Frame 1778: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
    Encapsulation type: Ethernet (1)
    Arrival Time: Jul 22, 2017 02:46:03.855282000 UTC
    UTC Arrival Time: Jul 22, 2017 02:46:03.855282000 UTC
    Epoch Arrival Time: 1500691563.855282000
    [Time shift for this packet: 0.000000000 seconds]
    [Time delta from previous captured frame: 0.072555000 seconds]
    [Time delta from previous displayed frame: 0.000000000 seconds]
    [Time since reference or first frame: 149.329933000 seconds]
    Frame Number: 1778
    Frame Length: 66 bytes (528 bits)
    Capture Length: 66 bytes (528 bits)
    [Frame is marked: False]
    [Frame is ignored: False]
    [Protocols in frame: eth:ethertype:ip:tcp]
Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: ASUSTekCOMPU_0e:f3:3a (00:18:f3:0e:f3:3a)
    Destination: ASUSTekCOMPU_0e:f3:3a (00:18:f3:0e:f3:3a)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IPv4 (0x0800)
    [Stream index: 6]
Internet Protocol Version 4, Src: 63.217.21.26, Dst: 172.16.45.98
    0100 .... = Version: 4
    .... 0101 = Header Length: 20 bytes (5)
    Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
        0000 00.. = Differentiated Services Codepoint: Default (0)
        .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
    Total Length: 52
    Identification: 0x0880 (2176)
    010. .... = Flags: 0x2, Don't fragment
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    ...0 0000 0000 0000 = Fragment Offset: 0
    Time to Live: 59
    Protocol: TCP (6)
    Header Checksum: 0x984c [validation disabled]
    [Header checksum status: Unverified]
    Source Address: 63.217.21.26
    Destination Address: 172.16.45.98
    [Source GeoIP: Tin Shui Wai, HK, ASN 3491, CONSOLE-CONNECT-ASN]
        [Source GeoIP City: Tin Shui Wai]
        [Source or Destination GeoIP City: Tin Shui Wai]
        [Source GeoIP Country: Hong Kong]
        [Source or Destination GeoIP Country: Hong Kong]
        [Source GeoIP ISO Two Letter Country Code: HK]
        [Source or Destination GeoIP ISO Two Letter Country Code: HK]
        [Source GeoIP AS Number: 3491]
        [Source or Destination GeoIP AS Number: 3491]
        [Source GeoIP AS Organization: CONSOLE-CONNECT-ASN]
        [Source or Destination GeoIP AS Organization: CONSOLE-CONNECT-ASN]
        [Source GeoIP Latitude: 22.4489]
        [Source or Destination GeoIP Latitude: 22.4489]
        [Source GeoIP Longitude: 113.9984]
        [Source or Destination GeoIP Longitude: 113.9984]
    [Stream index: 27]
Transmission Control Protocol, Src Port: 80, Dst Port: 49157, Seq: 0, Ack: 1, Len: 0
    Source Port: 80
    Destination Port: 49157
    [Stream index: 37]
    [Stream Packet Number: 5]
    [Conversation completeness: Incomplete, DATA (15)]
        ..0. .... = RST: Absent
        ...0 .... = FIN: Absent
        .... 1... = Data: Present
        .... .1.. = ACK: Present
        .... ..1. = SYN-ACK: Present
        .... ...1 = SYN: Present
        [Completeness Flags: ··DASS]
    [TCP Segment Len: 0]
    Sequence Number: 0    (relative sequence number)
    Sequence Number (raw): 4032266454
    [Next Sequence Number: 1    (relative sequence number)]
    Acknowledgment Number: 1    (relative ack number)
    Acknowledgment number (raw): 903050693
    1000 .... = Header Length: 32 bytes (8)
    Flags: 0x012 (SYN, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Accurate ECN: Not set
        .... 0... .... = Congestion Window Reduced: Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 0... = Push: Not set
        .... .... .0.. = Reset: Not set
        .... .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish acknowledge (SYN+ACK): server port 80]
                [Connection establish acknowledge (SYN+ACK): server port 80]
                [Severity level: Chat]
                [Group: Sequence]
        .... .... ...0 = Fin: Not set
        [TCP Flags: ·······A··S·]
    Window: 29200
    [Calculated window size: 29200]
    Checksum: 0x814a [unverified]
    [Checksum Status: Unverified]
    Urgent Pointer: 0
    Options: (12 bytes), Maximum segment size, No-Operation (NOP), No-Operation (NOP), SACK permitted, No-Operation (NOP), Window scale
        TCP Option - Maximum segment size: 1352 bytes
            Kind: Maximum Segment Size (2)
            Length: 4
            MSS Value: 1352
        TCP Option - No-Operation (NOP)
            Kind: No-Operation (1)
        TCP Option - No-Operation (NOP)
            Kind: No-Operation (1)
        TCP Option - SACK permitted
            Kind: SACK Permitted (4)
            Length: 2
        TCP Option - No-Operation (NOP)
            Kind: No-Operation (1)
        TCP Option - Window scale: 5 (multiply by 32)
            Kind: Window Scale (3)
            Length: 3
            Shift count: 5
            [Multiplier: 32]
    [Timestamps]
        [Time since first frame in this TCP stream: 0.147162000 seconds]
        [Time since previous frame in this TCP stream: 0.072555000 seconds]
    [SEQ/ACK analysis]
        [iRTT: 0.074347000 seconds]
        [TCP Analysis Flags]
            [Expert Info (Warning/Sequence): This frame is a (suspected) out-of-order segment]
                [This frame is a (suspected) out-of-order segment]
                [Severity level: Warning]
                [Group: Sequence]