Frame 18501: 1406 bytes on wire (11248 bits), 1406 bytes captured (11248 bits) Encapsulation type: Ethernet (1) Arrival Time: Jul 22, 2017 02:51:12.417263000 UTC UTC Arrival Time: Jul 22, 2017 02:51:12.417263000 UTC Epoch Arrival Time: 1500691872.417263000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000219000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 457.891914000 seconds] Frame Number: 18501 Frame Length: 1406 bytes (11248 bits) Capture Length: 1406 bytes (11248 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) Destination: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 3] Internet Protocol Version 4, Src: 184.25.56.229, Dst: 172.16.45.52 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1392 Identification: 0x83df (33759) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 57 Protocol: TCP (6) Header Checksum: 0x7dcb [validation disabled] [Header checksum status: Unverified] Source Address: 184.25.56.229 Destination Address: 172.16.45.52 [Source GeoIP: San Jose, US, ASN 20940, Akamai International B.V.] [Source GeoIP City: San Jose] [Source or Destination GeoIP City: San Jose] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP AS Number: 20940] [Source or Destination GeoIP AS Number: 20940] [Source GeoIP AS Organization: Akamai International B.V.] [Source or Destination GeoIP AS Organization: Akamai International B.V.] [Source GeoIP Latitude: 37.3388] [Source or Destination GeoIP Latitude: 37.3388] [Source GeoIP Longitude: -121.8916] [Source or Destination GeoIP Longitude: -121.8916] [Stream index: 42] Transmission Control Protocol, Src Port: 80, Dst Port: 49198, Seq: 818429, Ack: 733, Len: 1352 Source Port: 80 Destination Port: 49198 [Stream index: 82] [Stream Packet Number: 1116] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1352] Sequence Number: 818429 (relative sequence number) Sequence Number (raw): 2638631376 [Next Sequence Number: 819781 (relative sequence number)] Acknowledgment Number: 733 (relative ack number) Acknowledgment number (raw): 288088846 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 980 [Calculated window size: 31360] [Window size scaling factor: 32] Checksum: 0xc82d [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 5.659045000 seconds] [Time since previous frame in this TCP stream: 0.000219000 seconds] [SEQ/ACK analysis] [iRTT: 0.074982000 seconds] [Bytes in flight: 4056] [Bytes sent since last PSH flag: 8112] TCP payload (1352 bytes) Hypertext Transfer Protocol File Data: 1352 bytes Data (1352 bytes) 0000 42 c0 34 d2 a7 a5 7f 27 40 1f e3 f5 f6 79 6d 64 B.4....'@....ymd 0010 b1 28 61 96 f3 f9 74 15 9a f9 99 8a 8e 1d 3f 64 .(a...t.......?d 0020 72 e7 1f 13 ac 06 2d 4f a5 14 b1 bb 11 a8 02 14 r.....-O........ 0030 0f 6a 19 e4 05 55 c5 01 3d 30 9d e6 87 a4 56 4f .j...U..=0....VO 0040 3c d2 87 59 9e de 32 34 c6 9c a8 bf d0 dc fd 45 <..Y..24.......E 0050 fe be f7 fa 7a 8d 5a b4 e0 3f d9 eb ca a5 1e 80 ....z.Z..?...... 0060 74 88 c9 e4 a2 68 aa 0a 85 69 74 a1 53 6b 00 c4 t....h...it.Sk.. 0070 d8 da dc ff 00 b6 f6 96 19 0c 73 34 c0 60 e2 9d ..........s4.`.. 0080 3c ba 87 c3 d0 49 9a c9 70 df e5 08 25 45 26 e8 <....I..p...%E&. 0090 fe 9d 5f ea 54 ff 00 5f f0 3c fb 53 2c 9c 1a bd .._.T.._.<.S,... 00a0 38 86 8d dc 29 d0 61 90 dc f5 50 a4 8b 1b 43 2b 8...).a...P...C+ 00b0 f9 55 58 48 18 dd 18 5c d8 1f af 1f ec 3d b4 9e .UXH...\.....=.. 00c0 1d 09 5e 3e 5e 7d 2a 0c ba a8 83 cf 8f a7 48 0a ..^>^}*.......H. 00d0 fd dd 50 8d e2 9a b0 2f a8 dc 9e 34 82 6e 15 0d ..P..../...4.n.. 00e0 f8 ff 00 5b da 16 8e e9 dc 90 49 e9 50 82 29 85 ...[......I.P.). 00f0 65 cd 33 d2 46 b7 b1 6e 64 a4 4a 80 a8 7d 26 54 e.3.F..nd.J..}&T 0100 3f 56 1f 96 3f d7 8b 7b 55 6e 92 2e 65 51 9e 9c ?V..?..{Un..eQ.. 0110 8e 10 5e 91 63 a6 51 bf 25 8c 29 33 4a ab c9 5e ..^.c.Q.%.)3J..^ 0120 5a ed 73 70 09 ff 00 0f cf b2 d9 ef 26 8e 4a f1 Z.sp........&.J. 0130 e9 43 5b 45 5e 15 e9 47 82 ec 6a 33 5b 1c 13 1a .C[E^..G..j3[... 0140 89 55 f9 90 ba 97 f0 b3 1f d6 ae 3f a7 d4 7b 7e .U.........?..{~ 0150 0b c4 64 3a 93 aa b5 b2 69 c0 e8 4d ac 8b 13 9e ..d:....i..M.... 0160 a7 78 f2 30 d3 64 21 9e 16 0a b5 11 89 41 8d 89 .x.0.d!......A.. 0170 3e a2 f7 e6 c7 9f 6a 0c 43 0f 1e 2b 9f db d2 24 >.....j.C..+...$ 0180 94 c2 fa 92 a0 8f cb a2 3b dc df 0a f6 36 f5 4a ........;....6.J 0190 bc 9e dc a7 83 1d 93 95 64 94 45 1a 2f 84 cc c2 ........d.E./... 01a0 e4 20 1f e3 f8 f6 61 6b 71 a0 e9 56 ca f1 e8 5b . ....akq..V...[ 01b0 b4 f3 23 c0 ea 92 f0 1e be 5d 53 b7 73 fc 6d df ..#......]S.s.m. 01c0 bd 69 55 2c b2 ed ea da ca 55 67 f3 cb 15 1c 95 .iU,.....Ug..... 01d0 14 8d 02 31 1e 48 dd 01 d3 61 f5 bf e7 d9 ac 7b ...1.H...a.....{ 01e0 8b a3 fe a0 14 fb 73 f9 f4 3c b4 dd e0 9c 06 56 ......s..<.....V 01f0 a9 3c 73 fe 7e 8b 2d 76 df a1 2a 95 10 23 53 4b .