Frame 18487: 1406 bytes on wire (11248 bits), 1406 bytes captured (11248 bits) Encapsulation type: Ethernet (1) Arrival Time: Jul 22, 2017 02:51:12.390235000 UTC UTC Arrival Time: Jul 22, 2017 02:51:12.390235000 UTC Epoch Arrival Time: 1500691872.390235000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000170000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 457.864886000 seconds] Frame Number: 18487 Frame Length: 1406 bytes (11248 bits) Capture Length: 1406 bytes (11248 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) Destination: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 3] Internet Protocol Version 4, Src: 63.217.21.41, Dst: 172.16.45.52 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1392 Identification: 0xc043 (49219) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 59 Protocol: TCP (6) Header Checksum: 0xdb63 [validation disabled] [Header checksum status: Unverified] Source Address: 63.217.21.41 Destination Address: 172.16.45.52 [Source GeoIP: Tin Shui Wai, HK, ASN 3491, CONSOLE-CONNECT-ASN] [Source GeoIP City: Tin Shui Wai] [Source or Destination GeoIP City: Tin Shui Wai] [Source GeoIP Country: Hong Kong] [Source or Destination GeoIP Country: Hong Kong] [Source GeoIP ISO Two Letter Country Code: HK] [Source or Destination GeoIP ISO Two Letter Country Code: HK] [Source GeoIP AS Number: 3491] [Source or Destination GeoIP AS Number: 3491] [Source GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source or Destination GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source GeoIP Latitude: 22.4489] [Source or Destination GeoIP Latitude: 22.4489] [Source GeoIP Longitude: 113.9984] [Source or Destination GeoIP Longitude: 113.9984] [Stream index: 40] Transmission Control Protocol, Src Port: 80, Dst Port: 49192, Seq: 610365, Ack: 1468, Len: 1352 Source Port: 80 Destination Port: 49192 [Stream index: 77] [Stream Packet Number: 822] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1352] Sequence Number: 610365 (relative sequence number) Sequence Number (raw): 2763189649 [Next Sequence Number: 611717 (relative sequence number)] Acknowledgment Number: 1468 (relative ack number) Acknowledgment number (raw): 3518731413 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 1032 [Calculated window size: 33024] [Window size scaling factor: 32] Checksum: 0x032e [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 6.132191000 seconds] [Time since previous frame in this TCP stream: 0.000170000 seconds] [SEQ/ACK analysis] [iRTT: 0.081306000 seconds] [Bytes in flight: 4056] [Bytes sent since last PSH flag: 189280] TCP payload (1352 bytes) Hypertext Transfer Protocol File Data: 1352 bytes Data (1352 bytes) 0000 46 1a 5c 48 7d dd 6c a9 2e f0 85 42 f4 a4 09 a8 F.\H}.l....B.... 0010 3f 42 b8 21 89 84 4f 12 c0 27 8f 3d e1 f1 9f f8 ?B.!..O..'.=.... 0020 c6 13 3e 46 c3 65 1c 53 10 3f 85 a1 38 c2 78 cc ..>F.e.S.?..8.x. 0030 29 74 45 7e 81 a2 c0 2b 48 f0 b6 44 94 af 03 42 )tE~...+H..D...B 0040 03 bc 11 ec 27 cd 46 08 10 84 00 77 47 3b 38 da ....'.F....wG;8. 0050 58 c2 fa da 79 58 9a 7f 0d cb cb 5f e1 ba c5 39 X...yX....._...9 0060 58 5e 3d 83 2b 17 be 22 80 ff 88 ab 67 af 10 ae X^=.+.."....g... 0070 6f c0 e6 3a 01 c3 fc 1c ae 5d fc 4a ab a6 5c bb o..:.....].J..\. 0080 7c 06 97 ce fe 1d 97 7e fc 02 97 cf 7c 4d 50 ff |......~....|MP. 0090 06 e6 d2 cc c7 42 9a f7 5c 83 f3 35 73 b8 59 5e .....B..\..5s.Y^ 00a0 85 b7 bd 35 bc 6c 8d ee 9b 8e d7 be d0 4e 95 6e ...5.l.......N.n 00b0 d6 9f 19 11 6f 89 72 5f 3d 05 27 82 b7 8b 39 c1 ....o.r_=.'...9. 00c0 db ea 2b f8 d8 fd 00 5f 82 75 a0 dd 05 84 b9 58 ..+...._.u.....X 00d0 22 d2 dd 0a 31 ee 57 10 ef 69 8e 64 3f 4b 64 fa "...1.W..i.d?Kd. 00e0 5d 47 a1 9f 2d 8a fd 1d 39 ff 39 a2 34 c8 01 65 ]G..-...9.9.4..e 00f0 61 4e a8 88 74 44 65 94 03 ea a3 dc d1 10 e9 81 aN..tDe......... 0100 e6 58 2f dc 4e 09 42 07 6f 7e 9d bc 19 76 66 84 .X/.N.B.o~...vf. 0110 a1 93 37 9a de 9c 78 f4 e7 71 a2 cf a7 0a 12 31 ..7...x..q.....1 0120 5c 94 8c d1 d2 0c 8c 96 71 32 2f cf 26 6c 53 95 \.......q2/.&lS. 0130 39 98 a8 ce c5 54 4d 1e 66 eb 0b 31 df 54 82 f9 9....TM.f..1.T.. 0140 e6 12 2c 36 96 60 a9 be 84 73 67 11 81 9b e2 f1 ..,6.`...sg..... 0150 a5 e6 52 2c b7 94 61 b5 a5 8a d0 5d 43 e0 ae 25 ..R,..a....]C..% 0160 70 d7 6b 44 f9 9e 29 42 7c 97 d0 7b 9f fb f7 09 p.kD..)B|..{.... 0170 c2 1b 9d 4d 3c de 84 87 bd 6d 78 4c d8 7d 3c 4a ...M<....mxL.}. 0220 3c cf b7 4b c9 73 e5 67 9e cd 0e 71 2e 1a c1 eb <..K.s.g...q.... 0230 a5 31 bc 9a 1f c6 ab d9 01 de 43 46 f1 db bd 09 .1........CF.... 0240 fc f9 70 0a ff f7 d1 0c fe eb d1 34 fe bc 37 8c ..p........4..7. 0250 f7 0b 1d 78 39 7d 8b 73 50 3b f6 26 6e 73 91 d1 ...x9}.sP;.&ns.. 0260 84 29 fe 1d 7a 2b b2 d0 57 5f cc 9b 7a 23 a1 21 .)..z+..W_..z#.! 0270 03 39 f1 c1 88 09 72 82 bf e4 47 78 5c 41 58 80 .9....r...Gx\AX. 0280 0d 12 09 2d 12 2d 4c 4f 08 42 6c 88 0b 17 8b 17 ...-.-LO.Bl..... 0290 b4 21 94 8f f3 19 2e 0a bf 80 8b f5 0f f0 74 b2 .!............t. 02a0 82 9f b7 23 62 a3 43 11 11 11 0a 37 77 02 b3 93 ...#b.C....7w... 02b0 2d 1c 6c ec e0 6c e3 0c 6f 37 2f 8d 8a 7b 3a 79 -.l..l..o7/..{:y 02c0 c0 d5 c1 55 1b 5f f9 11 ce c5 76 22 56 13 73 33 ...U._....v"V.s3 02d0 73 5c a6 2c af 59 a9 ac 09 e3 9e ee 2e 08 f4 71 s\.,.Y.........q 02e0 23 84 bb 23 90 0b 62 7f 3f 77 04 78 bb c2 43 40 #..#..b.?w.x..C@ 02f0 df d1 06 ee 2e b6 70 76 b0 84 cd 0d 33 b8 38 9c ......pv....3.8. 0300 47 ac 9f 19 6a 62 6c d0 93 74 03 43 89 66 18 49 G...jbl..t.C.f.I 0310 39 4f 08 be 40 90 3e 47 00 26 88 a7 7c a5 d1 6c 9O..@.>G.&..|..l 0320 ad 64 92 f6 37 42 f7 69 03 be 05 8e 53 3e 4a a3 .d..7B.i....S>J. 0330 dd a9 06 34 2b 4c 4b 9f 82 64 d3 b6 42 f9 69 3d ...4+LK..d..B.i= 0340 36 26 60 9e 6a 00 bb 46 bf e5 67 34 f9 f2 1b 8d 6&`.j..F..g4.... 0350 c2 8b c6 52 be c6 68 f2 17 9c 67 78 2c f9 07 fe ...R..h...gx,... 0360 fc 97 06 90 a7 7f 85 f1 0c 2e 10 24 e7 25 c3 0c ...........$.%.. 0370 d3 59 56 98 95 a4 cc 42 27 cc 15 bb 63 be d4 1b .YV....B'...c... 0380 f3 95 7e 9c 0b 83 b0 54 17 cc 6b 28 84 ec 11 8a ..~....T..k(.... 0390 d5 e6 08 23 31 93 10 be d1 95 c4 ef 6c 0a 17 92 ...#1.......l... 03a0 e9 5c 84 e6 70 81 99 8b ad b1 7c 3c 9c 28 c4 93 .\..p.....|<.(.. 03b0 b9 62 3c 59 28 c5 0e c1 7a 77 a9 0a 3b cb 15 d8 .b