Frame 19675: 1406 bytes on wire (11248 bits), 1406 bytes captured (11248 bits) Encapsulation type: Ethernet (1) Arrival Time: Jul 22, 2017 02:51:13.590015000 UTC UTC Arrival Time: Jul 22, 2017 02:51:13.590015000 UTC Epoch Arrival Time: 1500691873.590015000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.002024000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 459.064666000 seconds] Frame Number: 19675 Frame Length: 1406 bytes (11248 bits) Capture Length: 1406 bytes (11248 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) Destination: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 3] Internet Protocol Version 4, Src: 63.217.21.41, Dst: 172.16.45.52 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1392 Identification: 0xc094 (49300) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 59 Protocol: TCP (6) Header Checksum: 0xdb12 [validation disabled] [Header checksum status: Unverified] Source Address: 63.217.21.41 Destination Address: 172.16.45.52 [Source GeoIP: Tin Shui Wai, HK, ASN 3491, CONSOLE-CONNECT-ASN] [Source GeoIP City: Tin Shui Wai] [Source or Destination GeoIP City: Tin Shui Wai] [Source GeoIP Country: Hong Kong] [Source or Destination GeoIP Country: Hong Kong] [Source GeoIP ISO Two Letter Country Code: HK] [Source or Destination GeoIP ISO Two Letter Country Code: HK] [Source GeoIP AS Number: 3491] [Source or Destination GeoIP AS Number: 3491] [Source GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source or Destination GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source GeoIP Latitude: 22.4489] [Source or Destination GeoIP Latitude: 22.4489] [Source GeoIP Longitude: 113.9984] [Source or Destination GeoIP Longitude: 113.9984] [Stream index: 40] Transmission Control Protocol, Src Port: 80, Dst Port: 49192, Seq: 707709, Ack: 1468, Len: 1352 Source Port: 80 Destination Port: 49192 [Stream index: 77] [Stream Packet Number: 955] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1352] Sequence Number: 707709 (relative sequence number) Sequence Number (raw): 2763286993 [Next Sequence Number: 709061 (relative sequence number)] Acknowledgment Number: 1468 (relative ack number) Acknowledgment number (raw): 3518731413 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 1032 [Calculated window size: 33024] [Window size scaling factor: 32] Checksum: 0xead3 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 7.331971000 seconds] [Time since previous frame in this TCP stream: 0.071102000 seconds] [SEQ/ACK analysis] [iRTT: 0.081306000 seconds] [Bytes in flight: 1352] [Bytes sent since last PSH flag: 32448] TCP payload (1352 bytes) Hypertext Transfer Protocol File Data: 1352 bytes Data (1352 bytes) 0000 71 bb 49 c1 f8 ab b1 0e bc 1e a7 21 40 bd 94 45 q.I........!@..E 0010 8a c3 0d 84 52 2b 55 4f 30 6f e2 f1 76 7c 4e 10 ....R+UO0o..v|N. 0020 ff 62 b2 8b 90 4a 18 9f 21 88 cf 3b 94 5e cd f7 .b...J..!..;.^.. 0030 e1 d5 a2 2c 64 74 e3 c5 e2 00 9e cf bb f1 6c 7e ...,dt........l~ 0040 00 cf 16 07 f1 74 61 88 f2 e0 e9 f2 18 9e 2d 8d .....ta.......-. 0050 13 c8 09 e2 0b 23 04 71 82 f9 e2 24 8e 16 c6 95 .....#.q...$.... 0060 ee 89 e6 c7 09 e6 a3 b8 35 4d 10 a7 6e 4c 8d e0 ........5M..nL.. 0070 e6 c4 30 ae 8f 69 50 7e e8 ec 24 7c b7 62 bf af ..0..iP~..$|.b.. 0080 05 fb f6 06 1c 74 11 c2 db 8a 94 f7 fb 4c 7d 16 .....t.......L}. 0090 b6 1b 38 d9 36 66 61 a7 31 9d 40 6e c1 0e 27 d9 ..8.6fa.1.@n..'. 00a0 ed 2a 0b 76 eb 52 70 c0 09 f8 52 6b 16 ae 49 8c .*.v.Rp...Rk..I. 00b0 7d 57 2e 6e 74 12 c2 3b f2 09 e2 79 b8 6d cb c3 }W.nt..;...y.m.. 00c0 bd 5e 1a fe ae 72 be 57 2b 5e 4d b6 e0 8b 39 1b .^...r.W+^M...9. 00d0 be 5c b4 e3 eb 55 37 be de f4 e0 db 9d 29 fc f7 .\...U7......).. 00e0 fe 02 fe 71 b0 88 af ce 2e e3 cb bd 0d 7c 41 bd ...q.........|A. 00f0 da d9 c0 f3 ed 75 05 e3 0f d6 c4 23 3e 8b 2b e3 .....u.....#>.+. 0100 13 b8 44 a8 3e 37 e4 c1 c1 c0 08 0d 07 0f a1 73 ..D.>7.........s 0110 18 5b 7d 6e 6c f6 0e 60 ad 6b 18 6b dd 43 58 27 .[}nl..`.k.k.CX' 0120 88 af 13 f8 a4 dd 74 0c 12 9c 09 e4 6e 0f ce 0e ......t.....n... 0130 8e 62 9f 8f dd 1f f4 a8 0c 2c e7 87 29 59 64 39 .b.......,..)Yd9 0140 34 88 0b 6c 95 86 09 b4 c3 83 9a 06 dd 38 1c 70 4..l.........8.p 0150 f1 bc 01 5c f4 0c a9 f3 0e dd 2e a5 73 83 03 7c ...\........s..| 0160 0d 83 38 70 53 7c cc e1 d8 10 ce 8f 79 70 7e 74 ..8pS|......yp~t 0170 94 60 ed c1 a1 87 d7 f5 0c 70 1c f7 e0 d2 c4 24 .`.......p.....$ 0180 45 23 62 c2 83 0b 3c ef 2a 81 fb ee ca 14 ee 51 E#b...<.*......Q 0190 77 97 a6 a9 19 dc 5d 9e c2 ed c5 09 02 f6 18 81 w.....]......... 01a0 7b 1c 37 16 26 71 6b 71 1a b7 e6 67 71 4b 3c e0 {.7.&qkq...gqK<. 01b0 04 f4 2b 93 a3 b8 36 39 86 1b 7c fc f5 19 0f ae ..+...69..|..... 01c0 ce 08 b8 8f e0 ca f4 30 ae 4c 0d b2 a5 66 dc b8 .......0.L...f.. 01d0 e0 e9 c1 ae 14 6f ea ae e7 fd 68 50 de fd 0d 82 .....o....hP.... 01e0 f7 06 c1 7f 4b 62 c4 dd 36 6c f4 77 62 c5 6e 53 ....Kb..6l.wb.nS 01f0 b1 e9 b3 84 f0 19 5b 27 a6 bb 09 e2 dd dd 1c 53 ......['.......S 0200 34 4d 77 f7 d1 b8 1f c6 42 f7 28 16 5a 86 b0 54 4Mw.....B.(.Z..T 0210 d5 87 c5 e2 76 2c 64 d5 60 29 ad 02 ab b9 75 d8 ....v,d.`)....u. 0220 2a 6f c5 5e 03 0d b9 8e 11 fe d6 66 71 bd 7f 11 *o.^.......fq... 0230 77 ec b3 b8 dd e9 c1 8d 0e 27 6e da 1c fc 2e 38 w........'n....8 0240 94 47 fc ae 6d 18 b7 7b 86 71 d3 ee c6 e5 9e 6e .G..m..{.q.....n 0250 7e a7 ca b1 54 68 80 87 f0 e9 32 fd 17 dc a6 df ~...Th....2..... 0260 a1 df f4 0b f4 25 12 c6 45 c6 5f c1 69 fc 08 7d .....%..E._.i..} 0270 c6 5f b3 ff 0b e5 29 77 24 fc 18 0e c2 b1 83 b0 ._....)w$....... 0280 6c f7 96 b4 ef f1 e6 11 57 1e 71 02 fb bf 78 c1 l.......W.q...x. 0290 e3 be 03 6f 15 ba a2 a0 fc 07 ca eb ad e2 c8 e5 ...o............ 02a0 9c 18 89 25 d7 60 be cb bb bf 5d c2 59 62 b5 f3 ...%.`....].Yb.. 02b0 3a 04 de 13 b8 6d 10 8f 3a f7 25 fc 10 1d 7c 1d :....m..:.%...|. 02c0 9d 86 9f c0 66 f8 29 8f fd 07 f7 bd cf eb fe 92 ....f.)......... 02d0 e7 13 da e3 7e 42 10 ff 0f 02 f9 7b 9a 17 3d f1 ....~B.....{..=. 02e0 23 c2 fb 6f a8 df 51 7f 24 b4 13 c0 93 fe 42 48 #..o..Q.$.....BH 02f0 ff 2b a1 fc 6f e8 34 ff 15 ed c9 9f a0 3d e5 18 .+..o.4......=.. 0300 a1 f4 38 9a 8c a7 d0 48 d8 6b 4a 0a 40 03 e1 d0 ..8....H.kJ.@... 0310 6a 0e 82 95 e3 69 bd 45 07 6b 5a 1c ac e9 09 a8 j....i.E.kZ..... 0320 4f 4b 82 35 33 05 b5 79 6c a5 8c 7c 21 c1 bc 30 OK.53..yl..|!..0 0330 95 ca 40 7d 49 0e 1a ca f3 51 2f 9e 71 c2 78 63 ..@}I....Q/.q.xc 0340 75 81 16 3f 5e 53 8c 8e da 32 f4 d4 55 a2 b7 be u..?^S...2..U... 0350 0a f6 a6 4a 8e f9 95 18 6a ad e4 7c 40 10 6f 2b ...J....j..|@.o+ 0360 c3 74 5b 09 e6 db cb b1 da 5e 8a f5 ce 42 ac db .t[......^...B.. 0370 8a b0 45 18 df 61 bb db 4e 08 6f 29 c0 7e 4b 3e ..E..a..N.o).~K> 0380 95 c3 3e d5 2c ca 56 a9 54 0f 5a b2 f9 5d 20 90 ..>.,.V.T.Z..] . 0390 4b 98 5a 43 06 36 6a d3 b1 5c 9e 82 f9 12 13 66 K.ZC.6j..\.....f 03a0 8b 4d 98 2a 32 62 3c 2f 1e 23 99 7a b8 d2 a3 d1 .M.*2b.<&E.....o 0420 0a 27 8f 86 20 3f 49 d2 22 6a 31 e7 39 3c 2f 9b .'.. ?I."j1.9......`....... 04e0 4a 85 be a9 50 44 e0 16 29 00 57 f1 34 7e 4a 06 J...PD..).W.4~J. 04f0 d5 e7 71 82 78 a2 2e 14 89 91 e1 6c 43 60 d0 49 ..q.x......lC`.I 0500 1a 99 08 42 79 04 af 1d 89 24 7d 38 15 a6 a4 55 ...By....$}8...U 0510 f4 94 a4 eb c1 04 77 82 bd 5e 20 3e 48 95 2d 4d ......w..^ >H.-M 0520 e4 4d 32 c4 b1 15 c8 e7 17 28 25 d1 5f 8b 23 e7 .M2......(%._.#. 0530 07 9c 4b 20 97 bf e0 cb b2 82 51 25 31 ae 05 81 ..K ......Q%1... 0540 68 29 0e 40 57 69 20 1c h).@Wi . Data […]: 71bb49c1f8abb10ebc1ea72140bd94458ac30d84522b554f306fe2f1767c4e10ff62b28b904a189f2188cf3b945ecdf7e1d5a22c6474e3c5e2009ecfbbf16c7e00cf1607f1746188f2e0e9f2189e2d8d13c809e20b23047182f9e2248e16c695ee89e6c709e6a3b8354d10a76e4c8de0e6c [Length: 1352]