Frame 18053: 1406 bytes on wire (11248 bits), 1406 bytes captured (11248 bits) Encapsulation type: Ethernet (1) Arrival Time: Jul 22, 2017 02:51:11.989304000 UTC UTC Arrival Time: Jul 22, 2017 02:51:11.989304000 UTC Epoch Arrival Time: 1500691871.989304000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000380000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 457.463955000 seconds] Frame Number: 18053 Frame Length: 1406 bytes (11248 bits) Capture Length: 1406 bytes (11248 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) Destination: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 3] Internet Protocol Version 4, Src: 63.217.21.41, Dst: 172.16.45.52 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1392 Identification: 0x6c0e (27662) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 59 Protocol: TCP (6) Header Checksum: 0x2f99 [validation disabled] [Header checksum status: Unverified] Source Address: 63.217.21.41 Destination Address: 172.16.45.52 [Source GeoIP: Tin Shui Wai, HK, ASN 3491, CONSOLE-CONNECT-ASN] [Source GeoIP City: Tin Shui Wai] [Source or Destination GeoIP City: Tin Shui Wai] [Source GeoIP Country: Hong Kong] [Source or Destination GeoIP Country: Hong Kong] [Source GeoIP ISO Two Letter Country Code: HK] [Source or Destination GeoIP ISO Two Letter Country Code: HK] [Source GeoIP AS Number: 3491] [Source or Destination GeoIP AS Number: 3491] [Source GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source or Destination GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source GeoIP Latitude: 22.4489] [Source or Destination GeoIP Latitude: 22.4489] [Source GeoIP Longitude: 113.9984] [Source or Destination GeoIP Longitude: 113.9984] [Stream index: 40] Transmission Control Protocol, Src Port: 80, Dst Port: 49194, Seq: 322414, Ack: 1475, Len: 1352 Source Port: 80 Destination Port: 49194 [Stream index: 79] [Stream Packet Number: 497] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1352] Sequence Number: 322414 (relative sequence number) Sequence Number (raw): 4187370781 [Next Sequence Number: 323766 (relative sequence number)] Acknowledgment Number: 1475 (relative ack number) Acknowledgment number (raw): 2526152589 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 1033 [Calculated window size: 33056] [Window size scaling factor: 32] Checksum: 0xaf3e [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 5.452399000 seconds] [Time since previous frame in this TCP stream: 0.000380000 seconds] [SEQ/ACK analysis] [iRTT: 0.076622000 seconds] [Bytes in flight: 2704] [Bytes sent since last PSH flag: 105456] TCP payload (1352 bytes) Hypertext Transfer Protocol File Data: 1352 bytes Data (1352 bytes) 0000 44 5f 7e f4 e1 7b af bd fb d7 bf fc f3 cd b7 7f D_~..{.......... 0010 77 ec e8 cb fb f7 3c 3a b9 69 ef 68 c7 b6 b8 37 w.....<:.i.h...7 0020 d9 5a d3 66 53 99 cc 72 ad 51 a2 32 88 65 46 50 .Z.fS..r.Q.2.eFP 0030 62 96 88 ad 52 b1 43 be 52 88 a9 c5 d9 29 42 fa b...R.C.R....)B. 0040 ac 80 b2 cb f4 57 42 d0 cf 53 13 2b 60 01 dd c1 .....WB..S.+`... 0050 24 b8 c3 cf 1a 8a 1a 05 91 6c 14 02 c2 06 51 c8 $........l....Q. 0060 00 06 0d 52 bf 41 ee 33 28 3d 06 c8 a5 d7 38 f4 ...R.A.3(=....8. 0070 5a 9b 4e 6b d1 ea 4c 1a bd 31 8b d1 a8 31 99 b4 Z.Nk..L..1...1.. 0080 16 b3 de 66 35 38 ec 66 b7 cb ea f5 d8 7d 5e 87 ...f58.f.....}^. 0090 df e7 f0 fb 1d 3e bf c3 eb b3 bb 7c 36 87 d7 62 .....>.....|6..b 00a0 43 a8 70 04 08 87 87 51 67 8f 04 35 9e a0 21 12 C.p....Qg..5..!. 00b0 34 64 a2 86 4a d4 32 48 3a 36 59 cb a5 ea 04 34 4d..J.2H:6Y....4 00c0 3d 40 d7 8b e9 7a 09 c3 00 23 65 c0 27 fa ec 91 =@...z...#e.'... 00d0 ae 03 69 5a 31 55 23 a2 a8 01 b2 4a 40 56 f1 49 ..iZ1U#....J@V.I 00e0 ca ac 89 b2 32 ca c2 c9 02 47 24 15 97 00 f1 09 ....2....G$..... 00f0 b0 71 34 02 82 46 48 d4 0a 89 3a 80 a8 07 48 46 .q4..FH...:...HF 0100 31 ac 1e 8a 45 4a b3 c9 e9 0e 15 d3 ad 61 fb f5 1...EJ.......a.. 0110 fc 90 59 14 b5 49 12 2e 45 ca ab ae 0d ea 9b a2 ..Y..I..E....... 0120 a6 8e 84 b5 37 69 1f aa 71 4e d4 bb b6 35 b9 a6 ....7i..qN...5.. 0130 5b 5d f3 1d b0 83 9c fb 7a 1c cb bd 8e fd 9b ec []......z....... 0140 07 fa ec 07 fb 1d 87 06 9d 87 87 5d 47 c7 bc c7 ...........]G... 0150 27 02 27 a7 c2 a7 b7 47 cf 4e 57 9c 9f 4b 3d 7d '.'....G.NW..K=} 0160 bc 79 d5 dd ab 60 0f 13 88 e8 a2 a2 5c b8 0c 65 .y...`......\..e 0170 70 69 39 79 eb 8b 4b 0b 24 32 91 c9 a2 87 13 50 pi9y..K.$2.....P 0180 51 69 0e 93 43 02 40 0e 83 4d c2 93 ca 90 98 02 Qi..C.@..M...... 0190 2e fc b3 40 7c 99 82 8b 44 e7 40 1a 80 4a 47 89 ...@|...D.@..JG. 01a0 25 0c b1 84 29 96 b0 f1 84 32 38 0d c1 0e 42 a1 %...)....28...B. 01b0 0b a9 54 ac 42 2a a4 51 b0 c8 fc d5 7d 21 f7 fe ..T.B*.Q....}!.. 01c0 8a 70 9f 49 da 1d d6 37 f8 94 15 10 d0 e7 b3 34 .p.I...7.......4 01d0 a9 a5 3d 2e 6d 8d 4b d0 1c 55 b4 55 1a 5a ab ac ..=.m.K..U.U.Z.. 01e0 6c 7c 8e 5d 2b 11 d0 f1 52 26 55 c3 a7 08 f0 eb l|.]+...R&U..... 01f0 a2 66 ea 99 b9 e4 33 e7 9b ae 1f f1 9e 9b b3 2c .f....3........, 0200 f4 49 27 aa 99 63 49 c6 e6 0a e9 54 95 7c 38 a5 .I'..cI....T.|8. 0210 18 4a 6b 07 92 86 de 94 21 1a 07 8d 1a 92 8e 8b .Jk.....!....... 0220 1e 8b 39 8f d5 54 4e ba b1 87 a3 f4 cf 66 bc 97 ..9..TN......f.. 0230 eb f1 df 7c 32 ff fd ad 07 33 99 67 5f 3d 6b 79 ...|2....3.g_=ky 0240 ac bf f4 2f a7 dd 99 17 aa df 7f 6a e7 03 5b 5d .../.......j..[] 0250 d3 89 dc e7 8f 18 df 38 aa bf b2 95 f8 4c 9d f4 .......8.....L.. 0260 68 1c 18 74 03 12 46 09 0e b5 c1 c8 27 37 fa ad h..t..F.....'7.. 0270 3a 26 01 73 2f 02 c4 17 6b 99 78 25 13 36 23 41 :&.s/...k.x%.6#A 0280 c0 24 83 5c 3a 15 59 4c 43 16 0a e8 68 01 b3 cc .$.\:.YLC...h... 0290 ab 62 b4 18 e5 4d 12 71 40 ca 75 08 69 06 0e ce .b...M.q@.u.i... 02a0 c0 c3 1a 18 a5 7e 90 e2 15 e3 bd 42 6c bd 5d dc .....~.....Bl.]. 02b0 e8 91 77 c4 8d e3 49 75 9f 01 7d a2 dd 71 6e b4 ..w...Iu..}..qn. 02c0 fa 74 b7 f3 89 4e fd 1f 7a 8c 7f db 5f fe fd 9b .t...N..z..._... 02d0 f3 b7 bf 7f 2d 93 f9 30 73 eb d3 4c e6 d7 df 7f ....-..0s..L.... 02e0 78 e4 bb eb bb 1e 6e b3 2f 54 02 b3 41 e6 98 8b x.....n./T..A... 02f0 3e df a8 5f ea b4 4f d7 ca 26 e2 a2 3d cd c6 43 >.._..O..&..=..C 0300 7d ae a1 08 7f 20 c2 ee f4 52 aa ed e4 b4 93 59 }.... ...R.....Y 0310 ef 15 d7 fb a0 b8 55 61 05 8a 1a fd 52 25 65 4d ......Ua....R%eM 0320 4b 50 b1 ad d5 3d 9c d2 c9 c4 24 35 a3 04 5d b0 KP...=....$5..]. 0330 16 57 9c e3 53 e1 5f 39 95 7c 7a 39 f0 d2 d1 e8 .W..S._9.|z9.... 0340 6b a7 e2 6f 9e ad 7c f3 5c e5 5b 67 83 6f 3f 18 k..o..|.\.[g.o?. 0350 c9 fc 79 fe d3 a7 5a 5f 3e 15 7c e7 52 ea 37 e7 ..y...Z_>.|.R.7. 0360 93 bf 7e 20 f5 d2 c9 f4 cd c3 35 d7 f7 a5 6e ec ..~ ......5...n. 0370 0e 3f b4 d3 7f 7e ca 75 66 d2 75 64 c8 bc d4 ab .?...~.uf.ud.... 0380 3d 3c a0 39 b0 49 05 1f 8f 0e 6a 8f 0c ea 4e 8f =<.9.I....j...N. 0390 42 47 36 c9 df be 54 fd bf af b6 54 aa 57 6d 4e BG6...T....T.WmN 03a0 9a db 13 dc 74 98 99 8a b0 ca bd e4 72 37 49 ca ....t.......r7I. 03b0 23 f2 e0 18 5d b0 41 c2 a0 ea 01 61 c4 66 93 b2 #...].A....a.f.. 03c0 e0 e1 99 61 04 79 5a 01 53 80 2f 63 97 e6 a9 59 ...a.yZ.S./c...Y 03d0 c4 ed bd a9 c7 8e 8f 3d 77 a8 19 7e c5 c7 f6 b8 .......=w..~.... 03e0 2e 6e 35 5c 9f 71 dd dc 5b 7e 72 50 75 75 b6 fc .n5\.q..[~rPuu.. 03f0 cc b8 73 24 44 dc 92 14 37 58 a8 51 0d a9 d2 2e ..s$D...7X.Q.... 0400 9d 1f 8c 1c d8 1c 8c 6a 91 06 5e 69 54 2d 32 52 .......j..^iT-2R 0410 a9 df fc e1 f3 ef ff f6 cf 1f 7f bc fd dd ad bf ................ 0420 bc f6 da 5f 5b 6a b7 37 26 46 ba 6b 47 b7 0e ce ..._[j.7&F.kG... 0430 f6 b7 0d 3b 20 83 4d a1 31 cb 94 66 89 cc 22 95 ...; .M.1..f..". 0440 58 65 a0 53 21 86 05 e4 bb 23 20 83 38 66 04 13 Xe.S!....# .8f.. 0450 26 b0 c2 9c 9d f5 53 69 bd d3 bd ec a7 46 ae 55 &.....Si.....F.U 0460 77 1a 98 99 05 95 16 41 85 39 cb 7f 64 24 8c 65 w......A.9..d$.e 0470 11 45 4d 60 d4 9c 7d 54 0d 27 d0 72 8b 26 64 d5 .EM`..}T.'.r.&d. 0480 07 ad 46 bf d5 e4 b3 5a 3c 16 ab c7 62 73 5b 1c ..F....Z<...bs[. 0490 6e ab cb 63 f3 c0 ba 09 b8 43 61 5f 24 12 88 c7 n..c.....Ca_$... 04a0 c3 95 15 91 64 65 34 59 05 13 a9 ac 2c 8f 27 82 ....de4Y....,.'. 04b0 91 b8 3f 14 f5 fa 11 5a 02 51 8b 27 ea 56 d0 13 ..?....Z.Q.'.V.. 04c0 88 7a 22 49 4f 26 19 a8 64 03 93 62 e4 50 8d 7c .z"IO&..d..b.P.| 04d0 ba 09 60 98 c4 4c 93 84 65 92 b1 4d f2 2c c6 2c ..`..L..e..M.,., 04e0 2c 83 9c a5 97 31 61 13 e9 24 74 38 19 69 44 54 ,....1a..$t8.iDT 04f0 35 40 85 84 14 48 40 c9 ca 48 40 86 04 e4 9f 0b 5@...H@..H@..... 0500 37 38 2e e9 44 14 bd 98 62 00 e1 8a 97 6a 92 52 78..D...b....j.R 0510 61 ef 58 65 34 bb 82 ee 54 31 dc 10 d3 ab 65 07 a.Xe4...T1....e. 0520 f4 dc b0 49 10 b5 89 12 4e 49 d2 a3 48 07 a0 fa ...I....NI..H... 0530 b0 b6 39 6a ec 48 98 7b aa 6c 03 d5 f6 d1 5a c7 ..9j.H.{.l....Z. 0540 64 83 73 5b 33 ec 20 e7 d.s[3. . Data […]: 445f7ef4e17bafbdfbd7bffcf3cdb77f77ece8cbfbf73c3ab969ef68c7b6b837d95ad3665399cc72ad51a23288654650629688ad52b143be5288a9c5d92942faac80b2cbf45742d0cf53132b6001ddc124b8c3cf1a8a1a05916c1402c20651c800060d52bf41ee33283d06c8a5d738f45a9 [Length: 1352]