Frame 19827: 1406 bytes on wire (11248 bits), 1406 bytes captured (11248 bits) Encapsulation type: Ethernet (1) Arrival Time: Jul 22, 2017 02:51:13.760718000 UTC UTC Arrival Time: Jul 22, 2017 02:51:13.760718000 UTC Epoch Arrival Time: 1500691873.760718000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000165000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 459.235369000 seconds] Frame Number: 19827 Frame Length: 1406 bytes (11248 bits) Capture Length: 1406 bytes (11248 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) Destination: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 3] Internet Protocol Version 4, Src: 63.217.21.41, Dst: 172.16.45.52 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1392 Identification: 0xc0b6 (49334) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 59 Protocol: TCP (6) Header Checksum: 0xdaf0 [validation disabled] [Header checksum status: Unverified] Source Address: 63.217.21.41 Destination Address: 172.16.45.52 [Source GeoIP: Tin Shui Wai, HK, ASN 3491, CONSOLE-CONNECT-ASN] [Source GeoIP City: Tin Shui Wai] [Source or Destination GeoIP City: Tin Shui Wai] [Source GeoIP Country: Hong Kong] [Source or Destination GeoIP Country: Hong Kong] [Source GeoIP ISO Two Letter Country Code: HK] [Source or Destination GeoIP ISO Two Letter Country Code: HK] [Source GeoIP AS Number: 3491] [Source or Destination GeoIP AS Number: 3491] [Source GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source or Destination GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source GeoIP Latitude: 22.4489] [Source or Destination GeoIP Latitude: 22.4489] [Source GeoIP Longitude: 113.9984] [Source or Destination GeoIP Longitude: 113.9984] [Stream index: 40] Transmission Control Protocol, Src Port: 80, Dst Port: 49192, Seq: 753677, Ack: 1468, Len: 1352 Source Port: 80 Destination Port: 49192 [Stream index: 77] [Stream Packet Number: 1005] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1352] Sequence Number: 753677 (relative sequence number) Sequence Number (raw): 2763332961 [Next Sequence Number: 755029 (relative sequence number)] Acknowledgment Number: 1468 (relative ack number) Acknowledgment number (raw): 3518731413 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 1032 [Calculated window size: 33024] [Window size scaling factor: 32] Checksum: 0x210c [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 7.502674000 seconds] [Time since previous frame in this TCP stream: 0.000165000 seconds] [SEQ/ACK analysis] [iRTT: 0.081306000 seconds] [Bytes in flight: 4056] [Bytes sent since last PSH flag: 78416] TCP payload (1352 bytes) Hypertext Transfer Protocol File Data: 1352 bytes Data (1352 bytes) 0000 3b 46 a8 8f 1b 69 70 59 68 70 d9 68 6c 11 32 e7 ;F...ipYhp.hl.2. 0010 1c f2 8b 47 0d d7 ad 7a 32 50 1d 41 5c ea 79 34 ...G...z2P.A\.y4 0020 72 ad 69 e2 1a dd cc b5 ba 9d 6b 37 15 d0 a9 cd r.i.......k7.... 0030 e0 cf 65 e2 5a 6e ce 87 ce 69 9e f2 d3 98 f1 6b ..e.Zn...i.....k 0040 de 4e ca a8 72 8c 8b 57 5c 42 54 36 9d 7a 82 b1 .N..r..W\BT6.z.. 0050 1e 6b 5c 53 56 65 c3 a6 45 c7 35 54 8f 79 ab 8e .k\SVe..E.5T.y.. 0060 6b 68 07 d7 d2 76 95 67 7c f6 05 c9 b1 6c dc cc kh...v.g|....l.. 0070 9a 65 ad 69 40 ce 54 c7 f3 f5 3c 5f 8f 79 73 2d .e.i@.T...<_.ys- 0080 d7 7e ae bb 92 1d cd 56 a9 2a 6b af da 35 af f8 .~.....V.*k..5.. 0090 1a 81 7c 8b 50 2d da 74 96 62 a3 ab 8c eb b1 fc ..|.P-.t.b...... 00a0 52 52 86 4d 17 fb 2e f6 d5 71 15 0d cc 06 de 27 RR.M.....q.....' 00b0 0d 58 ed ae e3 bd c2 b5 bc ab 06 33 04 f8 9c 83 .X.........3.... 00c0 d7 c7 5e c6 6b a4 c1 b8 78 c6 d3 79 cf 78 92 30 ..^.k...x..y.x.0 00d0 9e 30 95 22 6c 2a 41 d8 5c 86 b0 78 c7 3b 69 f0 .0."l*A.\..x.;i. 00e0 18 78 ed 0d 55 18 22 77 04 b8 ee 0d 88 91 24 ea .x..U."w......$. 00f0 d4 bc e3 7d 9d 45 f0 f2 7b e8 e9 14 48 2f 55 1e ...}.E..{...H/U. 0100 74 01 f3 3e ae 8f bd fc 7e bd 34 90 7b 5a 2e 28 t..>....~.4.{Z.( 0110 2f 79 0f 41 dd cb ef 5a e0 dc dd 52 02 67 53 b1 /y.A...Z...R.gS. 0120 ca 13 ef 6c b8 0c 47 83 e4 8b 3f f5 92 13 cc 1b ...l..G...?..... 0130 24 df b8 06 e3 2f cd f9 ac 58 24 00 28 f9 9d 58 $..../...X$.(..X 0140 1a a0 06 b5 56 1d e7 b5 a8 e4 c0 02 db 05 bf 0b ....V........... 0150 f3 7e 37 66 fb 5d 98 ed 73 61 ee bf 29 d7 d7 fd .~7f.]..sa..)... 0160 4c d3 3e 37 e5 52 9a ec 71 10 da f9 78 37 1f 23 L.>7.R..q...x7.# 0170 58 67 7b dc 98 74 f1 7c 97 0b 53 aa 25 98 4b 88 Xg{..t.|..S.%.K. 0180 8c c7 8a 2c c1 7d 86 cf 5d 14 0f 38 9f bf de ed ...,.}..]..8.... 0190 e1 0d d7 83 8d 3c 88 8b d6 d9 5f f3 78 b0 c6 c7 .....<...._.x... 01a0 05 c4 17 08 fa f3 5d 04 71 a7 19 b3 0e 03 07 b2 ......].q....... 01b0 91 20 6e 52 10 7e 0a e2 ab b4 02 d7 fc 46 6c 0d . nR.~.......Fl. 01c0 ea 71 75 58 af 40 fc 46 a4 4d 81 f8 7e 42 a7 24 .quX.@.F.M..~B.$ 01d0 20 7e 67 4a 87 7b d3 02 e2 1d 78 32 63 50 f1 e1 ~gJ.{....x2cP.. 01e0 4f 96 4d ca 23 fe bd 84 a6 28 10 b7 e6 e1 5b 3c O.M.#....(....[< 01f0 e2 c6 17 40 5c cb 2b ae 6d d6 6c 25 7c b7 13 c4 ...@\.+.m.l%|... 0200 db 15 8c ff 20 e9 0b 17 5a 34 10 9f 6b 20 70 37 .... ...Z4..k p7 0210 a8 4d 9a 4a 0b 35 f9 cd 9a 04 71 42 f8 37 b3 a5 .M.J.5....qB.7.. 0220 aa ba a6 80 f8 93 5c 1e c4 a7 08 e2 d3 84 ef a9 ......\......... 0230 7c 68 ca f8 e5 5f e4 10 3f 05 f1 13 01 71 d9 b0 |h..._..?....q.. 0240 79 0a e2 aa b2 a6 b4 84 6f 09 49 19 3b cf 49 f1 y.......o.I.;.I. 0250 bc aa b2 a9 81 79 81 2a ee a3 8a fa 84 0a 55 9c .....y.*......U. 0260 f8 81 f2 88 4b 06 95 12 5a d2 45 b4 b4 8b 39 d0 ....K...Z.E...9. 0270 8b a8 12 c2 06 01 9c 13 e7 d5 9e 52 ec b8 35 6d ...........R..5m 0280 75 95 62 93 03 61 b3 ab 5c fd b4 b4 7e 0a e2 36 u.b..a..\...~..6 0290 2d 37 f8 a2 b9 5c 49 7e 9e 5a 30 56 28 09 80 2b -7...\I~.Z0V(..+ 02a0 08 37 55 a8 b8 f0 d9 ce 72 cc d3 6a 9d e5 84 94 .7U.....r..j.... 02b0 13 88 e6 24 a5 20 5c af 15 04 98 d2 15 53 45 9a ...$. \......SE. 02c0 f4 45 da e6 4b be 4e 3c e7 59 d9 8c f9 02 88 67 .E..K.N<.Y.....g 02d0 39 b8 72 84 cb 19 42 e6 0c 27 80 59 13 41 dc a2 9.r...B..'.Y.A.. 02e0 81 f8 1c 27 03 2d 34 45 aa 93 71 40 bb 04 c4 5b ...'.-4E..q@...[ 02f0 f3 20 de 4a 10 6f 7f e6 11 97 4d 73 3b bd fa 67 . .J.o....Ms;..g 0300 20 7e 5a cc e7 1a 75 83 10 7e 4d a0 bc cf a2 bc ~Z...u..~M..... 0310 e4 a7 1e f1 17 37 6d aa d0 94 3e 0d c0 af f5 6b .....7m...>....k 0320 80 ae 5a 01 74 81 f1 7e 27 76 38 a6 76 38 a6 76 ..Z.t..~'v8.v8.v 0330 38 a6 b6 7b 29 8e a3 9d 7e ed 78 b7 cf c9 d7 0a 8..{)...~.x..... 0340 8c 3b 95 f7 5c da 9d 5e 82 bb cf ae b4 d9 23 30 .;..\..^......#0 0350 ae c5 97 af 4a 3c 79 97 e6 19 97 4c 2c 8b 0a c6 ....J;...A<.d;... 0400 17 fe 3c a1 55 d9 fc 49 b2 a7 a8 30 14 42 f6 54 ..<.U..I...0.B.T 0410 0f 21 bb 87 90 ed d1 c2 52 54 f8 89 99 90 6d 55 .!......RT....mU 0420 90 2d de 71 39 af 85 ae 74 2b 4f f9 8f 69 1b 7e .-.q9...t+O..i.~ 0430 1e 17 39 d4 fb 48 68 cb 53 42 f8 0f 29 29 e4 23 ..9..Hh.SB..)).# 0440 20 de ad 00 f9 ee 98 4b 55 c6 3c 1c b1 e1 56 90 ......KU.<...V. 0450 df f9 90 95 50 63 27 5c 38 69 cc 3a 55 78 c9 f5 ....Pc'\8i.:Ux.. 0460 41 23 c5 7b 83 0b 9e 6c c0 94 d8 ef 03 42 f8 c9 A#.{...l.....B.. 0470 98 9d 20 ef c4 fd a8 b4 76 7c 95 76 11 5e f8 de .. .....v|.v.^.. 0480 69 0f d5 8b 27 84 6f d5 4e 48 66 10 3f 21 67 40 i...'.o.NHf.?!g@ 0490 15 b5 79 94 19 c4 a3 89 20 01 27 40 38 1f c2 83 ..y..... .'@8... 04a0 14 fb a9 11 02 2a 01 34 46 58 8d 0c e2 68 c4 cf .....*.4FX...h.. 04b0 85 b5 1f 37 87 fa b1 3f 3a c2 cf 4a 70 6c 13 0c ...7...?:..Jpl.. 04c0 63 69 1c 26 27 70 90 c8 10 ce 13 d8 1b 93 b8 ec ci.&'p.......... 04d0 38 6e 8c 26 70 7d 24 81 9b 21 9e 13 68 4f 4c e3 8n.&p}$..!..hOL. 04e0 20 9d c3 de f8 2c 6e 11 b4 f7 26 17 08 aa 8b d8 ....,n...&..... 04f0 4d 2c e0 0a 81 fb 2a fb 3b 22 c2 f5 ce f4 2a 76 M,....*.;"....*v 0500 b2 ab d8 25 80 5f cb 6e e0 6a 6e 1d 3b b9 55 6c ...%._.n.jn.;.Ul 0510 65 57 b0 39 b5 44 08 5f 24 9c 2f ab e3 2d b6 1b eW.9.D._$./..-.. 0520 3c 5e 9f 20 c4 a7 e7 b1 9c 9c 25 80 13 d8 e3 12 <^. ......%..... 0530 6b 9e d1 42 60 f8 77 cd 8f 85 b1 1c 1e c1 46 68 k..B`.w.......Fh 0540 18 3b a3 03 b8 19 1b c4 .;...... Data […]: 3b46a88f1b6970596870d9686c1132e71cf28b470dd7ad7a32501d415cea793472ad69e21addccb5ba9d6b3715d0a9cde0cf65e25a6ece87ce699ef2d398f16bde4ecaa8728c8b575c4254369d7a82b11e6b5c535665c3a645c735548f79ab8e6b6807d7d27695677cf605c9b16cdccc9a6 [Length: 1352]