Frame 19312: 1406 bytes on wire (11248 bits), 1406 bytes captured (11248 bits) Encapsulation type: Ethernet (1) Arrival Time: Jul 22, 2017 02:51:13.122921000 UTC UTC Arrival Time: Jul 22, 2017 02:51:13.122921000 UTC Epoch Arrival Time: 1500691873.122921000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000106000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 458.597572000 seconds] Frame Number: 19312 Frame Length: 1406 bytes (11248 bits) Capture Length: 1406 bytes (11248 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) Destination: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 3] Internet Protocol Version 4, Src: 63.217.21.41, Dst: 172.16.45.52 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1392 Identification: 0xc070 (49264) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 59 Protocol: TCP (6) Header Checksum: 0xdb36 [validation disabled] [Header checksum status: Unverified] Source Address: 63.217.21.41 Destination Address: 172.16.45.52 [Source GeoIP: Tin Shui Wai, HK, ASN 3491, CONSOLE-CONNECT-ASN] [Source GeoIP City: Tin Shui Wai] [Source or Destination GeoIP City: Tin Shui Wai] [Source GeoIP Country: Hong Kong] [Source or Destination GeoIP Country: Hong Kong] [Source GeoIP ISO Two Letter Country Code: HK] [Source or Destination GeoIP ISO Two Letter Country Code: HK] [Source GeoIP AS Number: 3491] [Source or Destination GeoIP AS Number: 3491] [Source GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source or Destination GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source GeoIP Latitude: 22.4489] [Source or Destination GeoIP Latitude: 22.4489] [Source GeoIP Longitude: 113.9984] [Source or Destination GeoIP Longitude: 113.9984] [Stream index: 40] Transmission Control Protocol, Src Port: 80, Dst Port: 49192, Seq: 660389, Ack: 1468, Len: 1352 Source Port: 80 Destination Port: 49192 [Stream index: 77] [Stream Packet Number: 891] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1352] Sequence Number: 660389 (relative sequence number) Sequence Number (raw): 2763239673 [Next Sequence Number: 661741 (relative sequence number)] Acknowledgment Number: 1468 (relative ack number) Acknowledgment number (raw): 3518731413 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 1032 [Calculated window size: 33024] [Window size scaling factor: 32] Checksum: 0x5eb8 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 6.864877000 seconds] [Time since previous frame in this TCP stream: 0.000527000 seconds] [SEQ/ACK analysis] [iRTT: 0.081306000 seconds] [Bytes in flight: 2704] [Bytes sent since last PSH flag: 231192] TCP payload (1352 bytes) Hypertext Transfer Protocol File Data: 1352 bytes Data (1352 bytes) 0000 78 2d 28 c1 4e 3b 61 b9 b3 16 fb dd b5 1c 2b f0 x-(.N;a.......+. 0010 aa b5 04 bb 2d c5 78 d9 98 8f 17 0d d9 78 d1 28 ....-.x......x.( 0020 85 98 92 11 cf 26 8c 67 62 a7 25 13 2f 5b b3 f9 .....&.gb.%./[.. 0030 b8 02 95 05 7f d5 a2 b3 db af f8 fa 05 c6 8f fb ................ 0040 6a 70 d4 57 cd e3 55 a8 0c f8 76 4b 3e a1 3e 13 jp.W..U...vK>.>. 0050 4f 1b 32 f9 fc 5c 25 77 59 e7 a4 63 fd 51 3a 36 O.2..\%wY..c.Q:6 0060 39 ae d4 a5 62 b6 32 11 56 be bf e9 aa 44 4c 94 9...b.2.V....DL. 0070 8b 7b 4b 22 46 8a 4d 1c 4d 18 2a 32 c1 92 1f 0b .{K"F.M.M.*2.... 0080 4b 5e 34 06 f3 e3 30 ca cf 65 bc 2c 05 e3 7c 0f K^4...0..e.,..|. 0090 63 c5 66 8c 96 24 71 4c c2 04 27 17 53 e5 a9 98 c.f..$qL..'.S... 00a0 ac 48 c7 04 63 4a a2 3c 9d d7 c2 14 0c 17 99 31 .H..cJ.<.......1 00b0 c6 c7 4f 94 a6 61 b2 2c 0d 33 9c 80 2c 3e 2c c0 ..O..a.,.3..,>,. 00c0 6a 13 21 bd b5 12 9b 1d 75 d8 ea 78 c8 df fa 03 j.!.....u..x.... 00d0 ec f4 35 30 9a 39 19 6f e0 44 99 b0 4e 48 7f 35 ..50.9.o.D..NH.5 00e0 d0 89 57 04 f6 bd fe 16 42 3b c1 7d 90 90 3e 4c ..W.....B;.}..>L 00f0 18 1f e9 e1 f5 b2 47 8d af 47 75 b1 e5 6b 95 21 ......G..Gu..k.! 0100 97 4c f6 08 de 10 ca cf 08 e7 a7 84 eb b3 f1 41 .L.............A 0110 5c c8 f6 09 82 f4 c4 b0 5a 3e 93 8c fa e8 80 ce \.......Z>...... 0120 82 8b 16 dd 58 56 52 98 51 bd 2e 40 fe 7a 98 13 ....XVR.Q..@.z.. 0130 00 b1 37 ec 97 09 82 34 01 ea d3 3e e5 dc bf 3f ..7....4...>...? 0140 34 c4 6b d7 08 af 65 a3 bc b6 8d f1 37 3d c1 df 4.k...e.....7=.. 0150 f2 14 f6 46 c7 09 b3 a3 78 39 36 ca 51 5a cd 4f ...F....x96.QZ.O 0160 61 77 dc 8a bd f1 19 c6 2c 97 67 f1 6a 7c 01 bb aw......,.g.j|.. 0170 53 2b d8 9b 7e 82 57 53 ab d8 91 71 66 13 7b 8b S+..~.WS...qf.{. 0180 db 38 58 21 74 6f 1c e2 68 eb 98 bf 2d 82 f8 fa .8X!to..h...-... 0190 1e 27 b5 3b 8c 17 38 58 7d ce df d6 36 76 57 b6 .'.;..8X}...6vW. 01a0 71 b8 b6 83 33 42 b9 c0 f9 c9 d6 2b bc 79 75 84 q...3B.....+.yu. 01b0 37 2f f6 f1 1d e3 bf 08 e3 df bf d8 c1 0f db cf 7/.............. 01c0 f0 03 41 fc fb f5 65 c6 3c de ae ce e2 74 c9 8a ..A...e.<....t.. 01d0 a3 b9 09 1c cf 8d e3 74 9e 13 92 c5 09 9c 2e 8e .......t........ 01e0 2b 5f 71 f1 4f df e5 67 bc 4d 08 df e8 6e c4 6a +_q.O..g.M...n.j 01f0 57 23 96 3b 1b b1 c8 49 d4 6c db 23 8c 13 c4 47 W#.;...I.l.#...G 0200 eb aa 08 e2 95 18 a8 ad 24 88 eb e8 ac a8 40 4b ........$.....@K 0210 51 21 aa 33 52 91 9f 10 8f dc 04 13 d2 63 e3 10 Q!.3R........c.. 0220 e1 eb 0f 1f 27 27 78 bb ba 2a 60 f6 94 c2 4a 17 ....''x..*`...J. 0230 0f b8 39 bb c1 c9 c1 45 b5 ad 77 24 9c bb 88 f3 ..9....E..w$.... 0240 89 ab 17 5c 5d 74 38 3b 7b 12 b4 3d e0 48 18 b7 ...\]t8;{..=.H.. 0250 bb ef 44 28 77 21 8c fb 22 92 30 1e 14 10 a2 8a ..D(w!..".0..... 0260 34 9d 9d dc 08 ef 7e f0 27 84 07 fb 79 20 26 c2 4.....~.'...y &. 0270 17 59 a9 a1 28 cd 09 c2 a3 1c 2f 34 a7 db a3 35 .Y..(...../4...5 0280 e9 16 ba 12 3e 25 f0 fe 1b 21 fc 03 35 39 ef 8c ....>%...!..59.. 0290 d1 b2 34 91 a9 75 46 69 10 6f 8f b8 71 25 33 11 ..4..uFi.o..q%3. 02a0 20 17 70 be cc 66 2b 37 14 d1 7f 1b 99 6e d1 89 .p..f+7.....n.. 02b0 ab 75 01 f1 60 0d de b2 7e 59 b4 d9 66 64 c0 45 .u..`...~Y..fd.E 02c0 a2 d2 62 14 7b 5e 1e af 2d fc b7 dc f7 11 da 23 ..b.{^..-......# 02d0 25 23 fe 29 ba 62 be 40 77 ec 37 84 f0 9b e8 32 %#.).b.@w.7....2 02e0 11 c4 4d b7 08 e3 77 d1 9f 62 0f 4b 86 2b 06 33 ..M...w..b.K.+.3 02f0 5d 31 44 18 1f 29 f0 c1 58 69 00 7f 5b a1 98 aa ]1D..)..Xi..[... 0300 0a c3 54 6d 04 61 3c 16 f3 2d 66 2c b5 27 63 b9 ..Tm.a<..-f,.'c. 0310 23 45 03 79 6f 86 8e be 74 3c 1e cc c2 ea 50 36 #E.yo...t<....P6 0320 96 06 73 b0 68 c9 27 7c 17 12 be 0b 30 6f 29 56 ..s.h.'|....0o)V 0330 3e e1 33 03 65 aa 7d fd 64 57 19 46 79 fd 19 e9 >.3.e.}.dW.Fy... 0340 a8 c2 88 64 c3 79 0d b2 34 15 c1 c2 c9 74 2f 21 ...d.y..4....t/! 0350 bc 5b 65 c4 8b d1 d1 c0 e0 6f b7 93 d1 f5 b0 50 .[e......o.....P 0360 2d 77 3c 28 50 10 de 46 08 ef 78 c0 a8 d3 a1 a1 -w<(P..F..x..... 0370 bc 44 65 c7 25 24 2b de 5a 5d a0 e0 5d 45 4d 1e .De.%$+.Z]..]EM. 0380 9a 2b b3 95 cd 61 63 45 26 1e 28 cf f1 54 3c 94 .+...acE&.(..T<. 0390 cc 78 49 0a 6a 8a 24 c4 73 3c 95 30 9e 86 ea 82 .xI.j.$.s<.0.... 03a0 64 42 78 82 72 57 51 40 9e 43 20 bf 94 a9 70 2c dBx.rWQ@.C ...p, 03b0 ce 89 45 71 b6 64 c7 23 51 9c 4e 08 4f 13 18 0f ..Eq.d.#Q.N.O... 03c0 23 88 8b 65 61 98 96 a5 98 b9 6e 00 b9 6e ee 13 #..ea.....n..n.. 03d0 a4 64 2a 4a 2f 9e 14 8c cc a4 40 c3 45 c5 f7 0a .d*J/.....@.E... 03e0 c4 53 a4 93 72 a4 0f e1 db 5b c9 52 44 a6 92 42 .S..r....[.RD..B 03f0 10 4f 65 a4 28 28 77 37 9a f9 38 6b 69 06 c1 3c .Oe.((w7..8ki..< 0400 49 42 3a 6d 4a d6 3a d8 59 01 78 9c 14 65 06 eb IB:mJ.:.Y.x..e.. 0410 b8 2c ec 4c 0c 75 51 32 0f dd 08 48 bc c8 75 f1 .,.L.uQ2...H..u. 0420 a3 c8 38 94 2b 49 8c bb 61 0b e8 a1 f4 d9 a6 18 ..8.+I..a....... 0430 17 1d 02 e6 e1 d7 32 16 a5 25 0f d7 4d 80 e4 b8 ......2..%..M... 0440 ea 3c 46 76 5c 00 5a e4 26 91 02 db fe f6 08 63 .