Frame 19311: 1406 bytes on wire (11248 bits), 1406 bytes captured (11248 bits) Encapsulation type: Ethernet (1) Arrival Time: Jul 22, 2017 02:51:13.122815000 UTC UTC Arrival Time: Jul 22, 2017 02:51:13.122815000 UTC Epoch Arrival Time: 1500691873.122815000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000421000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 458.597466000 seconds] Frame Number: 19311 Frame Length: 1406 bytes (11248 bits) Capture Length: 1406 bytes (11248 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) Destination: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 3] Internet Protocol Version 4, Src: 63.217.21.41, Dst: 172.16.45.52 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1392 Identification: 0x6c99 (27801) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 59 Protocol: TCP (6) Header Checksum: 0x2f0e [validation disabled] [Header checksum status: Unverified] Source Address: 63.217.21.41 Destination Address: 172.16.45.52 [Source GeoIP: Tin Shui Wai, HK, ASN 3491, CONSOLE-CONNECT-ASN] [Source GeoIP City: Tin Shui Wai] [Source or Destination GeoIP City: Tin Shui Wai] [Source GeoIP Country: Hong Kong] [Source or Destination GeoIP Country: Hong Kong] [Source GeoIP ISO Two Letter Country Code: HK] [Source or Destination GeoIP ISO Two Letter Country Code: HK] [Source GeoIP AS Number: 3491] [Source or Destination GeoIP AS Number: 3491] [Source GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source or Destination GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source GeoIP Latitude: 22.4489] [Source or Destination GeoIP Latitude: 22.4489] [Source GeoIP Longitude: 113.9984] [Source or Destination GeoIP Longitude: 113.9984] [Stream index: 40] Transmission Control Protocol, Src Port: 80, Dst Port: 49194, Seq: 506286, Ack: 1475, Len: 1352 Source Port: 80 Destination Port: 49194 [Stream index: 79] [Stream Packet Number: 730] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1352] Sequence Number: 506286 (relative sequence number) Sequence Number (raw): 4187554653 [Next Sequence Number: 507638 (relative sequence number)] Acknowledgment Number: 1475 (relative ack number) Acknowledgment number (raw): 2526152589 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 1033 [Calculated window size: 33056] [Window size scaling factor: 32] Checksum: 0xb7f4 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 6.585910000 seconds] [Time since previous frame in this TCP stream: 0.042389000 seconds] [SEQ/ACK analysis] [iRTT: 0.076622000 seconds] [Bytes in flight: 1352] [Bytes sent since last PSH flag: 282568] TCP payload (1352 bytes) Hypertext Transfer Protocol File Data: 1352 bytes Data (1352 bytes) 0000 54 46 03 11 ce a0 f3 a2 54 11 84 9c 24 67 44 39 TF......T...$gD9 0010 49 b3 16 2d 38 2a b2 17 c6 15 49 ce 67 fc 7a 21 I..-8*....I.g.z! 0020 ad f1 11 11 75 b0 61 05 16 79 3a 14 ce d0 50 6e ....u.a..y:...Pn 0030 a5 00 cb 74 04 75 57 96 16 97 36 0a e9 c2 d8 a7 ...t.uW...6..... 0040 46 de 7b b8 f3 53 df 7c 50 2b da b9 7c ca 34 a4 F.{..S.|P+..|.4. 0050 50 70 2c 12 86 6f 70 52 96 d8 74 2a 91 cf 65 2c Pp,..opR..t*..e, 0060 53 87 69 22 91 4a b8 49 37 06 ff 21 a5 4c ad 55 S.i".J.I7..!.L.U 0070 72 62 30 3d b0 f7 1f 9d 75 97 1a ba 49 27 33 4a rb0=....u...I'3J 0080 b9 9a 4b 65 4b ba e3 c9 ba cd 88 4a 98 93 04 15 ..KeK......J.... 0090 c8 a9 e8 a6 4b aa 9b d2 5c 20 a1 24 97 48 c8 89 ....K...\ .$.H.. 00a0 94 1a f3 65 d3 81 af d2 b1 bd 4a b1 9c 4d c3 34 ...e......J..M.4 00b0 9f 6d b5 eb b0 e7 2d c4 75 df b3 1a f5 d6 f2 d2 .m....-.u....... 00c0 7a 2e 99 ac a5 62 8b e5 54 3b 6d 26 1d 29 97 4f z....b..T;m&.).O 00d0 5f 7b 70 fb d1 07 af 2f 6f 2f 32 e1 49 8b a1 da _{p..../o/2.I... 00e0 e9 c4 fa 4c a3 53 ca 54 b3 5e 2b 1b 9b f6 bd e5 ...L.S.T.^+..... 00f0 6c e2 c6 7a e7 83 fb 27 af 1e ad 3e 3a 5c 7e e3 l..z...'...>:\~. 0100 7c f3 dd 9b fb 67 4b 4d 98 a0 1f 1c ae fe e8 d7 |....gKM........ 0110 3f f7 df fc 17 7f ed cb 8f af 3d 3d 5d fd f2 ab ?.........==]... 0120 d7 7e e0 ed 7b 8f 4e d6 7f e4 6b 9f fd a7 ff f5 .~..{.N...k..... 0130 6f fd f6 af fd fc df f9 cf 7e 7e 7f a5 1d 7c 65 o........~~...|e 0140 c4 76 94 cd 9d f5 db 0f 6f 6f 1d ef c4 73 3e 7c .v......oo...s>| 0150 88 c5 66 05 d6 61 01 26 d2 28 2b 53 28 d7 04 ae ..f..a.&.(+S(... 0160 53 01 19 80 04 bc c9 54 44 09 75 2c 61 58 09 27 S......TD.u,aX.' 0170 90 c0 46 8f 83 0b 9a b8 bd 88 88 77 8c c6 71 42 ..F........w..qB 0180 03 5f 58 18 93 0a e1 98 01 cd 90 71 14 95 1d ba ._X........q.... 0190 a8 fd 83 b2 2e 31 0c 3d 87 41 9f 28 c4 46 18 b3 .....1.=.A.(.F.. 01a0 2e 7e 11 c6 a0 01 24 f5 9e 89 3c 6b a8 4c 22 4e .~....$....>9Z........ 0230 38 5f ae de da 68 df 58 6d 01 03 01 00 3d dc eb 8_...h.Xm....=.. 0240 82 60 00 18 b4 df c9 5d 5b 6e dc 5a 9f be ba 50 .`.....][n.Z...P 0250 3a 99 cb 9e ce 57 6e 2e 76 ee 6f cc 3f de 9b 7b :....Wn.v.o.?..{ 0260 ed ea fc d3 eb 4b 2b 9d a4 18 99 a4 c6 a9 70 20 .....K+.......p 0270 1a 0a 07 50 00 3c 2d a2 ea 63 11 9b 0e d9 22 e3 ...P.<-..c....". 0280 6a b2 3a 39 31 22 4a c1 ab 37 62 bf fa 1b 9b ff j.:91"J..7b..... 0290 f8 9f 7e f5 d1 e3 f8 dd bb 46 ad 3c ce 44 47 6e ..~......F.<.DGn 02a0 9c 89 4f 1f 1b db 5b af fc d2 cf cd ff c0 57 eb ..O...[.......W. 02b0 1c 9d 74 ad 6c dc ed 61 50 2a 5e 48 27 0a 39 82 ..t.l..aP*^H'.9. 02c0 41 e9 1e 06 35 0a d5 16 60 50 b9 46 3c 62 40 7f A...5...`P.F.."....I 03b0 7d c9 20 cc 40 7d 83 10 47 a4 71 17 1a a0 8f d6 }. .@}..G.q..... 03c0 d3 b3 00 f4 49 f4 a3 3f 23 1a 89 42 42 30 14 ed ....I..?#..BB0.. 03d0 c3 d0 27 92 50 0f 86 fa 63 22 84 41 11 99 30 10 ..'.P...c".A..0. 03e0 35 cc 40 2c 36 02 0d 00 48 1a 00 10 d0 0f 41 9f 5.@,6...H.....A. 03f0 14 c8 32 d2 b6 89 e4 58 c0 35 69 a0 1b d7 49 bb ..2....X.5i...I. 0400 6e ca f5 52 5e 2c e9 c5 41 be 97 f0 3d 3f e1 25 n..R^,..A...=?.% 0410 13 5e 2a ee a6 41 31 37 03 f7 b3 e7 80 72 ae 93 .^*..A17.....r.. 0420 77 6d 50 c1 b1 51 3e af e7 54 34 39 16 18 1f 05 wmP..Q>..T49.... 0430 a1 b6 12 34 15 9c 9c 98 b8 72 99 54 4d c4 89 63 ...4.....r.TM..c 0440 28 5a 88 84 01 8d 5d 19 25 0c 34 39 31 89 1a 59 (Z....].%.491..Y 0450 60 6b 50 60 62 0a b9 bd e8 68 00 85 45 52 34 4f `kP`b....h..ER4O 0460 42 6b 50 85 5b 58 fa c6 03 01 12 ec 33 89 63 7d BkP.[X......3.c} 0470 48 6c 10 47 1a 5c 70 0c ca 81 41 28 83 22 a3 51 Hl.G.\p...A(.".Q 0480 30 d0 14 b2 06 8d 8f 5d e9 45 52 47 50 82 18 cc 0......].ERGP... 0490 d3 13 e3 a3 24 ae a8 97 69 8f 8d 46 b8 1b eb e4 ....$...i..F.... 04a0 20 b0 1a 3d 0c 5f 64 90 a1 22 8a 14 6a 24 89 62 ..=._d.."..j$.b 04b0 ee 61 33 4d 01 11 c9 b6 13 37 2d 8f a6 79 5c 05 .a3M.....7-..y\. 04c0 29 0a 3c 04 27 41 f0 47 c3 0a 8a b2 eb 74 57 55 ).<.'A.G.....tWU 04d0 5d 09 85 d1 db 92 68 b0 b4 04 7f 2c 0f 24 44 a3 ].....h....,.$D. 04e0 80 21 b8 0e c5 28 c3 4d 4c c1 eb 55 4c 33 ae 24 .!...(.ML..UL3.$ 04f0 c3 40 8d d0 00 34 62 00 be eb 48 74 74 2c 74 65 .@...4b...Htt,te 0500 74 ea 95 4b c1 cb 97 99 09 d8 78 46 63 8a 96 31 t..K......xFc..1 0510 9c 9c e9 a4 35 c3 e3 45 8b 41 8d 57 e1 85 06 c3 ....5..E.A.W.... 0520 01 fa c0 cb a5 20 7a a1 1c a1 00 86 80 84 00 a4 ..... z......... 0530 50 83 b3 50 58 63 38 4f 51 93 a6 91 71 ac a4 ae P..PXc8OQ...q... 0540 c6 24 21 a5 c9 29 55 72 .$!..)Ur Data […]: 54460311cea0f3a25411849c2467443949b3162d382ab217c61549ce67fc7a21adf1111175b0610516793a14ced0506ea500cb74047557961697360ae9c2d8a746de7bb8f353df7c502bdab97cca34a450702c12866f705296d8742a91cf652c53876922914ab8493706ff21a54cad55726 [Length: 1352]