Frame 18868: 1406 bytes on wire (11248 bits), 1406 bytes captured (11248 bits) Encapsulation type: Ethernet (1) Arrival Time: Jul 22, 2017 02:51:12.700670000 UTC UTC Arrival Time: Jul 22, 2017 02:51:12.700670000 UTC Epoch Arrival Time: 1500691872.700670000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000184000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 458.175321000 seconds] Frame Number: 18868 Frame Length: 1406 bytes (11248 bits) Capture Length: 1406 bytes (11248 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) Destination: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 3] Internet Protocol Version 4, Src: 63.217.21.41, Dst: 172.16.45.52 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1392 Identification: 0x6c6d (27757) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 59 Protocol: TCP (6) Header Checksum: 0x2f3a [validation disabled] [Header checksum status: Unverified] Source Address: 63.217.21.41 Destination Address: 172.16.45.52 [Source GeoIP: Tin Shui Wai, HK, ASN 3491, CONSOLE-CONNECT-ASN] [Source GeoIP City: Tin Shui Wai] [Source or Destination GeoIP City: Tin Shui Wai] [Source GeoIP Country: Hong Kong] [Source or Destination GeoIP Country: Hong Kong] [Source GeoIP ISO Two Letter Country Code: HK] [Source or Destination GeoIP ISO Two Letter Country Code: HK] [Source GeoIP AS Number: 3491] [Source or Destination GeoIP AS Number: 3491] [Source GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source or Destination GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source GeoIP Latitude: 22.4489] [Source or Destination GeoIP Latitude: 22.4489] [Source GeoIP Longitude: 113.9984] [Source or Destination GeoIP Longitude: 113.9984] [Stream index: 40] Transmission Control Protocol, Src Port: 80, Dst Port: 49194, Seq: 449502, Ack: 1475, Len: 1352 Source Port: 80 Destination Port: 49194 [Stream index: 79] [Stream Packet Number: 649] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1352] Sequence Number: 449502 (relative sequence number) Sequence Number (raw): 4187497869 [Next Sequence Number: 450854 (relative sequence number)] Acknowledgment Number: 1475 (relative ack number) Acknowledgment number (raw): 2526152589 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 1033 [Calculated window size: 33056] [Window size scaling factor: 32] Checksum: 0xe900 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 6.163765000 seconds] [Time since previous frame in this TCP stream: 0.000184000 seconds] [SEQ/ACK analysis] [iRTT: 0.076622000 seconds] [Bytes in flight: 2704] [Bytes sent since last PSH flag: 223080] TCP payload (1352 bytes) Hypertext Transfer Protocol File Data: 1352 bytes Data (1352 bytes) 0000 6b 5f 9f 5f 03 ad f0 50 e1 be cf 3a bd 8b f9 ea k_._...P...:.... 0010 e5 fe e2 72 b9 58 f6 bb b3 6e 07 e0 32 88 c3 59 ...r.X...n..2..Y 0020 b7 28 d3 08 f0 91 87 5e 2f 89 aa 74 df 69 3f 8e .(.....^/..t.i?. 0030 b6 a3 d1 7a 80 47 25 5e f7 fb 57 8b e5 b3 0d 1e ...z.G%^..W..... 0040 51 3c 93 ab db f5 f6 c5 6e 4f 85 96 dd 68 b2 28 Q<......nO...h.( 0050 7b f3 6e 6f 35 18 91 68 9f 69 71 bb 39 7b 7b f5 {.no5..h.iq.9{{. 0060 c5 cd 7a 7f 09 a2 5d ee 6f d6 17 af ce 9f 5d 2c ..z...].o.....], 0070 cf a4 b6 10 bb e1 8f df 7c ff c7 1f 7e 5e 4f d6 ........|...~^O. 0080 81 19 3a aa 6b 2b ae ce 5b 83 6c 0c 0c 1a f7 26 ..:.k+..[.l....& 0090 d3 c1 a8 9b 27 96 2e e8 0a 13 87 5a b7 e3 04 9e ....'......Z.... 00a0 64 eb 7c 12 5a a1 ab f2 cd 27 9a d8 48 63 43 96 d.|.Z....'..HcC. 00b0 6b b5 a3 47 2f af d7 ff e7 7f fd cf ff f1 c7 ef k..G/........... 00c0 fe f4 fc e2 3f 3f bb 3c cf c2 93 e3 47 0a 5f eb ....??.<....G._. 00d0 e5 5e e4 2a 81 23 0d fb 51 e8 29 a6 ce 26 91 d1 .^.*.#..Q.)..&.. 00e0 eb 06 dd cc 7b b7 df fe fc ea 05 86 9e 16 c7 d8 ....{........... 00f0 42 bb 0c ec 51 16 59 32 ab 71 4d 89 39 55 b9 c6 B...Q.Y2.qM.9U.. 0100 b8 13 fd fc cd 9b 6f 2e 2f d1 0f 0d 3d 33 d3 44 ......o./...=3.D 0110 a3 5d d3 b9 ba 2e 33 b2 c6 38 a1 16 86 26 db 3a .]....3..8...&.: 0120 6e d5 9e 64 81 99 d9 ba d6 ae 6b c4 3b b8 ad a9 n..d......k.;... 0130 2c 2f 34 04 a9 c5 0b 35 41 aa cb 6a 13 65 9b 3d ,/4....5A..j.e.= 0140 69 34 8e 9a ad 63 5e 68 29 2a a7 56 49 e0 d0 51 i4...c^h)*.VI..Q 0150 6b 16 47 a8 48 38 11 b8 23 53 02 69 d5 73 5f 99 k.G.H8..#S.i.s_. 0160 f6 fc d8 15 f8 c6 67 cd 27 bf 45 27 07 40 01 09 ......g.'.E'.@.. 0170 01 74 6c 51 38 84 e2 15 05 ad cd a0 11 54 04 dc .tlQ8........T.. 0180 c9 1c 1b 8d 68 01 12 a1 24 0b a3 04 1e 75 ec a8 ....h...$....u.. 0190 90 35 ed 4d ad 75 e4 88 3c 7a 14 08 9f 66 b0 8c .5.M.u.....$D..0 0350 90 fd 90 81 22 4d 0b e9 ec 1b 59 9b 26 39 95 29 ...."M....Y.&9.) 0360 c8 e2 79 a3 0a 6e 89 47 88 32 90 ca 10 3d 7a c8 ..y..n.G.2...=z. 0370 40 55 b7 f1 9e 7b 2e 26 1b 6a b3 a1 fa cb 48 f4 @U...{.&.j....H. 0380 97 45 b7 7f cf 40 77 76 a0 3b 0c fa ff 35 17 b6 .E...@wv.;...5.. 0390 fc e4 44 d8 e6 af 14 70 e4 4e f7 60 b4 bd a3 22 ..D....p.N.`..." 03a0 a2 3b 30 22 7a 00 46 1f 40 d2 a7 f4 69 17 a2 f7 .;0"z.F.@...i... 03b0 ee d5 0f 99 ec a3 b3 9a af a9 1e 52 d1 e5 1d 15 ...........R.... 03c0 dd f1 10 31 14 55 0b e5 08 0c 6d ef 60 08 24 84 ...1.U....m.`.$. 03d0 72 96 77 31 4c 9f 64 25 8d e0 47 3d 76 a9 4d 28 r.w1L.d%..G=v.M( 03e0 35 5d 12 20 c7 8b 12 2b 48 4c 3f 31 51 86 50 6e 5]. ...+HL?1Q.Pn 03f0 27 1d 37 ef fa 9d 7e d8 1f 44 c3 51 32 9c 16 e8 '.7...~..D.Q2... 0400 f0 06 fd a8 04 03 51 fa 81 ba 41 81 f6 75 7f b1 ......Q...A..u.. 0410 ec cd 2a b7 b0 09 59 72 95 f5 01 37 3d 3f a3 ea ..*...Yr...7=?.. 0420 38 71 59 65 a2 00 09 01 5f b0 0d e5 e0 ed 60 8e 8qYe...._.....`. 0430 97 68 47 cb 6e b8 a8 e6 49 97 bb e1 fa 6c b4 de .hG.n...I....l.. 0440 0d 57 eb de 1c 42 e5 5e 78 77 3b 20 9b 61 7b 50 .W...B.^xw; .a{P 0450 14 08 09 60 94 5b 49 6e c5 8b ce ec 6a 7a 79 3d ...`.[In....jzy= 0460 bf ba 59 5e 5e 2f cf f7 e3 0d b6 47 79 31 dd 81 ..Y^^/.....Gy1.. 0470 7e 50 e2 25 b8 6a 18 75 27 29 99 f3 c2 41 a8 81 ~P.%.j.u')...A.. 0480 6a dd 9b 52 e7 a4 67 eb 8b 2f ae 5e 02 8c 20 d4 j..R..g../.^.. . 0490 01 46 a8 00 95 a8 15 13 44 8e fa eb fd 6d a5 eb .F......D....m.. 04a0 57 fb ab 97 67 97 74 16 0c cc 81 db 07 9a c4 e5 W...g.t......... 04b0 45 1d 2d f7 ef e2 be bf 3c bb c0 cb b7 97 b7 c0 E.-.....<....... 04c0 1d 2a ea 20 0c a1 f2 e6 e2 06 bc 42 49 08 f7 3d .*. .......BI..= 04d0 31 1c 90 10 79 30 56 bb 57 9b f3 17 eb fd cb cd 1...y0V.W....... 04e0 f9 eb dd e5 eb cd c5 cd 74 bd 48 ca 17 8b ed 97 ........t.H..... 04f0 67 d7 b7 a3 e5 2d 31 ad 5d e2 73 71 bb c1 40 74 g....-1.].sq..@t 0500 66 0d 22 21 09 82 04 cf 0c 8e 7c be da ad 67 cb f."!......|...g. 0510 b3 c5 fa 66 bb bf 58 ae 2e 97 ab eb f5 66 9c 67 ...f..X......f.g 0520 a4 2b 75 9d 49 91 77 e2 20 f1 9d 2c f4 e6 fd ee .+u.I.w. ..,.... 0530 e5 7a 79 be 98 ef 26 e3 fd 6c 4a 6c 3c 41 70 bd .zy...&..lJl