Frame 18471: 1406 bytes on wire (11248 bits), 1406 bytes captured (11248 bits) Encapsulation type: Ethernet (1) Arrival Time: Jul 22, 2017 02:51:12.383869000 UTC UTC Arrival Time: Jul 22, 2017 02:51:12.383869000 UTC Epoch Arrival Time: 1500691872.383869000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.006955000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 457.858520000 seconds] Frame Number: 18471 Frame Length: 1406 bytes (11248 bits) Capture Length: 1406 bytes (11248 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) Destination: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 3] Internet Protocol Version 4, Src: 63.217.21.41, Dst: 172.16.45.52 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1392 Identification: 0x6c43 (27715) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 59 Protocol: TCP (6) Header Checksum: 0x2f64 [validation disabled] [Header checksum status: Unverified] Source Address: 63.217.21.41 Destination Address: 172.16.45.52 [Source GeoIP: Tin Shui Wai, HK, ASN 3491, CONSOLE-CONNECT-ASN] [Source GeoIP City: Tin Shui Wai] [Source or Destination GeoIP City: Tin Shui Wai] [Source GeoIP Country: Hong Kong] [Source or Destination GeoIP Country: Hong Kong] [Source GeoIP ISO Two Letter Country Code: HK] [Source or Destination GeoIP ISO Two Letter Country Code: HK] [Source GeoIP AS Number: 3491] [Source or Destination GeoIP AS Number: 3491] [Source GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source or Destination GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source GeoIP Latitude: 22.4489] [Source or Destination GeoIP Latitude: 22.4489] [Source GeoIP Longitude: 113.9984] [Source or Destination GeoIP Longitude: 113.9984] [Stream index: 40] Transmission Control Protocol, Src Port: 80, Dst Port: 49194, Seq: 394070, Ack: 1475, Len: 1352 Source Port: 80 Destination Port: 49194 [Stream index: 79] [Stream Packet Number: 575] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1352] Sequence Number: 394070 (relative sequence number) Sequence Number (raw): 4187442437 [Next Sequence Number: 395422 (relative sequence number)] Acknowledgment Number: 1475 (relative ack number) Acknowledgment number (raw): 2526152589 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 1033 [Calculated window size: 33056] [Window size scaling factor: 32] Checksum: 0xe9b3 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 5.846964000 seconds] [Time since previous frame in this TCP stream: 0.008555000 seconds] [SEQ/ACK analysis] [iRTT: 0.076622000 seconds] [Bytes in flight: 1352] [Bytes sent since last PSH flag: 171704] TCP payload (1352 bytes) Hypertext Transfer Protocol File Data: 1352 bytes Data (1352 bytes) 0000 3b 7d 40 1f e0 03 6d 20 09 6d 08 4e ce 26 48 9a ;}@...m .m.N.&H. 0010 b9 d0 9f b0 8e 1d 50 8d 82 3b a0 0f 36 71 cc c1 ......P..;..6q.. 0020 34 33 27 c0 ae 85 c3 7e 7e 9e 9f b5 71 f3 a4 df 43'....~~...q... 0030 9a 8f 9f 3a f3 a0 15 b7 04 25 5e 58 3b 04 00 a1 ...:.....%^X;... 0040 b1 c4 74 15 d1 6b af c9 5d 1d 8c 04 ad 7b e5 90 ..t..k..]....{.. 0050 bb 0a 19 92 91 5b f5 00 43 f8 a3 f3 f1 a1 f0 a9 .....[..C....... 0060 c9 67 0f 13 bc 02 43 10 3a 52 6c 26 d4 74 0c 36 .g....C.:Rl&.t.6 0070 fa ec 33 7a 95 d0 d5 a4 7a 3f 26 bf 96 33 2e fb ..3z....z?&..3.. 0080 64 6e 35 64 87 03 fa 40 85 50 8e 31 97 4a 73 61 dn5d...@.P.1.Jsa 0090 40 00 10 48 44 a7 a4 52 d3 71 42 7a 4e 58 cf 2e @..HD..R.qBzNX.. 00a0 b9 a6 57 5c e2 6a 40 de 8e 69 5a 11 65 d3 2f 07 ..W\.j@..iZ.e./. 00b0 86 1a 5e f5 d3 4d cb 1f fc 56 f5 47 6f 15 de 7f ..^..M...V.Go... 00c0 35 f7 ee 8b a8 c5 f2 ef be 94 46 e3 9d e7 12 df 5.........F..... 00d0 7d 3e f1 f6 73 d9 fd 98 20 aa eb 59 b4 f1 9a 21 }>..s... ..Y...! 00e0 c5 56 42 bb 95 34 85 35 13 51 bd 30 ac 9f 0c e8 .VB..4.5.Q.0.... 00f0 c7 16 e7 65 45 a7 bc 44 6e 09 50 a3 ce c8 da 24 ...eE..Dn.P....$ 0100 51 23 00 2d 4b 5b 85 1e e5 d0 5a 40 63 97 0f 58 Q#.-K[....Z@c..X 0110 65 7d 1e 3d cb ae 1a 72 68 47 32 4e f1 7b 2f a7 e}.=...rhG2N.{/. 0120 c0 b8 b7 9f 89 fe fe 83 f0 97 1f f3 ff d6 0d cf ................ 0130 a7 af 2e bc be 65 7f a9 39 f7 74 c5 74 6f 79 e6 .....e..9.t.toy. 0140 56 5e 7b 95 3c fc 96 dc 2e d7 f0 cb 2a e4 de 3d V^{.<.......*..= 0150 60 48 5c b0 33 18 a2 25 18 05 d0 29 83 72 94 41 `H\.3..%...).r.A 0160 14 43 0c 83 8a 2e d1 92 1b a1 0f 8f 16 90 30 8f .C............0. 0170 8d 5e f6 f2 96 bd 5c 9a 15 66 ba 8a f8 b8 25 df .^....\..f....%. 0180 e4 9a 8f 8b 94 fd 24 15 ff 49 e3 11 88 0f e3 3e ......$..I.....> 0190 44 7f 5a 41 0a 20 86 41 f0 a0 13 0c 9d cb 09 7a D.ZA. .A.......z 01a0 18 ee 30 e8 81 0e 34 c8 49 f4 13 f4 30 e2 43 e9 ..0...4.I...0.C. 01b0 73 ce 7a 28 7a e2 1f 40 cf 07 e9 73 ae a3 e7 94 s.z(z..@...s.... 01c0 3e 7b 1f b0 1e 66 ff 3c 8f 1e da dd 53 00 7a ac >{...f.<....S.z. 01d0 67 d6 73 af cc a0 67 dd f9 64 7d e1 e9 a6 eb d9 g.s...g..d}..... 01e0 b6 fb 85 4d ef 4b db de 4f 1c 04 21 41 ad 90 b1 ...M.K..O..!A... 01f0 ec 56 d3 5b d8 41 22 6a 40 25 52 7c 69 e0 3e 3b .V.[.A"j@%R|i.>; 0200 f1 b9 93 8b 9e 43 20 b2 99 79 57 81 72 0c ce 02 .....C ..yW.r... 0210 06 61 7a 98 98 db 8d 9a db 41 e6 84 7d 50 bb ea .az......A..}P.. 0220 9a 06 7a 60 3d 55 af 0a 85 18 d5 9f fd 8c 0d 01 ..z`=U.......... 0230 80 30 05 8c 20 41 00 10 ca 31 14 62 15 cf f4 76 .0.. A...1.b...v 0240 9c dc 66 d1 08 28 6f ad 2c 00 a6 e4 49 ca 09 c3 ..f..(o.,...I... 0250 51 6e ee da a2 ad 1d 52 1f 66 2d e0 0e 2d c4 c0 Qn.....R.f-..-.. 0260 a0 2d 72 07 b6 72 33 a8 3b 4c 9a f6 13 da ea 82 .-r..r3.;L...... 0270 68 27 2a ae b9 b9 55 30 d4 2b db 08 2a b6 a3 8a h'*...U0.+..*... 0280 83 34 76 2d 72 c3 2a 8c 06 00 02 77 ae 15 6c 68 .4v-r.*....w..lh 0290 e0 97 c3 89 30 05 9e b0 07 22 00 10 a6 a8 4d b6 ....0...."....M. 02a0 e3 5a c8 11 96 87 40 01 58 58 98 29 dc b4 f4 8a .Z....@.XX.).... 02b0 21 d0 0a bb 6b 3d 20 01 7d 72 b3 a3 74 98 41 08 !...k= .}r..t.A. 02c0 d1 aa 93 7b 36 36 10 a6 25 94 36 7e 19 ea a0 c5 ...{66..%.6~.... 02d0 39 5e d5 ab a8 78 15 6b de 69 a4 c8 98 0b d3 c7 9^...x.k.i...... 02e0 49 ce c4 67 2c 5c aa 42 59 32 2c a9 08 2a 54 70 I..g,\.BY2,..*Tp 02f0 4c 31 d7 fe 8a b3 73 64 e3 8e 1b b9 20 51 c2 c4 L1....sd.... Q.. 0300 83 16 2d bb a6 01 a0 88 7e 0c 00 ca da 26 73 f3 ..-.....~....&s. 0310 82 b4 95 b7 68 17 a1 b2 83 04 ad b9 64 99 39 0e ....h.......d.9. 0320 bd 4b 7e 79 41 5c f2 48 e3 fa 51 da 21 0d 0e 62 .K~yA\.H..Q.!..b 0330 4d c8 7d 67 0c 86 e0 41 c0 0d 56 b8 1d 51 42 fd M.}g...A..V..QB. 0340 a8 d9 d1 2f 81 de 3d 4f c7 78 64 06 2d 93 9f 3d .../..=O.xd.-..= 0350 05 84 8e c9 4f 2e 1d 72 71 db 3e c1 61 5a 5f 74 ....O..rq.>.aZ_t 0360 49 fc fa 13 0f 22 77 69 30 bd 42 a8 c5 e0 3e c0 I...."wi0.B...>. 0370 10 24 68 5e 3e 8e 36 39 4d a6 18 f5 69 59 61 e2 .$h^>.69M...iYa. 0380 2c 82 9c 9d 7c cc 5a 48 d9 08 a3 5c 25 57 96 d7 ,...|.ZH...\%W.. 0390 bd d3 59 63 e7 ef 3d 97 fa fd a7 83 5f 7f 32 fc ..Yc..=....._.2. 03a0 f6 53 91 af 3e e6 fd ca 6d d7 37 9f 0c 7f ed f1 .S..>...m.7..... 03b0 c0 77 9f 4f be ff ea ca 6f 3f 9e 9e e3 fd 4f 21 .w.O....o?....O! 03c0 ed 20 bc 26 6f e3 e3 c8 bd ec d2 86 74 10 31 14 . .&o.......t.1. 03d0 83 1c 7c 4b a0 0f b4 11 1e 54 8b 18 73 f6 a9 d8 ..|K.....T..s... 03e0 ac c0 ab 19 4f 5a c5 3e ed 84 47 3d e6 50 8f 5b ....OZ.>..G=.P.[ 03f0 e5 43 66 e9 80 59 da 3f a7 1a ae c4 94 ef bf 9c .Cf..Y.?........ 0400 7e e7 85 e4 b7 9f 8b 7f e3 a9 e8 57 ef 87 7e e7 ~..........W..~. 0410 8e ff 0b d7 dd 9f 3a 70 be b6 65 7b b1 31 fb 54 ......:p..e{.1.T 0420 d9 78 6f 49 7f 23 a7 39 4c aa b0 15 b5 82 f2 f5 .xoI.#.9L....... 0430 0f 54 64 a2 53 0c fd 12 83 4e 55 88 62 a8 b0 20 .Td.S....NU.b.. 0440 02 86 c8 03 ec 09 86 04 4b 1e 3e 13 de 92 87 3c ........K.>....< 0450 90 9e 3c 12 da 33 b9 e4 e1 d0 2c 7b 49 56 bc 9c ..<..3....,{IV.. 0460 55 c4 37 59 62 b2 46 c2 79 a4 c5 a0 87 a6 f9 90 U.7Yb.F.y....... 0470 41 a8 c5 4e ca b1 d3 cc 00 3d f5 20 83 1e ec 84 A..N.....=. .... 0480 61 03 d2 3c a5 4f 2b 7a ce 7a e2 1f a0 cf e6 2f a..<.O+z.z...../ 0490 89 cf 09 80 92 1f 06 d0 49 77 cf 39 00 3d b4 9e ........Iw.9.=.. 04a0 cc 29 7a 72 16 a0 e7 1a d0 53 b4 de 5c b6 dd 5e .)zr.....S..\..^ 04b0 b1 dd 29 d9 1f 5b 9b a7 35 d7 09 7a 5a ee e7 37 ..)..[..5..zZ..7 04c0 3c 2f 6e 79 5f de f6 bd ba eb ff f8 7e e0 8d a3