Frame 17668: 1406 bytes on wire (11248 bits), 1406 bytes captured (11248 bits) Encapsulation type: Ethernet (1) Arrival Time: Jul 22, 2017 02:51:11.678788000 UTC UTC Arrival Time: Jul 22, 2017 02:51:11.678788000 UTC Epoch Arrival Time: 1500691871.678788000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000188000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 457.153439000 seconds] Frame Number: 17668 Frame Length: 1406 bytes (11248 bits) Capture Length: 1406 bytes (11248 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) Destination: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 3] Internet Protocol Version 4, Src: 63.217.21.41, Dst: 172.16.45.52 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1392 Identification: 0x6bcb (27595) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 59 Protocol: TCP (6) Header Checksum: 0x2fdc [validation disabled] [Header checksum status: Unverified] Source Address: 63.217.21.41 Destination Address: 172.16.45.52 [Source GeoIP: Tin Shui Wai, HK, ASN 3491, CONSOLE-CONNECT-ASN] [Source GeoIP City: Tin Shui Wai] [Source or Destination GeoIP City: Tin Shui Wai] [Source GeoIP Country: Hong Kong] [Source or Destination GeoIP Country: Hong Kong] [Source GeoIP ISO Two Letter Country Code: HK] [Source or Destination GeoIP ISO Two Letter Country Code: HK] [Source GeoIP AS Number: 3491] [Source or Destination GeoIP AS Number: 3491] [Source GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source or Destination GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source GeoIP Latitude: 22.4489] [Source or Destination GeoIP Latitude: 22.4489] [Source GeoIP Longitude: 113.9984] [Source or Destination GeoIP Longitude: 113.9984] [Stream index: 40] Transmission Control Protocol, Src Port: 80, Dst Port: 49194, Seq: 252110, Ack: 1475, Len: 1352 Source Port: 80 Destination Port: 49194 [Stream index: 79] [Stream Packet Number: 379] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1352] Sequence Number: 252110 (relative sequence number) Sequence Number (raw): 4187300477 [Next Sequence Number: 253462 (relative sequence number)] Acknowledgment Number: 1475 (relative ack number) Acknowledgment number (raw): 2526152589 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 1033 [Calculated window size: 33056] [Window size scaling factor: 32] Checksum: 0xce94 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 5.141883000 seconds] [Time since previous frame in this TCP stream: 0.000188000 seconds] [SEQ/ACK analysis] [iRTT: 0.076622000 seconds] [Bytes in flight: 17576] [Bytes sent since last PSH flag: 33800] TCP payload (1352 bytes) Hypertext Transfer Protocol File Data: 1352 bytes Data (1352 bytes) 0000 32 64 db 52 3d 47 0f 3c 33 0e ec 2c 72 f2 98 00 2d.R=G.<3..,r... 0010 a8 cc fc 32 0f 8a 22 c8 3f 67 50 38 60 56 28 de ...2..".?gP8`V(. 0020 31 68 9a 06 33 d2 3c 14 cc 49 43 75 f8 a8 29 61 1h..3.<..ICu..)a 0030 50 38 4a 83 41 1c 74 23 bf f2 49 ab 73 ea 38 08 P8J.A.t#..I.s.8. 0040 bb 28 83 e8 72 f5 bb 39 1c 6c 65 8e 47 f4 d0 dc .(..r..9.le.G... 0050 f8 40 0f 15 a3 8f 0e f1 d2 b3 49 d6 fb a4 1c ea .@........I..... 0060 ff 4a e4 38 42 98 71 f6 44 f9 53 ed 72 27 d2 54 .J.8B.q.D.S.r'.T 0070 8a 24 6b 22 cb e8 3a a0 c9 52 69 4a e9 bc 17 67 .$k"..:..RiJ...g 0080 dd 88 e4 be e9 84 49 27 88 61 02 c1 72 26 fc da ......I'.a..r&.. 0090 09 92 6e 98 f4 a2 14 76 00 b6 96 0d e4 19 91 b4 ..n....v........ 00a0 d0 d5 84 e5 5d 2c 58 ce 90 1e 1b 6a f8 98 05 8d ....],X....j.... 00b0 a8 bb 83 14 cb 28 c4 92 90 cc 1f 92 90 b0 e9 57 .....(.........W 00c0 f0 59 a8 a3 20 32 ec 1d df 37 cd 4d 81 28 dd 11 .Y.. 2...7.M.(.. 00d0 75 54 4d a8 a0 20 4f 34 02 d9 f2 25 d3 17 8d 48 uTM.. O4...%...H 00e0 71 50 4a 7d c9 0e 15 37 52 3d 32 95 cc 8c 58 ef qPJ}...7R=2...X. 00f0 06 02 3a 6c 0b 37 ee 45 a0 43 09 6c e1 be 11 4c ..:l.7.E.C.l...L 0100 97 c3 a3 e1 ec c5 ea 68 d3 1d bd 3a 3a 7f 77 7e .......h...::.w~ 0110 fd cb b7 3f 6c 07 0b 78 0d e0 09 86 e8 c3 cd 9b ...?l..x........ 0120 97 47 97 2c 98 85 39 7a 7f f5 ea bf ff eb bf e3 .G.,..9z........ 0130 7a 01 a0 df 7f f3 fd 11 69 be 59 ff e1 c3 c7 2a z.......i.Y....* 0140 f0 fb 49 8c 48 01 db 5e 1c 95 b6 b7 28 3a e3 24 ..I.H..^....(:.$ 0150 7b b1 dc 9c 4f 17 df be b8 7d 6c fa 81 f1 f9 6f {...O....}l....o 0160 ff fa e7 9b c3 e3 db a3 93 1f 5f bf 7d ff e2 06 .........._.}... 0170 91 1a e2 35 ec fc e9 bb 8f 28 3c 88 e0 f0 d7 dc ...5.....(<..... 0180 01 76 03 54 d7 87 93 05 be 08 92 f4 03 41 d9 74 .v.T.........A.t 0190 89 2d ee 4f 6a ba 28 5d 2f 36 9b 8b e5 f2 78 32 .-.Oj.(]/6....x2 01a0 7e 75 7a fa e1 f6 f6 e3 fd fd eb d3 f3 55 35 38 ~uz..........U58 01b0 5f 1e 9e 1e 9f 6d 8f 8e fe fb ff f2 1f 93 d2 5f _....m........._ 01c0 2d aa c9 bc 1c ad fb 89 af 59 2a 49 df ce d7 04 -........Y*I.... 01d0 8d d7 44 4e 10 38 5e 83 95 70 10 00 35 4c 53 c6 ..DN.8^..p..5LS. 01e0 fd 34 78 49 69 b4 14 b2 18 b4 86 ea 98 1c 0a e4 .4xIi........... 01f0 20 33 ed 48 76 43 dc 65 2e 88 d5 d9 b0 54 b8 83 3.HvC.e.....T.. 0200 e1 30 76 03 3e 8f 34 db 6c 19 66 b3 ec 79 56 20 .0v.>.4.l.f..yV 0210 4e 56 89 ed 36 2d 1b 91 5c dd 17 c4 48 55 43 0d NV..6-..\...HUC. 0220 df 17 ef 92 94 3a 2d 5b e0 c8 78 7f 6a 76 b0 83 .....:-[..x.jv.. 0230 48 04 db c4 b0 28 32 2c 84 51 c0 07 68 8e d0 09 H....(2,.Q..h... 0240 fe 05 5e 92 cc 52 0e 63 d6 e8 3e cd 2b 58 4b 76 ..^..R.c..>.+XKv 0250 9c f9 1a 96 4d 81 18 9f c0 9e 96 59 15 b8 78 35 ....M......Y..x5 0260 b3 cd 23 10 03 65 98 cc 16 8f 23 90 d1 02 d7 04 ..#..e....#..... 0270 c8 e6 45 47 94 6d c5 d0 c8 5a 1d 92 d4 12 20 b1 ..EG.m...Z.... . 0280 c9 63 cb d7 db 8d e7 35 a8 b9 57 6f ec d5 5b 07 .c.....5..Wo..[. 0290 4d ae de 6e d7 5a 44 0d 1e ac 0e 9c aa ca 16 e3 M..n.ZD......... 02a0 fe 21 49 91 da e0 d4 26 a0 a9 24 ba 9d 5b 4a 66 .!I....&..$..[Jf 02b0 88 89 ca c7 72 3b 10 9b 44 42 13 37 d0 90 c9 4c ....r;..DB.7...L 02c0 7d 55 68 e1 5e 6b 3c 6f b4 45 48 ad b7 a5 83 a6 }Uh.^ko...^^.... 0470 f9 9b f7 3f bc bc 9f 24 25 19 cd 70 7d fb 4f ff ...?...$%..p}.O. 0480 f2 2f bf ff e5 e7 57 2f 4f df be 3e f3 7c a5 2d ./....W/O..>.|.- 0490 d5 c7 30 0c 8e 25 b7 44 a9 41 cb 5e 5b 10 79 41 ..0..%.D.A.^[.yA 04a0 91 a4 38 0c 14 89 53 15 3e d2 2c 57 d1 49 ea 1c ..8...S.>.,W.I.. 04b0 4d b6 4d 25 08 8d b0 34 ec 58 f2 33 39 ce a5 c1 M.M%...4.X.39... 04c0 c4 5b 6c 60 44 da 65 e8 85 a6 16 47 46 d9 75 8e .[l`D.e....GF.u. 04d0 37 c3 28 50 1c 9b 2b 2b d7 b4 b9 ab 6b 04 28 5a 7.(P..++....k.(Z 04e0 e4 a2 f2 6c f9 8a 94 e8 24 a7 5f 6a 19 99 4d 32 ...l....$._j..M2 04f0 31 11 d9 24 b7 0e 6c cb 20 26 45 a8 74 dd 61 92 1..$..l. &E.t.a. 0500 81 3b 60 4a 8f a4 82 8c 19 5c 10 5b b1 66 e6 50 .;`J.....\.[.f.P 0510 d1 f5 36 67 89 a2 c1 f1 06 c9 61 22 42 64 d6 a5 ..6g......a"Bd.. 0520 42 16 ba 71 24 99 74 18 4b 1c e9 e3 97 44 17 66 B..q$.t.K....D.f 0530 4a 51 51 ce 6d 3a e6 d0 84 e5 21 29 9c 15 3a e4 JQQ.m:....!)..:. 0540 87 b7 51 96 38 01 3b 5a ..Q.8.;Z Data […]: 3264db523d470f3c330eec2c72f29800a8ccfc320f8a22c83f675038605628de31689a0633d23c14cc494375f8a8296150384a83411c7423bff249ab73ea3808bb2883e872f5bb391c6c658e47f4d0dcf8400f15a38f0ef1d2b349d6fba41ceaff4ae438429871f644f953ed7227d2548a2 [Length: 1352]