Frame 19710: 1406 bytes on wire (11248 bits), 1406 bytes captured (11248 bits) Encapsulation type: Ethernet (1) Arrival Time: Jul 22, 2017 02:51:13.633548000 UTC UTC Arrival Time: Jul 22, 2017 02:51:13.633548000 UTC Epoch Arrival Time: 1500691873.633548000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.003314000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 459.108199000 seconds] Frame Number: 19710 Frame Length: 1406 bytes (11248 bits) Capture Length: 1406 bytes (11248 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) Destination: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 3] Internet Protocol Version 4, Src: 63.217.21.41, Dst: 172.16.45.52 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1392 Identification: 0x6cee (27886) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 59 Protocol: TCP (6) Header Checksum: 0x2eb9 [validation disabled] [Header checksum status: Unverified] Source Address: 63.217.21.41 Destination Address: 172.16.45.52 [Source GeoIP: Tin Shui Wai, HK, ASN 3491, CONSOLE-CONNECT-ASN] [Source GeoIP City: Tin Shui Wai] [Source or Destination GeoIP City: Tin Shui Wai] [Source GeoIP Country: Hong Kong] [Source or Destination GeoIP Country: Hong Kong] [Source GeoIP ISO Two Letter Country Code: HK] [Source or Destination GeoIP ISO Two Letter Country Code: HK] [Source GeoIP AS Number: 3491] [Source or Destination GeoIP AS Number: 3491] [Source GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source or Destination GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source GeoIP Latitude: 22.4489] [Source or Destination GeoIP Latitude: 22.4489] [Source GeoIP Longitude: 113.9984] [Source or Destination GeoIP Longitude: 113.9984] [Stream index: 40] Transmission Control Protocol, Src Port: 80, Dst Port: 49194, Seq: 619854, Ack: 1475, Len: 1352 Source Port: 80 Destination Port: 49194 [Stream index: 79] [Stream Packet Number: 878] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1352] Sequence Number: 619854 (relative sequence number) Sequence Number (raw): 4187668221 [Next Sequence Number: 621206 (relative sequence number)] Acknowledgment Number: 1475 (relative ack number) Acknowledgment number (raw): 2526152589 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 1033 [Calculated window size: 33056] [Window size scaling factor: 32] Checksum: 0x5b3d [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 7.096643000 seconds] [Time since previous frame in this TCP stream: 0.034004000 seconds] [SEQ/ACK analysis] [iRTT: 0.076622000 seconds] [Bytes in flight: 1352] [Bytes sent since last PSH flag: 394784] TCP payload (1352 bytes) Hypertext Transfer Protocol File Data: 1352 bytes Data (1352 bytes) 0000 58 d8 a4 45 34 9c 30 8d c6 d5 5e de b9 88 ac a9 X..E4.0...^..... 0010 c3 4c eb f5 0a 87 23 8a 3e bb ce cf 66 09 cf bc .L....#.>...f... 0020 e1 62 62 56 3a 4d f7 37 5a 1f af 07 3f bb 18 f9 .bbV:M.7Z...?... 0030 60 db f1 6c dd fc 74 49 75 ab ec 1c f5 59 0d 98 `..l..tIu....Y.. 0040 93 8c 23 08 13 e9 ec 74 c2 7a b1 e4 bb 33 ef 7f ..#....t.z...3.. 0050 b2 15 78 6f db f6 7c 5b ff 7c cd fc 68 ce 7c 6f ..xo..|[.|..h.|o 0060 52 73 7b 44 71 73 18 be 51 56 5e 1b 54 ed f7 6b Rs{Dqs..QV^.T..k 0070 f6 fb cd fb 45 e7 5e c1 ba 9a b5 8f b5 98 5a 34 ....E.^.......Z4 0080 2c 2b 07 a5 a6 a3 78 d8 7a 62 5d 15 a9 be 8e 89 ,+....x.zb]..... 0090 c5 49 98 6c ad 44 e6 d3 a9 3a 9d aa 7c b3 be c7 .I.l.D...:..|... 00a0 ab eb b0 2b da 2c d2 b4 59 dc 66 85 bb bd ea 62 ...+.,..Y.f....b 00b0 c4 34 d1 ee ee 8b 98 3d 4a 9e 4f c5 f7 6b 04 01 .4.....=J.O..k.. 00c0 8d 00 30 28 5c 61 90 30 66 84 5a 4c 50 d2 2c 4a ..0(\a.0f.ZLP.,J 00d0 59 c5 6d 76 49 87 43 d2 e9 92 76 7b e0 9c 4f d6 Y.mvI.C...v{..O. 00e0 db 2c 1f 38 60 50 39 a2 1a 3d 60 d0 54 85 41 da .,.8`P9..=`.T.A. 00f0 03 06 e9 0e 18 a4 5f ad 30 c8 b0 9e 35 6c 74 1b ......_.0...5lt. 0100 be 95 d0 4b 0c bd a8 c7 f0 dd 36 7f 7f c6 17 7d ...K......6....} 0110 f3 53 2f 6d f4 0d 8c 76 7e 67 24 e9 e5 60 52 e5 .S/m...v~g$..`R. 0120 ae 83 35 b7 2a c3 51 95 07 01 cf 64 bd db b8 96 ..5.*.Q....d.... 0130 35 ad 66 4d 2b 5d a6 e5 2e f3 52 a7 65 b1 d3 ba 5.fM+]....R.e... 0140 d0 69 9b ef 74 cc 77 b9 e6 ba dc 73 59 ef 6c b6 .i..t.w....sY.l. 0150 79 36 1b 98 e9 0e cd f4 44 66 7a 62 d3 b9 96 a9 y6......Dfzb.... 0160 5c 62 aa f2 8d 9c d4 64 2e 3d 91 4b 8f e7 d2 63 \b.....d.=.K...c 0170 07 df 5c 1e cd a6 47 b2 a9 91 ae d4 70 67 eb 70 ..\...G.....pg.p 0180 26 59 ee 48 94 3b 5a ca ed f1 72 7b ac dc 06 8a &Y.H.;Z...r{.... 0190 22 7a 63 2f 18 94 8d d8 3a 23 b6 8e 88 2d 1d b1 "zc/....:#...-.. 01a0 b7 46 ec 89 68 e5 17 02 45 a3 ae 70 d4 1d 8c 7a .F..h...E..p...z 01b0 fc 31 af 2f ea f5 46 bd ee a8 d7 19 f1 3a c2 5e .1./..F......:.^ 01c0 5b a8 32 f6 63 ae 8c fd 38 0c 1e 9b de 65 d1 39 [.2.c...8....e.9 01d0 4c 5a 9b a1 a2 1f a3 5a a1 57 ca b5 72 99 1a 06 LZ.....Z.W..r... 01e0 88 a9 b8 07 16 8a 24 02 48 cc 17 8a b8 02 88 2b ......$.H......+ 01f0 10 72 f8 02 36 9f cf e6 55 62 bd ac 72 b3 b2 1c .r..6...Ub..r... 0200 24 e4 80 75 c0 9a 60 7d a1 88 07 89 79 22 09 5f $..u..`}....y"._ 0210 2c 15 48 64 02 a9 1c 92 29 45 72 b5 58 a1 95 aa ,.Hd....)Er.X... 0220 f4 b0 da 28 d7 9a 95 3a 9b da e0 d0 1a dd 06 b3 ...(...:........ 0230 cf 64 09 58 ad 21 87 0d 7c c6 b7 78 ec 09 9f bd .d.X.!..|..x.... 0240 d5 6f 4f 05 ec e9 20 c8 96 0e 5a d3 41 4b 2a 60 .oO... ...Z.AK*` 0250 4e 36 9b 5a bc c6 a8 5b 1f 76 e8 02 56 ad cf a4 N6.Z...[.v..V... 0260 76 eb 55 0e b5 d2 aa 50 98 60 b9 5e 2c d3 42 32 v.U....P.`.^,.B2 0270 b5 00 56 72 a5 72 b6 14 66 49 a4 0c 89 84 2e 16 ..Vr.r..fI...... 0280 d3 c4 a2 ca 17 a1 c5 60 cf 5e 08 22 57 12 7c 13 .......`.^."W.|. 0290 e9 f7 26 ae fc 6a 99 97 36 82 2a 24 92 55 30 44 ..&..j..6.*$.U0D 02a0 51 bc 18 1f a2 01 0c 69 60 9a f6 00 43 86 ca 6f Q......i`...C..o 02b0 8b 61 98 14 87 a7 13 55 7a 71 3a d1 e1 19 45 87 .a.....Uzq:...E. 02c0 36 fa 7e 6e 90 0a c4 76 ab 99 4e 05 d7 2a 15 9b 6.~n...v..N..*.. 02d0 44 02 b7 52 16 b5 18 e3 36 63 dc a2 ef 0e 7a a7 D..R....6c....z. 02e0 73 99 18 f8 4f 94 0a 53 0e 63 d4 a4 ee f0 da 92 s...O..S.c...... 02f0 76 43 c4 a8 09 e9 94 3e a5 dc 2e 16 82 5a 2c 9a vC.....>.....Z,. 0300 94 c3 9e b4 59 12 56 63 c4 a0 8e 1a c1 4d 33 00 ....Y.Vc.....M3. 0310 10 a8 2f 16 9c e8 6a db 1a 2d 4d 66 db 4b ad f1 ../...j..-Mf.K.. 0320 62 b2 65 a8 ad 75 22 db 39 dc 9e 1e 4a b7 fe e0 b.e..u".9...J... 0330 c1 db 7f fd d5 97 93 dd 5d 09 87 6d a8 2d b5 30 ........]..m.-.0 0340 d0 bb 38 d0 b7 39 36 7c 63 75 f9 c2 cc d4 d5 e5 ..8..96|cu...... 0350 c5 b7 b6 36 16 fa 7b 77 c6 47 7f f1 c1 f3 7f fa ...6..{w.G...... 0360 9f fe ee b7 3f fd a3 ab cb 73 eb a3 c5 ed 89 f2 ....?....s...... 0370 ed 8d 95 8f 6e 5d bf b2 34 bf 3a 36 b2 30 5a ba ....n]..4.:6.0Z. 0380 7f eb 5a 4f 57 3b d8 a2 43 42 21 97 c5 ae 3e 7d ..ZOW;..CB!...>} 0390 12 59 5b 05 64 e0 d0 c9 27 06 bb dd 26 a5 88 43 .Y[.d...'...&..C 03a0 41 35 56 d7 d7 9f 43 d6 56 e3 eb eb b1 e8 c6 fa A5V...C.V....... 03b0 c6 ea 13 27 de a8 3a f1 06 ea e4 31 0d b7 72 e9 ...'..:....1..r. 03c0 a5 86 9a a3 3a 33 34 b0 3c a3 8a b4 9c 25 11 09 ....:34.<....%.. 03d0 3c 0e 95 cb 22 d1 88 04 12 06 4f c2 a0 c9 68 14 <...".....O...h. 03e0 0d d7 40 c7 23 a9 58 2c 19 03 0c 04 54 44 66 91 ..@.#.X,....TDf. 03f0 31 64 8c 44 25 c9 f6 65 61 0d 0c 29 44 36 97 45 1d.D%..ea..)D6.E 0400 a8 14 d1 60 1e 4f 2e e2 89 f8 78 2a 11 45 27 93 ...`.O....x*.E'. 0410 54 a2 7a 05 af 56 2f f5 14 db 2c 5d 5d 0c b9 58 T.z..V/...,]]..X 0420 28 60 f0 f8 74 60 20 0a 15 0b 3a 34 10 24 62 0b (`..t` ...:4.$b. 0430 21 16 af 72 17 0d 82 68 62 31 13 24 95 b0 34 4a !..r...hb1.$..4J 0440 a1 c5 28 13 70 48 47 5f 45 9c 39 7e ac bf bb 6d ..(.pHG_E.9~...m 0450 75 b6 3c 94 ef d0 88 d9 c7 10 08 f4 b9 e3 3a 29 u.<...........:) 0460 57 40 c5 42 0c 82 4a c4 e6 90 d1 14 74 1d b1 e1 W@.B..J.....t... 0470 ac 82 89 2c b4 38 a6 8a a9 74 b3 41 c5 21 32 51 ...,.8...t.A.!2Q 0480 d5 e0 df 47 44 a3 fe d5 2f 7f 71 88 9e 3b 17 b7 ...GD.../.q..;.. 0490 94 10 9d 4f 46 7b 8d aa 88 c3 48 47 35 bc 73 e3 ...OF{....HG5.s. 04a0 ca c3 9b d7 aa df 78 8d d4 50 6f d7 aa 09 d5 6f ......x..Po....o 04b0 1e 41 20 34 7c c6 4f 3e 7a ef f1 ad 2b 72 0e 9d .A 4|.O>z...+r.. 04c0 da d4 d8 11 89 de d8 db fb c3 cf 7e f8 f9 07 1f ...........~.... 04d0 3d b9 f1 f0 67 1f fe c1 2f 3f fe ea d9 c5 9b ef =...g.../?...... 04e0 ac ed be b3 b4 f9 e5 f5 3b cf d6 cf 3f 5c d8 fc ........;...?\.. 04f0 e4 d2 ad 9f be f5 fc df fd fc d7 ff f9 df fd c3 ................ 0500 ff fe cb 5f 7c 71 e5 c2 ad 89 fe 82 db 35 92 ea ..._|q.......5.. 0510 fc e0 d6 a3 dd d1 a5 cf 6e dc fd 97 5f fd fa f6 ........n..._... 0520 e2 d2 5a 69 e4 f1 f9 cb 5f ff af ff fe 3f fe cd ..Zi...._....?.. 0530 df 3f da bd fe d6 fa e5 3b 9b 37 ee 5f be bf 31 .?......;.7._..1 0540 bb bb 30 b5 73 63 fd ce ..0.sc.. Data […]: 58d8a445349c308dc6d55edeb988aca9c34cebf50a87238a3ebbcecf6609cfbce16262563a4df7375a1faf073fbb18f960dbf16cddfc744975abec1cf5590d98938c230813e9ec74c27ab1e4bb33ef7fb215786fdbf67c5bff7ccdfc68ce7c6f52737b44717318be51565e1b54edf76bf6f [Length: 1352]