Frame 19735: 1406 bytes on wire (11248 bits), 1406 bytes captured (11248 bits) Encapsulation type: Ethernet (1) Arrival Time: Jul 22, 2017 02:51:13.673383000 UTC UTC Arrival Time: Jul 22, 2017 02:51:13.673383000 UTC Epoch Arrival Time: 1500691873.673383000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000222000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 459.148034000 seconds] Frame Number: 19735 Frame Length: 1406 bytes (11248 bits) Capture Length: 1406 bytes (11248 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) Destination: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 3] Internet Protocol Version 4, Src: 63.217.21.41, Dst: 172.16.45.52 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1392 Identification: 0xc09f (49311) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 59 Protocol: TCP (6) Header Checksum: 0xdb07 [validation disabled] [Header checksum status: Unverified] Source Address: 63.217.21.41 Destination Address: 172.16.45.52 [Source GeoIP: Tin Shui Wai, HK, ASN 3491, CONSOLE-CONNECT-ASN] [Source GeoIP City: Tin Shui Wai] [Source or Destination GeoIP City: Tin Shui Wai] [Source GeoIP Country: Hong Kong] [Source or Destination GeoIP Country: Hong Kong] [Source GeoIP ISO Two Letter Country Code: HK] [Source or Destination GeoIP ISO Two Letter Country Code: HK] [Source GeoIP AS Number: 3491] [Source or Destination GeoIP AS Number: 3491] [Source GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source or Destination GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source GeoIP Latitude: 22.4489] [Source or Destination GeoIP Latitude: 22.4489] [Source GeoIP Longitude: 113.9984] [Source or Destination GeoIP Longitude: 113.9984] [Stream index: 40] Transmission Control Protocol, Src Port: 80, Dst Port: 49192, Seq: 722581, Ack: 1468, Len: 1352 Source Port: 80 Destination Port: 49192 [Stream index: 77] [Stream Packet Number: 973] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1352] Sequence Number: 722581 (relative sequence number) Sequence Number (raw): 2763301865 [Next Sequence Number: 723933 (relative sequence number)] Acknowledgment Number: 1468 (relative ack number) Acknowledgment number (raw): 3518731413 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 1032 [Calculated window size: 33024] [Window size scaling factor: 32] Checksum: 0x2552 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 7.415339000 seconds] [Time since previous frame in this TCP stream: 0.000223000 seconds] [SEQ/ACK analysis] [iRTT: 0.081306000 seconds] [Bytes in flight: 1352] [Bytes sent since last PSH flag: 47320] TCP payload (1352 bytes) Hypertext Transfer Protocol File Data: 1352 bytes Data (1352 bytes) 0000 2d 98 e7 f7 64 ba d0 84 c9 bc 24 05 e3 23 d9 54 -...d.....$..#.T 0010 a6 11 23 e9 89 18 4a 25 90 5b e2 d1 9f aa c9 91 ..#...J%.[...... 0020 aa 87 9d 73 b1 83 73 8c 83 10 6e 37 85 29 f5 8a ...s..s...n7.).. 0030 cc ec 9b a5 0d 47 b7 39 8a 90 ae a9 9b d0 de 45 .....G.9.......E 0040 20 ef 24 90 77 12 c8 bb 8c 64 2c ce b5 36 82 74 .$.w....d,..6.t 0050 1b 41 b8 d5 2c 89 18 fe 55 4d 04 e7 66 42 78 53 .A..,...UM..fBxS 0060 0a a1 3c e5 34 ac e6 53 4a b5 66 89 29 0f 42 b5 ..<.4..SJ.f.).B. 0070 2c ec e4 3c 5d 46 49 1c b9 84 ad 88 87 bc 80 80 ,..<]FI......... 0080 2c 05 81 a4 50 90 c0 77 a1 ca 57 2e f2 55 db a2 ,...P..w..W..U.. 0090 7c 02 be d6 12 dc 4d 1a c0 e7 09 bc 13 c2 0b cc |.....M......... 00a0 21 0a bc df 48 12 16 e4 ab 45 a1 1a 88 bf 95 3c !...H....E.....< 00b0 4e 42 63 cc a7 d4 75 94 c7 5c 92 22 a8 39 31 40 NBc...u..\.".91@ 00c0 39 aa 94 bc 9e 72 d9 27 eb b2 24 c7 78 ba 78 c5 9....r.'..$.x.x. 00d0 df 7a cc 7d 90 a6 fa 7e 4a 69 06 1f 25 75 8c ed .z.}...~Ji..%u.. 00e0 3b cd 39 19 68 c8 4c 43 5d 46 1a 2a d2 2c 9c e4 ;.9.h.LC]F.*.,.. 00f0 4d c8 4f 30 70 32 8e e5 c5 74 48 8d d6 c1 14 15 M.O0p2...tH..... 0100 09 43 54 04 e2 23 c3 a1 0f 0b 41 8c 84 8b 10 90 .CT..#....A..... 0110 23 a9 08 c2 72 b8 1f e5 7b 1a 11 7e 04 6b b6 a1 #...r...{..~.k.. 0120 02 e0 54 b0 57 21 81 a7 bc 21 25 a7 15 48 47 04 ..T.W!...!%..HG. 0130 06 10 a6 45 fe dc f6 e3 fe 37 f2 55 61 27 41 01 ...E.....7.Ua'A. 0140 02 d7 04 6d 42 7d b8 df 69 44 fa 9c 42 94 cf 09 ...mB}..iD..B... 0150 5e ff 94 17 ea 35 49 b8 4a 54 88 2f 22 83 25 0e ^....5I.JT./".%. 0160 dd 57 c5 a6 47 85 9f 84 4e e2 d6 bd 15 8c 12 d8 .W..G...N....... 0170 37 c7 c8 0d 20 2c 18 8f a3 c4 42 28 cb e2 8f 2b 7... ,....B(...+ 0180 3f 00 1d c5 21 e8 ab 0e 87 bb 3e 0c 9e a6 28 4c ?...!.....>...(L 0190 77 24 60 a1 c7 8c 35 a7 05 67 5c 16 9c 1d 48 c5 w$`...5..g\...H. 01a0 e1 48 ba f2 8a 5f 1e cd c1 8d c9 7c 0e e2 85 6a .H..._.....|...j 01b0 f1 e6 3d 81 71 c9 8a 22 a9 09 97 d8 5f 2e c0 d1 ..=.q.."...._... 01c0 12 25 20 ee 0d 47 39 52 5e 70 02 bb aa a6 c9 73 .% ..G9R^p.....s 01d0 67 32 d9 6a 30 7e 24 45 7c a8 bb df 2f e0 33 46 g2.j0~$E|.../.3F 01e0 f8 1e 4d 54 ba e5 d1 e3 ba 54 d3 54 20 ae c7 8d ..MT.....T.T ... 01f0 21 1d 6e 0c 48 7a c2 70 b6 b2 58 33 98 40 1e 42 !.n.Hz.p..X3.@.B 0200 f0 0e 22 78 fb e3 ca 40 a0 02 70 c9 25 2e ed 65 .."x...@..p.%..e 0210 e5 0d 0f c7 25 15 1b 1e 4a 85 e1 82 23 02 e7 08 ....%...J...#... 0220 e0 e7 7b a2 34 18 f7 66 4d d9 ef 8c a0 22 b1 d7 ..{.4..fM....".. 0230 1e 85 9d e6 70 9c 69 0a c3 96 80 78 53 2c 36 1b ....p.i....xS,6. 0240 f5 ca 2b be 46 20 5f 93 d0 94 ba ff 4b d7 7b 7f ..+.F _.....K.{. 0250 b7 95 25 f7 be 3d 5e 5e 77 5d fb f9 7a 96 ed 69 ..%..=^^w]..z..i 0260 77 cf 74 ce 92 5a 99 99 04 08 80 04 48 10 39 03 w.t..Z......H.9. 0270 cc 39 e7 04 90 60 04 09 e6 2c 52 94 48 e5 d0 92 .9...`...,R.H... 0280 5a 39 e7 56 77 8f db f6 7d 6f bd ff e9 7b bf b5 Z9.Vw...}o...{.. 0290 0f a8 ee b1 e7 fe f0 5d fb 9c 83 43 84 03 9c da .......]...C.... 02a0 9f 2a d6 ae d2 d2 53 4e 35 9b 54 74 7c ab de 80 .*....SN5.Tt|... 02b0 13 35 06 ac 56 11 c4 2b f5 58 ad d0 63 a9 dc 88 .5..V..+.X..c... 02c0 f9 52 91 01 33 1c 67 4a 4d 98 0e 15 60 22 54 88 .R..3.gJM...`"T. 02d0 f1 60 3e c6 fd b9 18 f5 0b 94 6b 60 3e 26 e2 be .`>.......k`>&.. 02e0 68 c4 97 a9 f2 c8 a3 84 f4 3e 67 3a 95 45 20 cf h........>g:.E . 02f0 45 8f 00 b9 3d 0b ed 25 19 68 56 cd 08 78 a3 12 E...=..%.hV..x.. 0300 b6 eb 4c df aa 08 79 b5 a4 aa 98 a4 8a 8a ac dc ..L...y......... 0310 e6 f1 02 02 3a b7 9b 68 08 9a 79 33 b7 f2 e6 6b ....:..h..y3...k 0320 97 b4 17 1a 90 0e 07 9f 4b e4 ca 45 17 bd fe 6e ........K..E...n 0330 77 3e fa dd 7a 0c 79 0d 18 0a 18 31 1c 28 c0 48 w>..z.y....1.(.H 0340 c8 8c d1 88 06 e2 5a 54 dc 4a 90 b6 23 59 29 00 ......ZT.J..#Y). 0350 ee 22 88 13 c8 ab dd 9a 08 e4 f3 d5 0e 2c d0 d8 ."...........,.. 0360 2d d4 b8 31 5f fb 1b d5 b9 b1 58 67 e7 f1 12 c2 -..1_.....Xg.... 0370 ba 0d 33 3c 2f 59 ad 3d 47 42 45 42 04 c6 8b 30 ..3"." 03b0 03 c7 94 64 db cc c7 0a 09 e7 04 eb 90 52 6e 4a ...d.........RnJ 03c0 39 08 16 64 23 6c e2 63 a6 3c 04 8d 79 f0 1b 09 9..d#l.c.<..y... 03d0 e2 c6 1c b8 4d d9 f4 d2 b3 e8 cd cb 0a f2 1c d5 ....M........... 03e0 a9 4c 16 af 48 53 03 b7 49 00 fc 90 92 db 28 ff .L..HS..I.....(. 03f0 5a 93 7f ab d1 a8 18 0e d2 4e ec 87 3b 5f 5a 1e Z........N..;_Z. 0400 ef e7 f3 ec 43 d0 f0 0d c2 ba 6f 08 e2 fb 55 4d ....C.....o...UM 0410 d9 4a 83 fc 97 e2 0b 7e 47 5f f0 3b 38 8c b5 26 .J.....~G_.;8..& 0420 37 c1 94 20 3c db ad 9a ff fc 28 79 de 8b 3d 04 7.. <.....(y..=. 0430 71 29 59 48 18 5f e8 d2 46 42 f4 b3 14 68 bf 4c q)YH._..FB...h.L 0440 76 a8 12 85 12 09 7f 2b 15 11 6f 57 69 29 af a9 v......+..oWi).. 0450 97 dc 7f 25 5d 35 e7 7a a9 1e 05 e0 02 e5 af a4 ...%]5.z........ 0460 11 10 21 f6 b5 94 51 24 bc ff 38 d5 a9 16 72 fe ..!...Q$..8...r. 0470 ac 22 e4 3d 5a ba ca 4c 8c b0 3e 84 9f 67 e3 f8 .".=Z..L..>..g.. 0480 f3 c2 18 fe bc 34 81 5f d6 a6 a8 24 de ac 4c e1 .....4._...$..L. 0490 d5 f2 14 de ac 12 c4 57 67 f1 23 f5 d3 fa 2c e1 .......Wg.#...,. 04a0 7c 0e 3f ad cd e0 c7 a5 04 de 2c 8d e3 35 f5 92 |.?.......,..5.. 04b0 30 ff 9c 0e c6 b3 e9 28 9e 26 06 f1 24 11 c5 23 0......(.&..$..# 04c0 42 db fd 91 36 dc 1a a8 c2 95 9e 80 6a d2 b3 cd B...6.......j... 04d0 df c3 c9 72 07 4e 55 95 e0 7c 93 03 37 7a 42 b8 ...r.NU..|..7zB. 04e0 1f ab c6 e3 d1 26 3a 1b fc 4c 53 e2 2c f4 d1 51 .....&:..LS.,..Q 04f0 18 c0 bf 53 3f d3 79 f8 91 50 ae 4a 31 4a c5 97 ...S?.y..P.J1J.. 0500 a5 18 41 7c 0c ff 9b f0 ff 9f 2b 93 f8 f7 e5 49 ..A|......+....I 0510 fc 1b 9d 87 9f 97 e5 7d 13 c0 4f cc e3 97 ad 65 .......}..O....e 0520 fc e7 f6 3a fe e3 e4 09 82 f9 49 fc bf 67 cf e3 ...:......I..g.. 0530 ff bf 78 05 ff df 85 2b f8 cf 0b 37 f0 9f 97 ee ..x....+...7.... 0540 e3 3f 2e 3f c0 2f 97 1e .?.?./.. Data […]: 2d98e7f764bad084c9bc2405e323d954a61123e989184a25905be2d19faac991aa879d73b183738c83106e378529f58accec9ba50d47b7398a90aea99bd0de4520ef24907712c8bb8c642cceb53682741b41b8d52c8918fe554d04e7664278530aa13ce534ace6534ab56689290f42b52ce [Length: 1352]