Frame 20053: 1406 bytes on wire (11248 bits), 1406 bytes captured (11248 bits) Encapsulation type: Ethernet (1) Arrival Time: Jul 22, 2017 02:51:14.224716000 UTC UTC Arrival Time: Jul 22, 2017 02:51:14.224716000 UTC Epoch Arrival Time: 1500691874.224716000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000059000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 459.699367000 seconds] Frame Number: 20053 Frame Length: 1406 bytes (11248 bits) Capture Length: 1406 bytes (11248 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) Destination: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 3] Internet Protocol Version 4, Src: 63.217.21.41, Dst: 172.16.45.52 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1392 Identification: 0xc0f9 (49401) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 59 Protocol: TCP (6) Header Checksum: 0xdaad [validation disabled] [Header checksum status: Unverified] Source Address: 63.217.21.41 Destination Address: 172.16.45.52 [Source GeoIP: Tin Shui Wai, HK, ASN 3491, CONSOLE-CONNECT-ASN] [Source GeoIP City: Tin Shui Wai] [Source or Destination GeoIP City: Tin Shui Wai] [Source GeoIP Country: Hong Kong] [Source or Destination GeoIP Country: Hong Kong] [Source GeoIP ISO Two Letter Country Code: HK] [Source or Destination GeoIP ISO Two Letter Country Code: HK] [Source GeoIP AS Number: 3491] [Source or Destination GeoIP AS Number: 3491] [Source GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source or Destination GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source GeoIP Latitude: 22.4489] [Source or Destination GeoIP Latitude: 22.4489] [Source GeoIP Longitude: 113.9984] [Source or Destination GeoIP Longitude: 113.9984] [Stream index: 40] Transmission Control Protocol, Src Port: 80, Dst Port: 49192, Seq: 841557, Ack: 1468, Len: 1352 Source Port: 80 Destination Port: 49192 [Stream index: 77] [Stream Packet Number: 1114] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1352] Sequence Number: 841557 (relative sequence number) Sequence Number (raw): 2763420841 [Next Sequence Number: 842909 (relative sequence number)] Acknowledgment Number: 1468 (relative ack number) Acknowledgment number (raw): 3518731413 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 1032 [Calculated window size: 33024] [Window size scaling factor: 32] Checksum: 0x501a [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 7.966672000 seconds] [Time since previous frame in this TCP stream: 0.000059000 seconds] [SEQ/ACK analysis] [iRTT: 0.081306000 seconds] [Bytes in flight: 4056] [Bytes sent since last PSH flag: 50024] TCP payload (1352 bytes) Hypertext Transfer Protocol File Data: 1352 bytes Data (1352 bytes) 0000 3a 5f ce 74 cb 75 f1 96 53 ea f9 62 51 d1 a5 60 :_.t.u..S..bQ..` 0010 5d 3f 96 06 40 47 75 fb ca 8f d2 09 e2 99 81 7c ]?..@Gu........| 0020 53 19 fd d5 a6 4d f1 89 17 12 ca 8b 42 0c 28 09 S....M......B.(. 0030 0d 44 49 78 88 aa 13 5e 12 15 87 d2 98 14 94 c5 .DIx...^........ 0040 a5 a3 34 29 03 25 a9 99 28 c9 c8 25 cc 94 a0 3c ..4).%..(..%...< 0050 af 1c 15 84 f0 9a e2 46 d4 95 12 c0 2b da 50 5b .......F....+.P[ 0060 b5 0f 75 55 07 51 57 7b 0c 35 f5 5d 9a 05 a5 a1 ..uU.QW{.5.].... 0070 1f 55 4d 83 a8 6c 1e 46 75 eb 18 aa 09 e0 15 fb .UM..l.Fu....... 0080 a7 50 de 3e 47 08 5f 40 69 c7 79 14 1f bc 88 92 .P.>G._@i.y..... 0090 c3 97 09 df 57 51 4c 15 12 c4 8b 3a 6f 10 c0 6f ....WQL....:o..o 00a0 a1 b8 f3 36 0a 8f dd e6 78 0f 25 c7 35 95 9e bc ...6....x.%.5... 00b0 8f b2 53 54 d7 03 54 9c 7e 88 aa 33 84 72 82 79 ..ST..T.~..3.r.y 00c0 55 ef 03 d4 f4 3d 40 dd c0 43 34 0c 3d 42 33 61 U....=@..C4.=B3a 00d0 bc 75 e4 21 f6 8d 3d c2 be d1 8f 71 60 5c 36 74 .u.!..=....q`\6t 00e0 7e 8c 23 93 8f a8 8f 71 6c fa 63 9c 9a 7f 8c d3 ~.#....ql.c..... 00f0 e7 34 9d 39 ff 04 dd 04 f2 1e aa ff 12 61 9c 10 .4.9.........a.. 0100 3e 74 4d 3a 71 7e 8a b1 c5 27 98 5c 7c 8a e9 eb >tM:q~...'.\|... 0110 9f 62 e6 c6 33 cc dd 7a a9 34 7f f3 25 ce dd 96 .b..3..z.4..%... 0120 8c f8 1b 5c 20 88 5f 7c f0 1a 57 1e bc c1 22 c7 ...\ ._|..W...". 0130 c5 07 1a 90 2b 9b ca c7 cf b1 48 10 5f e4 78 e3 ....+.....H._.x. 0140 e3 97 b8 f5 f1 2b dc 7e fc 8a e3 0b 5d 2f 71 f3 .....+.~....]/q. 0150 d1 53 a5 5b 8f 9e e0 ce a3 4f 94 6e 51 37 1f 3c .S.[.....O.nQ7.< 0160 c6 4d b1 b5 dc d5 fc e6 37 6e df c7 e2 52 13 21 .M......7n...R.! 0170 b1 b3 dc b8 89 8b 8b 57 71 fe aa 06 e5 17 ce 5f .......Wq......_ 0180 c2 c2 d9 f3 38 3b bf 40 28 9f c5 f4 d4 04 c6 c7 ....8;.@(....... 0190 87 31 42 50 19 18 ee 46 af b2 ad 1c c7 99 53 47 .1BP...F......SG 01a0 70 f2 58 3b 81 bc 09 07 db 08 e4 0c a8 fb 1a 0b p.X;............ 01b0 d1 5a 9b 8b a6 ca 0c 34 94 24 73 91 25 d9 ef 68 .Z.....4.$s.%..h 01c0 65 01 11 d8 2e 13 9f b5 40 6f 56 f8 72 a6 79 29 e.......@oV.r.y) 01d0 c3 bc 74 4d 1b 23 79 3d 5a a9 42 9a f4 bc 27 69 ..tM.#y=Z.B...'i 01e0 da 53 9d 1b a3 a0 be 9a 80 5d 9d a7 a9 2a 2f 5a .S.......]...*/Z 01f0 9d 0b 74 57 e7 c7 aa e7 28 e5 c7 f1 71 2e 0a 24 ..tW....(...q..$ 0200 db 2e af 97 c3 9f 25 3b 02 15 7b 23 50 9e a5 95 ......%;..{#P... 0210 1c 2c 51 4d 73 82 51 92 49 49 07 cb 4c 93 ea c6 .,QMs.Q.II..L... 0220 29 4d 75 2a 96 b3 e7 9a 7d a5 3c 47 83 71 79 4c )Mu*....}.XA}..k7.Mri. 0350 a9 d8 d7 dc 88 c1 9e 2e 2c 4c 0e e2 da fc 20 ee ........,L.... . 0360 5c 18 c4 a3 2b 43 78 72 75 1c 2f 16 cf e2 b5 6c \...+Cxru./....l 0370 d2 bc 73 01 6f ee 5d c6 db fb d7 f0 f6 de 55 bc ..s.o.].......U. 0380 ba 7b 11 af ef 9c 57 f5 c7 5f de 38 8f 97 84 f2 .{....W.._.8.... 0390 67 57 67 f0 f8 dc 28 ae 0f 1e c7 e9 aa 7c e4 f9 gWg...(......|.. 03a0 f3 7f 68 b5 09 e1 36 1b 11 61 6f 86 18 87 6d 48 ..h...6..ao...mH 03b0 21 d4 ec 75 b1 41 ae 87 2d 8a fd 1d 50 19 e4 82 !..u.A..-...P... 03c0 6a 2e c2 ea 42 1d d1 48 18 6f 89 72 c6 be 18 37 j...B..H.o.r...7 03d0 1c 8a 97 4d 40 7e 0c b4 01 aa 4c e0 71 02 79 67 ...M@~....L.q.yg 03e0 06 01 9d 40 de 2d 1f bb 66 07 2b 18 1f 56 f5 75 ...@.-..f.+..V.u 03f0 19 94 f4 4c f9 28 03 da 44 71 88 aa 94 30 a3 32 ...L.(..Dq...0.2 0400 61 e1 fa 18 a2 1a 05 cd a8 4e 7b da 46 2e ad 35 a........N{.F..5 0410 76 2c e6 6b e2 38 c6 61 ae 46 c4 6b d4 5c 55 1c v,.k.8.a.F.k.\U. 0420 66 79 3e 5b 9b 88 99 da 64 cc d5 a5 60 ae 21 0d fy>[....d...`.!. 0430 73 8d 19 98 69 c8 c0 74 7d 1a 66 ea 52 31 53 ff s...i..t}.f.R1S. 0440 83 a6 6a 53 31 56 9d 8a d1 da 74 8c d5 67 51 b9 ..jS1V....t..gQ. 0450 04 ee 7c 8c 4a f5 13 1e cb f9 38 e7 88 f1 a6 22 ..|.J.....8...." 0460 aa 04 93 9c 33 26 9b 09 df 4d 95 1a 80 53 e3 0a ....3&...M...S.. 0470 c4 6b 30 d5 56 4b d5 61 8a 20 3e d1 5c ad ec 29 .k0.VK.a. >.\..) 0480 e3 1c 27 1a ab f9 3a 55 fc 1e 15 84 fc 52 0c 55 ..'...:U.....R.U 0490 14 60 a8 24 13 03 45 c9 e8 23 80 f7 e6 c4 71 b1 .`.$..E..#....q. 04a0 12 83 d3 7b a3 71 32 3d 9c 7f c3 30 1c 49 0a 45 ...{.q2=...0.I.E 04b0 47 8c 91 0b 1e 1f 34 84 1b d0 59 94 87 f9 ee 1e G.....4...Y..... 04c0 dc bb b4 88 a7 f7 3f c5 b3 4f de e0 c5 a7 6f f1 ......?..O....o. 04d0 f2 f9 67 78 f3 ea e7 04 eb 7f c1 e7 9f fd 12 ff ..gx............ 04e0 f2 c5 bf e2 57 5f fd 0e 5f ff e6 8f 9a 2f fc db ....W_.._..../.. 04f0 3f e3 3b 42 f8 9f bf fb 13 fe f4 c7 ef f0 dd b7 ?.;B............ 0500 bf c7 6f 7f f3 39 ee de ba 84 c6 da 2a f8 78 79 ..o..9......*.xy 0510 c3 62 8f 78 c2 2d b9 98 b4 80 15 e1 db dc dc 06 .b.x.-.......... 0520 db b6 ef 86 d9 96 1d d8 be 63 27 f6 58 ec 26 9c .........c'.X.&. 0530 5a 13 c2 ed f9 9e b7 5f 86 71 47 27 3b 38 39 4b Z......_.qG';89K 0540 36 dc 55 81 b8 74 de f4 6.U..t.. Data […]: 3a5fce74cb75f19653eaf96251d1a5605d3f9606404775fbca8fd209e299817c5319fdd5a64df1891712ca8b420c28090d44497888aa135e121587d2981494c5a5a334290325a99928c9c825cc94a03caf1c1584f09ae246d49512c02bda505bb50f75550751577b0c35f55d9a05a5a11f5 [Length: 1352]