Frame 20207: 1406 bytes on wire (11248 bits), 1406 bytes captured (11248 bits) Encapsulation type: Ethernet (1) Arrival Time: Jul 22, 2017 02:51:14.412019000 UTC UTC Arrival Time: Jul 22, 2017 02:51:14.412019000 UTC Epoch Arrival Time: 1500691874.412019000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000165000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 459.886670000 seconds] Frame Number: 20207 Frame Length: 1406 bytes (11248 bits) Capture Length: 1406 bytes (11248 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) Destination: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 3] Internet Protocol Version 4, Src: 63.217.21.41, Dst: 172.16.45.52 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1392 Identification: 0x6d51 (27985) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 59 Protocol: TCP (6) Header Checksum: 0x2e56 [validation disabled] [Header checksum status: Unverified] Source Address: 63.217.21.41 Destination Address: 172.16.45.52 [Source GeoIP: Tin Shui Wai, HK, ASN 3491, CONSOLE-CONNECT-ASN] [Source GeoIP City: Tin Shui Wai] [Source or Destination GeoIP City: Tin Shui Wai] [Source GeoIP Country: Hong Kong] [Source or Destination GeoIP Country: Hong Kong] [Source GeoIP ISO Two Letter Country Code: HK] [Source or Destination GeoIP ISO Two Letter Country Code: HK] [Source GeoIP AS Number: 3491] [Source or Destination GeoIP AS Number: 3491] [Source GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source or Destination GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source GeoIP Latitude: 22.4489] [Source or Destination GeoIP Latitude: 22.4489] [Source GeoIP Longitude: 113.9984] [Source or Destination GeoIP Longitude: 113.9984] [Stream index: 40] Transmission Control Protocol, Src Port: 80, Dst Port: 49194, Seq: 750398, Ack: 3551, Len: 1352 Source Port: 80 Destination Port: 49194 [Stream index: 79] [Stream Packet Number: 1045] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1352] Sequence Number: 750398 (relative sequence number) Sequence Number (raw): 4187798765 [Next Sequence Number: 751750 (relative sequence number)] Acknowledgment Number: 3551 (relative ack number) Acknowledgment number (raw): 2526154665 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 1209 [Calculated window size: 38688] [Window size scaling factor: 32] Checksum: 0x1238 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 7.875114000 seconds] [Time since previous frame in this TCP stream: 0.000165000 seconds] [SEQ/ACK analysis] [iRTT: 0.076622000 seconds] [Bytes in flight: 4056] [Bytes sent since last PSH flag: 27040] TCP payload (1352 bytes) Hypertext Transfer Protocol File Data: 1352 bytes Data (1352 bytes) 0000 2b ab da 93 86 65 39 5b 21 1c 48 5a 30 da bc 0a +....e9[!.HZ0... 0010 7c 4d 5c d7 83 f2 ac 11 40 87 b6 02 d9 8b 78 0b |M\.....@.....x. 0020 94 c6 94 e0 69 7d f2 24 29 0e 0f 41 54 9d 71 6c ....i}.$)..AT.ql 0030 07 8a b4 8c b6 d2 34 5c 73 4d ad 3e 80 4f 33 b9 ......4\sM.>.O3. 0040 a6 e1 2a b3 c6 96 aa 29 ec 4b 53 d4 59 b3 b3 da ..*....).KS.Y... 0050 f3 14 ac a2 4c a3 29 68 a2 87 dc 48 12 e0 b3 c3 ....L.)h...H.... 0060 41 3d a0 a9 c8 03 c0 9c 40 6c dd 0a 01 e3 59 a9 A=......@l....Y. 0070 87 60 95 05 a7 83 43 ab 90 14 4d 79 cc 70 dc 75 .`....C...My.p.u 0080 53 87 c6 f4 ce aa 8b 3f d4 f9 45 5a 4f e1 51 3c S......?..EZO.Q< 0090 35 c5 c3 6f 00 2e e2 0c 1d 1c 0d e0 4f 1a 4f e9 5..o........O.O. 00a0 ca e5 1e 49 e5 58 a9 d3 bd 96 d9 d6 a1 1b 36 68 ...I.X........6h 00b0 77 b0 c0 63 86 de 72 34 96 a2 7b b4 b1 81 9d 10 w..c..r4..{..... 00c0 5b 5a 70 56 1d 1f 40 a8 75 40 d6 52 96 6c 13 8f [ZpV..@.u@.R.l.. 00d0 9d 94 19 58 33 15 92 a4 29 97 0c 6b d3 00 9d 02 ...X3...)..k.... 00e0 fa 72 d9 70 db ba cd 3b 85 b8 09 7d 42 b0 ac 63 .r.p...;...}B..c 00f0 13 ba d7 d3 2d 32 00 1d b3 c5 7a d1 84 42 53 1d ....-2....z..BS. 0100 c0 c8 07 98 44 36 1b 9a b2 a6 03 eb 78 d7 a1 4a ....D6......x..J 0110 cf 25 af 82 3c 40 88 82 fa 3c 74 0b 93 74 ec fa .%..<@...... 0260 f1 68 c4 47 f3 78 9f 34 8d 0b 44 b2 39 cd d6 1c .h.G.x.4..D.9... 0270 cd 0c cc 55 ad 9c 20 b5 f8 13 2f 82 20 5f b6 57 ...U.. .../. _.W 0280 c4 09 15 e6 87 33 8c 17 09 e3 8c 0b 3c bb ec ac .....3......<... 0290 88 e6 85 e8 5b 3e 2b 64 34 19 9d e9 01 59 62 74 ....[>+d4....Ybt 02a0 97 cd 95 7e c6 ca 1e 71 45 33 90 2c 83 df 40 54 ...~...qE3.,..@T 02b0 b9 1f ae 8f 4b ac 70 77 30 ef 69 63 58 97 1f e9 ....K.pw0.icX... 02c0 0b cf 60 a4 31 46 c4 f4 22 46 91 66 f1 67 4b 14 ..`.1F.."F.f.gK. 02d0 16 bb 55 9e ab ec 1c 0d 34 5b 1c 1e ef 90 ef 8e ..U.....4[...... 02e0 07 f7 c4 ad f8 dc e5 0f dd 87 38 e2 c1 94 18 88 ..........8..... 02f0 2c c2 c8 87 26 96 64 08 0e 2c cb 27 4d ae 82 38 ,...&.d..,.'M..8 0300 3b 72 b5 2e 4c 06 19 89 d8 53 49 87 78 f1 9e 4e ;r..L....SI.x..N 0310 96 22 bd ec c8 9e 10 8f ef a4 68 19 d9 73 2b 32 ."........h..s+2 0320 7c 65 ef be 05 a4 96 bf d9 12 30 bc 2c 3b 2e 1b |e........0.,;.. 0330 65 ef c1 84 e3 73 d4 57 5b 12 1c 79 54 80 91 29 e....s.W[..yT..) 0340 7a 54 60 9c b9 64 44 08 64 6f 0a 81 04 16 92 be zT`..dD.do...... 0350 5c 98 dc 0e 06 03 8f fb 23 e9 50 0b 03 ab 3e 4e \.......#.P...>N 0360 d7 56 71 34 23 eb 5d 62 20 d5 0b 74 81 15 47 af .Vq4#.]b ..t..G. 0370 22 19 80 d2 d9 18 11 cb 21 1d 52 35 af 90 1c 2a ".......!.R5...* 0380 55 78 d4 04 11 54 a6 2f 44 dd 27 dc cc 23 ca b3 Ux...T./D.'..#.. 0390 c7 eb 14 b1 18 5c 7f 1d e6 0d b7 c8 d5 fa 88 7b .....\.........{ 03a0 43 24 27 eb 55 37 8c 0c 18 34 2e 0a 04 e1 06 7f C$'.U7...4...... 03b0 1c 2e b9 97 21 24 0a 91 cd b2 5d c8 83 da 45 3c ....!$....]...E< 03c0 92 8f 5e 75 1b 50 9e f2 9e 89 c1 87 78 3c 7b 21 ..^u.P......x<{! 03d0 be 90 a4 d3 1a 9e f9 5f d6 2d 93 3b 32 19 e8 f9 ......._.-.;2... 03e0 8e b1 46 cc 84 53 03 5e 8e 29 3c a0 8e 90 22 23 ..F..S.^.)<..."# 03f0 ea 03 45 d9 3d 92 cc db fe 01 b5 0e a1 3d 84 43 ..E.=........=.C 0400 4f 0d c2 02 2b b0 0b e8 43 02 22 37 5b 88 e1 b8 O...+...C."7[... 0410 c8 5e 8d 8b 59 77 c2 18 0e db fd 58 7c 86 72 18 .^..Yw.....X|.r. 0420 9f a1 2c 44 63 28 e7 7e c4 ed 74 ce 87 0d 93 71 ..,Dc(.~..t....q 0430 e5 85 5b d8 b9 a6 4a 70 31 3c cf 49 2d af c4 c3 ..[...Jp1<.I-... 0440 b0 07 09 f4 1d 6f 8c bb 0e 84 85 de c6 0b c6 92 .....o.......... 0450 83 e2 61 38 3d 1a 86 a0 7a 36 df 79 6f 5a fc e8 ..a8=...z6.yoZ.. 0460 00 1e 31 7b 0f 2a c4 fb 4e 6f 65 a7 39 14 19 d4 ..1{.*..Noe.9... 0470 a1 48 e2 22 c4 63 27 e0 0d 56 76 01 83 c6 3f 61 .H.".c'..Vv...?a 0480 77 70 cd 1a 8d 48 65 17 c5 00 5c 89 3e db ec 1a wp...He...\.>... 0490 b8 8f 77 bc 0d 31 f2 35 3a 5d 0a 9f c5 f8 79 69 ..w..1.5:]....yi 04a0 94 cc 91 aa 89 b1 e1 b9 f4 53 3e 50 91 d6 52 06 .........S>P..R. 04b0 cd 8f c2 49 f4 c6 84 b9 62 58 9e 41 46 ca 3d 14 ...I....bX.AF.=. 04c0 5d 89 fb 2e a1 aa 2b 52 95 85 5e d2 19 55 5d f9 ].....+R..^..U]. 04d0 dd 99 28 51 8a 55 17 5f 49 38 04 12 d4 9d 98 60 ..(Q.U._I8.....` 04e0 e1 89 58 78 fc 7e 35 c5 c2 1b 80 05 25 53 b1 ea ..Xx.~5.....%S.. 04f0 69 ad 9a 9f 8a 86 9f 83 16 2d 11 8b 16 c5 a2 c7 i........-...... 0500 b0 68 a5 dc 23 62 0c ce 48 d1 c2 08 66 87 c0 41 .h..#b..H...f..A 0510 20 45 57 44 a2 4b 91 68 33 24 ba d9 48 70 4a 74 EWD.K.h3$..HpJt 0520 c7 b3 d9 58 4f b0 ae 25 e7 d6 5e 0a 87 b6 a5 4c ...XO..%..^....L 0530 09 82 25 b2 4c 7b e4 7c 20 a2 12 70 df 69 1f bd ..%.L{.| ..p.i.. 0540 fc e2 31 91 60 5d a3 cd ..1.`].. Data […]: 2babda938665395b211c485a30dabc0a7c4d5cd783f2ac114087b602d98b780b94c694e0697df224290e0f41549d716c078ab48cb6d2345c734dad3e804f33b9a6e12ab3c696aa29ec4b53d459b3b3daf314aca24ca32968a287dc4812e0b3c3413da0a9c803c09c406cdd0a01e359a9876 [Length: 1352]