6 d1 4c 39 58 12 75 b0 cc 62 q...jb..L9X.u..b 02e0 d2 9f 3e fe f7 9f 7d ff 93 5f ff ea 8b f3 e7 ef ..>...}.._...... 02f0 99 4d e9 a0 ab 25 ee 8a f5 e7 fb af 5d be aa 05 .M...%......]... 0300 b5 06 89 4e 03 2a d4 3c b1 9a 27 d4 f0 40 1d c8 ...N.*.<..'..@.. 0310 37 0a 79 d6 62 1d b4 eb 20 35 3f a8 e1 87 75 c5 7.y.b... 5?...u. 0320 bb 0d a3 c5 84 f5 7f 04 64 e0 c4 be b4 0f bb 88 ........d....... 0330 ae 48 44 c7 0e eb d8 21 2d 27 a8 e5 40 0e 82 3e .HD....!-'..@..> 0340 73 8f 9a ef 52 83 0e 95 d0 aa 14 99 15 62 83 5c s...R........b.\ 0350 a2 93 49 d4 12 a9 52 2c 95 89 24 52 a1 44 22 90 ..I...R,..$R.D". 0360 4a 04 32 a9 50 21 15 29 e5 62 b5 52 aa 55 cb 75 J.2.P!.).b.R.U.u 0370 5a 85 41 a7 34 18 54 10 fa e2 f2 2b 4a ad 51 a1 Z.A.4.T....+J.Q. 0380 86 49 50 18 19 0a 0d 21 2f 82 51 a0 31 0a 0c 46 .IP....!/.Q.1..F 0390 89 c3 28 09 58 15 19 ab a2 e1 d5 0c 82 9a 45 d4 ..(.X.........E. 03a0 70 48 1a 1e 59 03 52 b4 82 5d 84 14 8d 90 ac 11 pH..Y.R..]...... 03b0 90 d5 10 20 49 c9 23 42 56 92 73 f0 32 36 4e ca ... I.#BV.s.26N. 03c0 c2 49 99 d8 62 95 04 c1 28 b6 52 08 00 23 83 60 .I..b...(.R..#.` 03d0 61 20 5b 29 d9 58 15 04 17 a7 e6 e2 b4 3c 9c 1e a [).X.......<.. 03e0 24 18 04 44 93 88 64 91 90 ed 72 ba 4b 05 78 75 $..D..d...r.K.xu 03f0 9c a0 11 8c 58 45 49 87 2c e3 51 36 fb 75 ed 11 ....XEI.,.Q6.u.. 0400 63 4f c2 3c 98 b2 8e 37 d9 66 9b ed 0b 6d f6 d5 cO.<...7.f...m.. 0410 0e fb c9 2e db 46 8f 75 ab d7 7a a6 cf 72 b6 df .....F.u..z..r.. 0420 72 6e c0 7a 7e c8 7a 61 d8 7e 71 cc f1 d8 a4 fb rn.z~.za.~q..... 0430 f2 8c f7 f1 b9 d0 b5 c5 e8 f5 95 e4 93 ab a9 85 ................ 0440 3e 47 71 99 6b 44 8d 4a 2d a5 01 a4 d2 f2 43 50 >Gq.kD.J-.....CP 0450 e6 12 88 78 90 74 a0 0e 87 c7 64 71 e8 44 0a 06 ...x.t....dq.D.. 0460 85 ad c5 e0 eb 29 74 1c 8b 4b c5 41 f1 8a 89 e1 .....)t..K.A.... 0470 81 14 26 0b a7 33 88 a1 96 01 a0 01 36 5e 22 63 ..&..3......6^"c 0480 d7 23 2a a8 34 1c 81 88 04 58 64 1c 1e 0e 39 88 .#*.4....Xd...9. 0490 cd 24 21 eb 2a 40 42 fd 66 26 be e2 36 f7 3a 64 .$!.*@B.f&..6.:d 04a0 7d 69 87 96 5d 3d 11 73 77 ea e4 3d 26 a5 83 5d }i..]=.sw..=&..] 04b0 3f 59 30 36 07 e5 b9 b0 22 1f b7 72 48 75 72 1e ?Y06...."..rHur. 04c0 8d 4b c1 8b 69 04 5a fd 41 05 fd e8 b1 0e f3 dd .K..i.Z.A....... 04d0 4b 23 f7 9e f0 3f 7b c6 fa f8 bc 6e be 85 39 1a K#...?{....n..9. 04e0 27 cf a4 b9 d3 71 c1 54 5a 3a 9a 96 0d a7 35 23 '....q.TZ:....5# 04f0 49 4d ba 51 ee 76 30 39 a4 92 76 97 6a 33 e5 9d IM.Q.v09..v.j3.. 0500 b6 48 b6 d3 dc 5b 69 fa 0f e7 14 5f 3b 2e ff 6c .H...[i...._;..l 0510 e7 ca 7f 7f 7e f7 cf bf 3b fd e4 70 c5 cf 36 95 ....~...;..p..6. 0520 9f 3e e7 fc fb 2b ce 1f bc 7d 36 af fe ca 3f 3d .>...+...}6...?= 0530 13 de 6e da b7 f3 4f 6d 77 03 88 1b 71 e6 46 5c ..n...Omw...q.F\ 0540 12 16 e3 31 35 a5 d5 d8 ...15... Data […]: 6cb4ce37db56daaceb1dd68d2ecb668f79abc7b4d563dcdc6503a2d7b4d967deecb76e0d3ace8eb8ce8e7ab746bc0331554d75251c5e2b918a10a8faaaba2a4e716e000baa806aea2ad15884442644618af36e11a83a064061b0a8f5f0aae2ee45f515783c9209007044553564a5eaa3186 [Length: 1352]