Frame 17865: 1406 bytes on wire (11248 bits), 1406 bytes captured (11248 bits) Encapsulation type: Ethernet (1) Arrival Time: Jul 22, 2017 02:51:11.837635000 UTC UTC Arrival Time: Jul 22, 2017 02:51:11.837635000 UTC Epoch Arrival Time: 1500691871.837635000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000183000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 457.312286000 seconds] Frame Number: 17865 Frame Length: 1406 bytes (11248 bits) Capture Length: 1406 bytes (11248 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) Destination: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 3] Internet Protocol Version 4, Src: 63.217.21.41, Dst: 172.16.45.52 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1392 Identification: 0x6bfc (27644) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 59 Protocol: TCP (6) Header Checksum: 0x2fab [validation disabled] [Header checksum status: Unverified] Source Address: 63.217.21.41 Destination Address: 172.16.45.52 [Source GeoIP: Tin Shui Wai, HK, ASN 3491, CONSOLE-CONNECT-ASN] [Source GeoIP City: Tin Shui Wai] [Source or Destination GeoIP City: Tin Shui Wai] [Source GeoIP Country: Hong Kong] [Source or Destination GeoIP Country: Hong Kong] [Source GeoIP ISO Two Letter Country Code: HK] [Source or Destination GeoIP ISO Two Letter Country Code: HK] [Source GeoIP AS Number: 3491] [Source or Destination GeoIP AS Number: 3491] [Source GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source or Destination GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source GeoIP Latitude: 22.4489] [Source or Destination GeoIP Latitude: 22.4489] [Source GeoIP Longitude: 113.9984] [Source or Destination GeoIP Longitude: 113.9984] [Stream index: 40] Transmission Control Protocol, Src Port: 80, Dst Port: 49194, Seq: 302134, Ack: 1475, Len: 1352 Source Port: 80 Destination Port: 49194 [Stream index: 79] [Stream Packet Number: 459] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1352] Sequence Number: 302134 (relative sequence number) Sequence Number (raw): 4187350501 [Next Sequence Number: 303486 (relative sequence number)] Acknowledgment Number: 1475 (relative ack number) Acknowledgment number (raw): 2526152589 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 1033 [Calculated window size: 33056] [Window size scaling factor: 32] Checksum: 0xc04d [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 5.300730000 seconds] [Time since previous frame in this TCP stream: 0.000183000 seconds] TCP payload (1352 bytes) Hypertext Transfer Protocol File Data: 1352 bytes Data (1352 bytes) 0000 5f dc fe d1 47 7e f1 6f 9f f8 b7 8f 1d fb e4 42 _...G~.o.......B 0010 df 7b 27 d8 b3 83 f5 a3 93 e0 7b a1 ea 85 cc ca .{'.......{..... 0020 e2 69 81 c9 8a b2 ae fb f0 27 cf 6e 25 39 48 8f .i.......'.n%9H. 0030 2a 2c 8f f1 a4 47 17 b0 62 42 ae 65 95 f1 46 ec *,...G..bB.e..F. 0040 c8 d2 60 7b 10 5f 5f 6c 17 12 cc b9 a3 55 1e e9 ..`{.__l.....U.. 0050 e2 7d 7b 08 5f 5f 2c 44 cd ce b6 d3 f9 52 b1 ba .}{.__,D.....R.. 0060 5a 2a d4 0a b9 0a 16 a4 39 5a a5 70 79 76 6a f5 Z*......9Z.pyvj. 0070 d0 d6 c9 07 6e 3f 12 d6 63 02 2d e2 30 8a 07 bc ....n?..c.-.0... 0080 41 c8 e3 1b e0 48 5f 42 a6 43 b4 e8 fe c0 cd a5 A....H_B.C...... 0090 08 6a 33 23 a1 28 c7 24 06 00 24 93 94 46 04 a6 .j3#.(.$..$..F.. 00a0 ca b1 c5 6a 78 a3 1d 01 21 e8 e4 64 6e ad 11 9e ...jx...!..dn... 00b0 c9 f1 0b 25 79 2a 2f ec 18 04 6c 02 3d da 6a 55 ...%y*/...l.=.jU 00c0 5f 2c 6a d3 25 7e a2 9a 22 20 d6 9c dd cf 6d ae _,j.%~.." ....m. 00d0 f6 b0 b3 06 0d 78 b4 5a 61 d0 8e 31 8c 9e 48 94 .....x.Za..1..H. 00e0 79 5e d7 41 94 0d 45 13 8a 90 90 f9 8e 41 7c c7 y^.A..E......A|. 00f0 20 f1 ae 41 5a 27 07 01 68 a2 ab 0d 03 d0 b3 de ..AZ'..h....... 0100 32 1f d7 9a d1 8e 41 91 65 d3 9d d0 62 6d b7 76 2.....A.e...bm.v 0110 3c 5a 36 19 ea 48 d4 88 2e d6 a3 f3 b5 e8 4c 25 ..E)_. 01b0 f2 85 29 7f 88 86 43 4c 50 67 71 d0 ba 6b 3c ab ..)...CLPgq..k<. 01c0 99 8b a9 ca 9a a8 69 12 78 1b c6 42 e6 65 8a d9 ......i.x..B.e.. 01d0 48 b8 10 8d 94 63 46 d5 bc 60 3a de 4c c5 9b e9 H....cF..`:.L... 01e0 44 0b 54 26 d1 ce 26 07 73 c9 91 42 7a ac 92 9f D.T&..&.s..Bz... 01f0 f3 39 0f 38 2c 07 5d d6 1e b7 b5 27 e8 73 b0 60 .9.8,.]....'.s.` 0200 7f 71 f7 7b 2c 7b 9d 3d 6f 74 f7 ef 81 6c 07 50 .q.{,{.=ot...l.P 0210 97 0d 76 f6 a6 13 74 10 31 ef 96 77 39 3d 04 48 ..v...t.1..w9=.H 0220 e0 36 8b 17 a4 a0 81 de 7e 2b 78 ce 06 81 83 60 .6......~+x....` 0230 10 dd 99 06 bf bf bb c7 4f 16 3a eb 67 de c7 e0 ........O.:.g... 0240 7c 54 88 92 30 4e 06 70 1c c6 6c 6e 5f 26 9d 74 |T..0N.p..ln_&.t 0250 b9 20 bf db 6f ed ed 73 f4 f7 3a 6d 56 92 a2 20 . ..o..s..:mV.. 0260 08 06 bf 01 1a 0a fa 07 9c 04 4c cc 2f 6e c6 25 ..........L./n.% 0270 0e 74 ac 2c e2 e3 03 1e 09 73 c7 39 04 84 20 09 .t.,.....s.9.. . 0280 b6 b7 92 6a 3d 22 16 44 32 81 b9 8a 62 30 86 bb ...j=".D2...b0.. 0290 48 db 9e 72 08 ec bb 4e 92 f0 64 93 49 0c c1 02 H..r...N..d.I... 02a0 50 40 93 14 14 71 05 dd 9e 5c 38 77 ed c4 8d 2c P@...q...\8w..., 02b0 1b 5b 2a 4f d4 53 e5 62 26 2f 71 c2 b3 77 7e eb .[*O.S.b&/q..w~. 02c0 dd ef fa ef 83 d5 69 1e f6 9b d7 7a 54 d5 8d ba ......i....zT... 02d0 b1 5c 89 8d 65 b4 91 ac 36 98 4f 11 41 b1 d5 b8 .\..e...6.O.A... 02e0 f8 ec 0b 5f 3c b5 75 e1 f0 50 a5 40 61 20 cd 66 ..._<.u..P.@a .f 02f0 87 72 c9 b4 c4 d1 3e 99 42 82 90 8d 20 20 0a 75 .r....>.B... .u 0300 6b b4 9f 41 6c 12 ee 19 cc 46 17 5b e5 43 b3 a5 k..Al....F.[.C.. 0310 85 5a 7a 3a 9f 92 21 47 29 46 c5 64 ef 52 1b ec .Zz:..!G)F.d.R.. 0320 c1 ca 5a 4d 99 4e 45 9e 3e 77 33 25 ab b8 c3 cd ..ZM.NE.>w3%.... 0330 41 01 c6 07 13 4e 0f 62 b1 c3 3d 56 df be 01 c7 A....N.b..=V.... 0340 9e 7e d7 01 10 06 ad c1 03 3d 9e fb ba 14 18 46 .~.......=.....F 0350 2d 3d 97 d6 17 35 bf 83 b3 f7 f1 8e 7e c9 6d e5 -=...5......~.m. 0360 9d 03 ac c3 4a 3b fa 10 1b 78 c6 15 0f 20 29 bf ....J;...x... ). 0370 7d 44 45 af e5 e0 76 c8 f1 5b 2f bf fa d0 ed 97 }DE...v..[/..... 0380 1a e5 da df fd e5 17 e6 55 e6 b9 3c f5 a7 5b c4 ........U..<..[. 0390 8f de 96 f9 fe bb ea df 79 29 f1 ad 5b e2 1f cc ........y)..[... 03a0 bb 9e 28 e3 0f ad af 9e 9e 5e c5 ba 1d 87 17 4e ..(......^.....N 03b0 d7 0b c7 a9 60 bb 3d b6 d6 0a 3a 3e ff cc 8d ba ....`.=...:>.... 03c0 e6 54 43 64 02 c4 12 9d 50 d5 40 29 cd 3f 78 66 .TCd....P.@).?xf 03d0 f9 a9 47 8e fc af 7f fb 1a a9 df fb a6 3b 37 9f ..G..........;7. 03e0 7f fa 81 4f 7f e8 91 af 7c ee 4d 5f f9 dc bb 9f ...O....|.M_.... 03f0 38 39 fe f6 47 d6 ae 1c ad 8f 56 a2 87 e6 d7 12 89..G.....V..... 0400 91 cc 50 a3 45 06 71 d0 05 5b bb 6d e3 d5 21 0c ..P.E.q..[.m..!. 0410 65 08 42 b3 5b 7d d9 44 8e 0c 62 a4 39 f6 e0 fb e.B.[}.D..b.9... 0420 f9 4f ff 15 1c e7 70 18 0e ab c4 a7 9e 38 c1 da .O....p......8.. 0430 0e 50 30 01 62 91 21 70 22 4e 80 02 07 e6 85 66 .P0.b.!p"N.....f 0440 6e b9 1e 3b 34 1c db 6c 47 8f 8e 24 81 41 0b 25 n..;4..lG..$.A.% 0450 09 e4 a0 d9 92 38 57 55 e6 ab ca 5a 33 72 04 3c .....8WU...Z3r.< 0460 5f 0b 2d 14 b4 b9 aa 34 5e 4d 05 cd 89 45 09 a7 _.-....4^M...E.. 0470 33 60 b5 21 36 1b e2 72 99 73 e9 5b cd bb ad 19 3`.!6..r.s.[.... 0480 f0 1e 94 24 43 10 43 a2 a4 47 c2 d1 b8 cc 83 4a ...$C.C..G.....J 0490 bc 6e 50 64 c7 20 a5 63 d0 4e 0e 32 53 cf 5a b3 .nPd. .c.N.2S.Z. 04a0 03 50 eb ff 06 d0 92 a9 8f de 29 73 db 34 e8 2e .P........)s.4.. 04b0 43 20 16 2d d6 22 f3 d5 c8 74 39 3c 5e 08 0f 99 C .-."...t9<^... 04c0 ab fa 68 85 88 92 04 6f 48 51 90 c1 61 97 64 29 ..h....oHQ..a.d) 04d0 8c c1 82 54 00 a1 10 84 84 e1 dd 32 d7 c2 d8 95 ...T.......2.... 04e0 c8 3c 71 05 de 04 98 79 95 93 39 7a 8c 93 4c 17 .