Frame 17667: 1406 bytes on wire (11248 bits), 1406 bytes captured (11248 bits) Encapsulation type: Ethernet (1) Arrival Time: Jul 22, 2017 02:51:11.678600000 UTC UTC Arrival Time: Jul 22, 2017 02:51:11.678600000 UTC Epoch Arrival Time: 1500691871.678600000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000187000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 457.153251000 seconds] Frame Number: 17667 Frame Length: 1406 bytes (11248 bits) Capture Length: 1406 bytes (11248 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) Destination: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 3] Internet Protocol Version 4, Src: 63.217.21.41, Dst: 172.16.45.52 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1392 Identification: 0x6bca (27594) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 59 Protocol: TCP (6) Header Checksum: 0x2fdd [validation disabled] [Header checksum status: Unverified] Source Address: 63.217.21.41 Destination Address: 172.16.45.52 [Source GeoIP: Tin Shui Wai, HK, ASN 3491, CONSOLE-CONNECT-ASN] [Source GeoIP City: Tin Shui Wai] [Source or Destination GeoIP City: Tin Shui Wai] [Source GeoIP Country: Hong Kong] [Source or Destination GeoIP Country: Hong Kong] [Source GeoIP ISO Two Letter Country Code: HK] [Source or Destination GeoIP ISO Two Letter Country Code: HK] [Source GeoIP AS Number: 3491] [Source or Destination GeoIP AS Number: 3491] [Source GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source or Destination GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source GeoIP Latitude: 22.4489] [Source or Destination GeoIP Latitude: 22.4489] [Source GeoIP Longitude: 113.9984] [Source or Destination GeoIP Longitude: 113.9984] [Stream index: 40] Transmission Control Protocol, Src Port: 80, Dst Port: 49194, Seq: 250758, Ack: 1475, Len: 1352 Source Port: 80 Destination Port: 49194 [Stream index: 79] [Stream Packet Number: 378] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1352] Sequence Number: 250758 (relative sequence number) Sequence Number (raw): 4187299125 [Next Sequence Number: 252110 (relative sequence number)] Acknowledgment Number: 1475 (relative ack number) Acknowledgment number (raw): 2526152589 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 1033 [Calculated window size: 33056] [Window size scaling factor: 32] Checksum: 0xa60f [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 5.141695000 seconds] [Time since previous frame in this TCP stream: 0.000187000 seconds] [SEQ/ACK analysis] [iRTT: 0.076622000 seconds] [Bytes in flight: 16224] [Bytes sent since last PSH flag: 32448] TCP payload (1352 bytes) Hypertext Transfer Protocol File Data: 1352 bytes Data (1352 bytes) 0000 7a c7 6a 27 32 ef ec 69 b6 0d 9a 0c a8 cf e6 16 z.j'2..i........ 0010 d0 b8 97 cc cb a7 9d e2 bb 94 63 63 32 47 bf 9a ..........cc2G.. 0020 16 64 d6 3b be d4 79 d5 7b 40 12 e1 11 f5 4a 6c .d.;..y.{@....Jl 0030 82 eb 94 45 1f 00 d3 6e d2 19 c5 d3 6f ed 1c 48 ...E...n....o..H 0040 3c 00 00 80 00 49 44 41 54 69 4e cf 61 83 a7 a7 <....IDATiN.a... 0050 6c 1a 07 5e 0d c6 07 ae 18 26 08 3b 88 2f c6 39 l..^.....&.;./.9 0060 34 38 5b 1c 93 28 6c ba 45 44 b6 a1 0d 3d b4 7d 48[..(l.ED...=.} 0070 07 b1 db 82 62 05 c1 e6 d1 76 40 fa bf 40 a2 c7 ....b....v@..@.. 0080 ae 7a 70 07 7c 61 0c 62 2d 44 f0 35 80 0b 8c 0f .zp.|a.b-D.5.... 0090 0b d0 be 7f f9 0e 01 1a 48 44 ba bd 0e 2f 00 9d ........HD.../.. 00a0 d7 67 37 08 cd b0 83 bf 7e bc 7b 0f 61 7f 9a f7 .g7.....~.{.a... 00b0 61 82 5e 9d 5e 02 43 30 f0 70 40 24 d3 8d e5 c1 a.^.^.C0.p@$.... 00c0 cf a3 fe 44 18 05 6f 3f c9 cb 41 9c 1e 8d a7 60 ...D..o?..A....` 00d0 10 dc 0a 48 01 60 e1 3e e0 5f f0 bf f7 67 57 d8 ...H.`.>._...gW. 00e0 01 71 60 82 f0 3a 20 11 1b 38 8e e8 c0 15 d5 71 .q`..: ..8.....q 00f0 56 cd ca 5e a6 3b f3 bc bb e9 03 eb b3 b3 c5 e6 V..^.;.......... 0100 f6 f4 e2 6a 79 0c 26 5e 2e 8f 59 6c 08 4f f4 62 ...jy.&^..Yl.O.b 0110 73 b8 ee 93 99 2e 78 23 f0 e8 64 3e 3f 9e cd 2f s.....x#..d>?../ 0120 56 87 47 f0 b3 d3 f5 dd e5 c5 eb 97 67 ef 5f 9e V.G.........g._. 0130 1f 2f 86 ff fc 4f 3f 1f 5f ae 06 9d d8 d4 78 4b ./...O?._.....xK 0140 97 1a fb cf 5b b5 7a 7d 7f bf ac d2 24 f5 f1 e0 ....[.z}....$... 0150 43 71 e2 69 96 c5 b7 49 a7 75 60 69 69 e2 da 9e Cq.i...I.u`ii... 0160 7a 77 7d 7a b9 9d 55 a1 e9 38 7c 5a 59 5e 28 0c zw}z..U..8|ZY^(. 0170 3a c1 20 0a b7 43 bc 98 97 78 aa ae f3 82 74 50 :. ..C...x....tP 0180 6f fc b5 ed 8a ba d1 d0 bd 5a 52 aa 65 69 99 4a o........ZR.ei.J 0190 5d 6f d5 ac 56 dd 90 9a ba 50 17 6b cf f5 76 cd ]o..V....P.k..v. 01a0 e1 9a 6a a3 06 07 94 58 46 37 0a 4a df 55 9b 75 ..j....XF7.J.U.u 01b0 04 56 36 cf 03 2b d8 92 51 d4 94 2c 0f 7c e1 c1 .V6..+..Q..,.|.. 01c0 26 da 65 ce 45 74 0d 1c 60 08 fb 95 e7 65 16 82 &.e.Et..`....e.. 01d0 2c 18 1f 70 47 04 74 58 b4 05 07 44 e6 15 7a 01 ,..pG.tX...D..z. 01e0 28 83 70 ac 17 c6 08 5d 71 f3 a1 6e 10 21 92 05 (.p....]q..n.!.. 01f0 a9 11 d2 e2 78 a4 db f8 b2 c0 1d 6c 3d 59 c7 8e ....x......l=Y.. 0200 c5 49 b8 ff d8 e2 08 91 ea 80 41 de 03 86 4c d5 .I........A...L. 0210 72 6d dc 15 bf 40 bc 1b 8f 8a 74 4e 53 e5 a4 93 rm...@....tNS... 0220 22 99 a4 ee f1 28 3b 1e 86 8b 5c bf 5e e4 af 8f "....(;...\.^... 0230 3a b7 cb e4 bb d3 ee dd c9 70 5a 05 16 02 46 cd :........pZ...F. 0240 74 74 d3 31 ac ca 8f f1 05 24 b6 9a b9 46 6c 19 tt.1.....$...Fl. 0250 95 e3 40 99 61 f4 82 a0 e7 fb e0 a3 ce 18 a4 ba ..@.a........... 0260 8e ee 7b 66 14 58 49 e8 64 b1 9b 27 5e 91 fa 45 ..{f.XI.d..'^..E 0270 ee a3 ca c8 28 83 a8 15 0a 09 83 06 04 43 3e c1 ....(........C>. 0280 50 42 30 34 cb 88 1b a2 cd 43 ac a7 2c 84 4d 5b PB04.....C..,.M[ 0290 14 e1 2c 27 21 1b 65 90 df 0d 3d dc f9 fc 73 2b ..,'!.e...=...s+ 02a0 c4 96 69 f5 35 26 9d 36 7e 11 6b c6 e8 63 13 07 ..i.5&.6~.k..c.. 02b0 a4 58 0f 00 32 88 a4 67 28 4b f3 0a 1a 2d 7e ad .X..2..g(K...-~. 02c0 0e 55 35 9a 7f a6 e1 27 75 3e 09 be 9d 89 24 18 .U5....'u>....$. 02d0 a3 99 83 68 7e 42 92 cc 8c e4 5a cd ca e1 2e cf ...h~B....Z..... 02e0 7c fe 24 29 1a d1 00 4a f2 21 c9 13 52 90 1c ac |.$)...J.!..R... 02f0 34 40 60 3c 9a 13 97 44 d3 0c 75 87 2b 9a f1 03 4@`<...D..u.+... 0300 98 5b 53 b1 f9 f7 34 fb c7 64 fb a0 87 83 ec 1c .[S...4..d...... 0310 82 9e 25 75 5e 78 91 98 24 5d f5 52 cb cf 9d b0 ..%u^x..$].R.... 0320 20 c9 a4 93 d4 0a bb 61 01 f5 a2 b2 f2 b3 61 5c ......a......a\ 0330 41 a3 a4 03 3d 0c 0b ea 01 3d cb ce 14 11 19 b4 A...=....=...... 0340 20 d3 35 fa 83 18 05 9b 0c 1d 3a 1c 2f 71 eb 70 .5.......:./q.p 0350 73 1e b1 f5 fa ec fa c5 ea f8 ee e8 fc f5 e9 8b s............... 0360 db c3 f3 97 87 e7 67 b3 43 66 7f c0 a0 6f af 5f ......g.Cf...o._ 0370 a3 e4 f7 c3 62 56 0c fe e9 c7 3f 0e a2 12 24 82 ....bV....?...$. 0380 91 79 73 71 0d 76 80 38 1f 5f bd bb 3f bb c4 93 .ysq.v.8._..?... 0390 0d 7b 98 3b ee e1 64 5a 7a 30 c6 c5 20 4a 0e 87 .{.;..dZz0.. J.. 03a0 a3 7f fc f8 7e dd eb 5f 6f b6 b8 39 08 af 10 67 ....~.._o..9...g 03b0 01 37 ff db bf fd 07 9c 14 3c d4 b7 37 77 1f 6e .7.......<..7w.n 03c0 5f bd 3a bd 78 77 75 83 2d 8e c0 12 de 9d 9c 23 _.:.xwu.-......# 03d0 aa 1d c5 65 8f 64 05 09 68 40 da 5b f4 87 9b c1 ...e.d..h@.[.... 03e0 2c 52 1d 7c e6 ab f5 e9 cb e3 2b d2 60 3f 9f 5f ,R.|......+.`?._ 03f0 6d 36 77 27 a7 d7 db ed 76 38 dc 8e 46 88 85 03 m6w'....v8..F... 0400 d9 20 2d 68 c7 17 df be 7f 7f 7c ba 9e 0e f3 3c . -h......|....< 0410 b6 fe f0 cb c7 ff f2 1f ff 43 99 3a 32 d7 90 39 .........C.:2..9 0420 be b1 57 13 9b a2 d0 e6 34 4d 86 2c 4b 0b e0 87 ..W.....4M.,K... 0430 e8 72 c7 72 9d b7 db a2 5e af fb aa 90 04 e6 01 .r.r....^....... 0440 b7 17 c4 a6 c0 ef 05 91 da 1f 27 5e 24 96 a9 f5 ..........'^$... 0450 c3 ab bb 7f fb c7 5f a6 bd ec 70 35 f0 6d 49 10 ......_...p5.mI. 0460 f6 05 71 4f 56 6b 96 27 78 19 1f a4 62 14 c9 96 ..qOVk.'x...b... 0470 dc 70 f9 b6 2f 0a 78 4b 4b 80 af 69 7b 02 17 c8 .p../.xKK..i{... 0480 82 23 70 8e c8 3b 64 70 90 ec c9 92 85 5f 05 c9 .#p..;dp....._.. 0490 97 49 84 e5 49 b2 d1 6a 43 16 47 90 e4 08 a4 ad .I..I..jC.G..... 04a0 07 94 b1 81 24 59 ce 6c a7 1b 86 b1 61 20 c6 5c ....$Y.l....a .\ 04b0 74 3a 3d 52 02 63 6c 89 22 18 19 07 91 11 70 0f t:=R.cl.".....p. 04c0 d6 b0 e4 2d 09 ea 73 55 2b 1c 57 6f b6 68 2c 06 ...-..sU+.Wo.h,. 04d0 77 03 03 c5 db 3c 3e 83 e4 02 40 b2 6e c2 c3 71 w....<>...@.n..q 04e0 12 cd e3 45 7e 35 38 c9 12 55 c8 24 6b c9 cb 4a ...E~58..U.$k..J 04f0 53 10 6a ed 16 19 f8 7d b0 ff d5 be 22 19 49 d0 S.j....}....".I. 0500 49 43 30 68 5c a4 53 9b 27 4d da ae 20 4e d2 f0 IC0h\.S.'M.. N.. 0510 1a 21 43 a4 ac 4b e7 66 d5 41 38 f6 6a 53 bd 3d .!C..K.f.A8.jS.= 0520 ec 9c af 47 e7 b0 ad 64 82 88 6e 6b b2 dc 6e 6b ...G...d..nk..nk 0530 4d 41 6b b5 10 87 c2 62 e0 72 e0 65 4a 1f 57 64 MAk....b.r.eJ.Wd 0540 21 c0 81 d7 b0 44 05 0c !....D.. Data […]: 7ac76a2732efec69b60d9a0ca8cfe616d0b897cccba79de2bb9463633247bf9a1664d63bbed479d57b4012e111f54a6c82eb94451f00d36ed219c5d36fed1c483c0000800049444154694ecf6183a7a76c1a075e0dc607ae1826083b882fc63934385b1c93286cba4544b6a10d3db47d07b [Length: 1352]