Frame 17912: 1406 bytes on wire (11248 bits), 1406 bytes captured (11248 bits) Encapsulation type: Ethernet (1) Arrival Time: Jul 22, 2017 02:51:11.857598000 UTC UTC Arrival Time: Jul 22, 2017 02:51:11.857598000 UTC Epoch Arrival Time: 1500691871.857598000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000116000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 457.332249000 seconds] Frame Number: 17912 Frame Length: 1406 bytes (11248 bits) Capture Length: 1406 bytes (11248 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) Destination: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 3] Internet Protocol Version 4, Src: 184.25.56.229, Dst: 172.16.45.52 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1392 Identification: 0x839b (33691) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 57 Protocol: TCP (6) Header Checksum: 0x7e0f [validation disabled] [Header checksum status: Unverified] Source Address: 184.25.56.229 Destination Address: 172.16.45.52 [Source GeoIP: San Jose, US, ASN 20940, Akamai International B.V.] [Source GeoIP City: San Jose] [Source or Destination GeoIP City: San Jose] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP AS Number: 20940] [Source or Destination GeoIP AS Number: 20940] [Source GeoIP AS Organization: Akamai International B.V.] [Source or Destination GeoIP AS Organization: Akamai International B.V.] [Source GeoIP Latitude: 37.3388] [Source or Destination GeoIP Latitude: 37.3388] [Source GeoIP Longitude: -121.8916] [Source or Destination GeoIP Longitude: -121.8916] [Stream index: 42] Transmission Control Protocol, Src Port: 80, Dst Port: 49198, Seq: 729197, Ack: 733, Len: 1352 Source Port: 80 Destination Port: 49198 [Stream index: 82] [Stream Packet Number: 1002] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1352] Sequence Number: 729197 (relative sequence number) Sequence Number (raw): 2638542144 [Next Sequence Number: 730549 (relative sequence number)] Acknowledgment Number: 733 (relative ack number) Acknowledgment number (raw): 288088846 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 980 [Calculated window size: 31360] [Window size scaling factor: 32] Checksum: 0x7bb9 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 5.099380000 seconds] [Time since previous frame in this TCP stream: 0.000116000 seconds] [SEQ/ACK analysis] [iRTT: 0.074982000 seconds] [Bytes in flight: 4056] [Bytes sent since last PSH flag: 73008] TCP payload (1352 bytes) Hypertext Transfer Protocol File Data: 1352 bytes Data (1352 bytes) 0000 23 f3 6e 7f e4 a1 ef 68 68 07 55 55 f5 eb a0 09 #.n....hh.UU.... 0010 fd 56 b8 fa f0 49 fa 71 f4 f6 e3 1a a5 4f 56 0b .V...I.q.....OV. 0020 9a f5 12 b9 3f 64 ae 9d 0d 71 63 6f c7 f5 e7 da ....?d...qco.... 0030 76 23 8d 7a b2 9a b0 03 a6 4a 77 65 75 06 de 80 v#.z.....Jweu... 0040 14 8e 0d c9 6b 8d 56 1f 91 ed 3c e1 1d 2b d1 9c ....k.V...<..+.. 0050 3d ac 00 3d 0b bb 6a af f6 a3 5b 5c 25 85 8d bf =..=..j...[\%... 0060 a7 22 f6 ff 00 6d ec 2b 79 1a d6 a0 e4 74 73 04 ."...m.+y....ts. 0070 55 3a bd 3a 13 a9 6a 8a 1b a2 28 2f fd 38 27 fa U:.:..j...(/.8'. 0080 73 6f 65 b3 6a 94 f4 66 8f a6 b8 e9 f2 9c 11 70 soe.j..f.......p 0090 cb fa ad ff 00 25 5e f6 03 f1 ef cd 45 8f 4a f1 .....%^.....E.J. 00a0 ea c9 1e ae e7 c0 e9 f6 34 8c 0f 51 0a 35 7a 6d ........4..Q.5zm 00b0 c9 2e 7f 1c fb 48 25 0a 28 e6 a6 bd 3a 22 42 b9 .....H%.(...:"B. 00c0 1d 67 92 52 be 91 a7 d4 40 0c dc 10 0f d7 fc 3d .g.R....@......= 00d0 bc f3 0d 14 ae 3a 72 dc 94 ae a1 d4 67 1a 1d a3 .....:r.....g... 00e0 e1 98 5f f3 c5 c7 e3 db e2 e1 4c 7a 40 1d 3c 91 .._.......Lz@.<. 00f0 c4 1b b9 b8 f5 c7 43 07 52 2c c0 a8 66 53 70 3e ......C.R,..fSp> 0100 bc 8b 8e 2f ed ac d7 51 34 e9 a9 91 7f 09 af 51 .../...Q4......Q 0110 e4 8c a4 9e 46 01 57 ea 5a e4 80 3e a4 db fd 6f ....F.W.Z..>...o 0120 6e 2a 97 e9 10 f1 01 ed 3e 7d 62 63 13 96 68 de n*......>}bc..h. 0130 e0 90 75 0b 2f d0 58 7b 75 50 a9 ad 2b d5 5d d8 ..u./.X{uP..+.]. 0140 3d 7c fa e5 ad de e0 30 e3 e8 7d 3f f1 4f 7e 75 =|.....0..}?.O~u 0150 50 71 d3 be 2b 8f 3e b8 55 4a e8 84 33 ff 00 80 Pq..+.>.UJ..3... 0160 3f 8b db e8 3d bb 03 82 33 d5 4b bf 99 ea 14 4b ?...=...3.K....K 0170 36 b5 77 60 aa 57 e9 73 73 7b 5b df 8c 8a c4 f5 6.w`.W.ss{[..... 0180 51 27 cf ae 64 35 98 6a 61 a7 e9 cf 17 23 9b 0f Q'..d5.ja....#.. 0190 74 0b 47 d4 33 d7 bc 4f e9 75 15 d9 c3 b0 0c 6d t.G.3..O.u.....m 01a0 7b 0f f5 ed 7f 6a 18 2b 64 e3 ab 09 08 15 e3 d6 {....j.+d....... 01b0 36 79 2c 14 9b 86 1c 93 6f a1 3f eb 7b 7a 12 aa 6y,.....o.?.{z.. 01c0 49 ae 3a 6d e5 01 41 27 ae 2d 11 04 59 89 b8 b7 I.:m..A'.-..Y... 01d0 3a 78 27 fd 87 ba cd 28 2d 8e 93 b4 85 85 3a c0 :x'....(-.....:. 01e0 23 60 da 5c 82 47 20 10 a3 e9 fd 0d bd b4 1f 39 #`.\.G ........9 01f0 ea 86 b4 ad 7a e2 69 a2 0d 6b 5c b2 89 10 5b eb ....z.i..k\...[. 0200 73 63 ee f4 50 6b eb d3 c8 c4 2f 5e f1 b8 04 13 sc..Pk..../^.... 0210 75 bd 94 5f e8 3f af 03 fd 87 b7 19 aa 29 c2 9d u.._.?.......).. 0220 68 b1 63 43 8e b3 46 b1 7a ac 05 c8 e7 83 73 f9 h.cC..F.z.....s. 0230 27 dd 1a 80 67 a7 d2 36 1d dd 4a a7 30 8b c8 b6 '...g..6..J.0... 0240 b8 f4 fd 3e b7 e0 db 8f 68 9a 46 38 18 ea c4 90 ...>....h.F8.... 0250 34 f5 28 b0 6b 68 23 fa 9f c1 1f 81 ef da c8 42 4.(.kh#........B 0260 78 f5 a0 35 63 ac f0 2e 87 04 ff 00 8b 0e 05 cf x..5c........... 0270 f4 00 0f 77 46 42 35 1f cf ad 27 63 57 ae 02 42 ...wFB5...'cW..B 0280 b2 17 20 f0 7f db 73 ed b9 a4 14 a2 f4 ad 5f f1 .. ...s......._. 0290 f4 e2 0b 85 47 12 da df a9 4d b9 42 2f 7f e9 ed ....G....M.B/... 02a0 24 0c 7c 42 a7 23 aa cd 82 0f 5d ac a4 02 ad 15 $.|B.#....]..... 02b0 e3 3c de e6 fa 7f c3 da 93 45 7d 3d 6d 4d 63 ab .<.......E}=mMc. 02c0 70 eb 98 78 d9 2e bf eb db 9b d8 71 f9 f6 9d e4 p..x.......q.... 02d0 ef a0 e1 d5 91 03 2a 95 f2 eb 01 21 4b 00 41 06 ......*....!K.A. 02e0 ff 00 d6 c2 ff 00 5f af bb 82 34 e3 a7 58 9e 1d ......_...4..X.. 02f0 44 95 da fa 41 b0 45 b0 b9 e3 e9 ed 92 06 aa 8f D...A.E......... 0300 cf ab 0a d2 9d 41 fd 47 d4 7e a3 8f c7 fb 1b 8f .....A.G.~...... 0310 6f 09 41 1a 7a 68 82 4d 4f 58 1d 59 6d 70 45 88 o.A.zh.MOX.YmpE. 0320 b1 03 ea 3f 17 f7 a6 60 1a 87 a4 f2 ad 1f a9 2a ...?...`.......* 0330 ae 8a a5 78 6d 6c dc fd 78 03 fd f0 f7 a3 a4 8c ...xml..x....... 0340 f0 ea 9a 0c 74 6e 1d 64 15 9a 64 45 61 ac 83 f8 ....tn.d..dEa... 0350 36 e4 7f 5f 74 16 e5 ce a5 f2 e9 40 7c 54 f4 f9 6.._t......@|T.. 0360 4e ea e3 90 17 9b 8e 49 d4 0f fa ff 00 e3 ef 66 N......I.......f 0370 42 bd be 7d 55 e4 71 95 eb 2c a2 d6 55 90 c7 e4 B..}U.q..,..U... 0380 0c 3f ad fd 37 22 df 9f 6f 47 a9 a8 09 e9 75 ac .?..7"..oG....u. 0390 e9 6f 2a b0 38 ff 00 2f 40 fe 6d b0 d5 ce f8 fc .o*.8../@.m..... 03a0 92 c6 cc b3 32 87 74 2d 25 f5 58 15 3f e0 2f c7 ....2.t-%.X.?./. 03b0 b3 f8 0b e8 aa e6 9d 09 b5 d9 ee 08 12 40 01 eb .............@.. 03c0 85 66 cb c1 e2 b1 9f c4 1a b2 3d 33 28 14 f1 a8 .f........=3(... 03d0 50 ce 5b e8 0a a9 d5 c7 e6 e2 de dc 59 26 91 c2 P.[.........Y&.. 03e0 80 7a 2e bf db 6c 36 e8 8c ee e0 12 30 3e df b3 .z...l6.....0>.. 03f0 a0 ea b1 d2 3b aa 7e 85 bb 2b d8 02 47 d3 fd 71 ....;.~..+..G..q 0400 ec dc 41 4a 53 a8 e2 fa e5 18 d1 08 c7 4d 5e 4b ..AJS........M^K 0410 df 49 04 9f a1 e2 c4 9f f5 fd be d1 d0 74 4e f3 .I...........tN. 0420 64 31 e0 7a e5 1a 4c ec 0f 00 5f 9b 58 df fa 8b d1.z..L..._.X... 0430 5b dd 15 85 69 d7 a9 51 53 c3 a7 1a 7a 20 dc 33 [...i..QS...z .3 0440 9f e9 fa 45 ed 6b dc 7b b0 57 26 a0 63 a4 ee cc ...E.k.{.W&.c... 0450 1b b0 f4 ff 00 8f a1 a5 8d 84 9c 3c 86 e4 6a 5b ...........<..j[ 0460 e9 23 e9 7f 6f 88 dc 2d 7a f3 3b 48 7f 50 f4 a5 .#..o..-z.;H.P.. 0470 8e 64 85 7f 79 23 94 5b 8d 6c 49 bf fc 83 ee c9 .d..y#.[.lI..... 0480 1b 13 56 e9 b1 23 03 58 c5 3a 60 ad c8 34 c5 95 ..V..#.X.:`..4.. 0490 4e 94 04 80 a0 92 a3 f1 f4 6f 6b 4c 71 a8 aa 1a N........okLq... 04a0 9e bd 2c cc a2 87 89 e9 b0 1d 5e 9b df eb 62 3f ..,.......^...b? 04b0 c3 8e 3d b2 43 f9 1e 99 49 4f 9e 3a cf 1e ad 05 ..=.C...IO.:.... 04c0 6f f4 24 00 7e bf e1 7f 7e 01 ab 93 5e aa ac 59 o.$.~...~...^..Y 04d0 98 f5 2e 28 cf 37 fa 0e 07 fc 16 d7 07 8f 76 d5 ...(.7........v. 04e0 52 40 eb 42 95 eb b9 01 e3 93 6b dc ff 00 ad 7f R@.B......k..... 04f0 cf bf 6b 1c 3a db 29 19 eb 13 46 ce 40 53 a9 39 ..k.:.)...F.@S.9 0500 0c a4 f2 c0 8f a5 bf a1 fc fb 66 43 ab 87 97 4f ..........fC...O 0510 18 58 20 6f 3e 90 39 ac 2f da 4c f3 44 8a 69 e4 .X o>.9./.L.D.i. 0520 62 40 5b fe cb 13 ea 5f f5 af ee 9a 09 5a ae 7a b@[...._.....Z.z 0530 55 04 eb a7 43 e0 ff 00 87 a4 cc 8a 61 66 b9 06 U...C.......af.. 0540 e0 31 3c 71 fe db da 6f .1