Frame 20447: 1406 bytes on wire (11248 bits), 1406 bytes captured (11248 bits) Encapsulation type: Ethernet (1) Arrival Time: Jul 22, 2017 02:51:14.540725000 UTC UTC Arrival Time: Jul 22, 2017 02:51:14.540725000 UTC Epoch Arrival Time: 1500691874.540725000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000183000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 460.015376000 seconds] Frame Number: 20447 Frame Length: 1406 bytes (11248 bits) Capture Length: 1406 bytes (11248 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) Destination: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 3] Internet Protocol Version 4, Src: 63.217.21.41, Dst: 172.16.45.52 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1392 Identification: 0xc135 (49461) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 59 Protocol: TCP (6) Header Checksum: 0xda71 [validation disabled] [Header checksum status: Unverified] Source Address: 63.217.21.41 Destination Address: 172.16.45.52 [Source GeoIP: Tin Shui Wai, HK, ASN 3491, CONSOLE-CONNECT-ASN] [Source GeoIP City: Tin Shui Wai] [Source or Destination GeoIP City: Tin Shui Wai] [Source GeoIP Country: Hong Kong] [Source or Destination GeoIP Country: Hong Kong] [Source GeoIP ISO Two Letter Country Code: HK] [Source or Destination GeoIP ISO Two Letter Country Code: HK] [Source GeoIP AS Number: 3491] [Source or Destination GeoIP AS Number: 3491] [Source GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source or Destination GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source GeoIP Latitude: 22.4489] [Source or Destination GeoIP Latitude: 22.4489] [Source GeoIP Longitude: 113.9984] [Source or Destination GeoIP Longitude: 113.9984] [Stream index: 40] Transmission Control Protocol, Src Port: 80, Dst Port: 49192, Seq: 922677, Ack: 1468, Len: 1352 Source Port: 80 Destination Port: 49192 [Stream index: 77] [Stream Packet Number: 1209] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1352] Sequence Number: 922677 (relative sequence number) Sequence Number (raw): 2763501961 [Next Sequence Number: 924029 (relative sequence number)] Acknowledgment Number: 1468 (relative ack number) Acknowledgment number (raw): 3518731413 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 1032 [Calculated window size: 33024] [Window size scaling factor: 32] Checksum: 0xb03e [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 8.282681000 seconds] [Time since previous frame in this TCP stream: 0.000183000 seconds] [SEQ/ACK analysis] [iRTT: 0.081306000 seconds] [Bytes in flight: 5408] [Bytes sent since last PSH flag: 131144] TCP payload (1352 bytes) Hypertext Transfer Protocol File Data: 1352 bytes Data (1352 bytes) 0000 6f 6a 43 43 43 0b aa 09 cc 4b 2b 1b 50 ec a9 45 ojCCC....K+.P..E 0010 81 bb 16 d9 8e 6a ec cf 2b c3 8e 74 0f 36 ed 77 .....j..+..t.6.w 0020 63 f5 1e 27 96 6c b3 63 de c6 02 cc 5c 97 8f 19 c..'.l.c....\... 0030 6b 0b f0 3a 01 f9 f4 35 6e bc b1 c1 83 37 36 ba k..:...5n....76. 0040 08 c6 9d 78 63 93 0b b3 b7 96 61 de 76 2e e6 24 ...xc.....a.v..$ 0050 18 df 5e 86 f9 3b ca 09 c6 2b b1 60 67 15 de dc ..^..;...+.`g... 0060 53 a3 41 78 35 96 ec ad c2 f2 7d 55 04 e2 95 04 S.Ax5.....}U.... 0070 e4 15 58 b4 a5 18 cf cd d8 80 d1 77 de 8f 84 61 ..X........w...a 0080 66 d5 f9 52 40 3c 1a 43 b9 0d fd 50 76 4e 89 a3 f..R@<.C...PvN.. 0090 88 25 08 8f c3 c8 61 dc 41 33 46 ba 8c a9 ce 97 .%....a.A3F..... 00a0 aa e5 bc 38 9f 98 54 97 cb 58 e3 60 95 09 b7 44 ...8..T..X.`...D 00b0 48 66 d8 a6 75 90 8c 96 4a f8 18 3a 6e 22 86 0e Hf..u...J..:n".. 00c0 4d 90 e6 0c 9c c5 14 8b 38 0d ac f4 49 30 c6 1a M.......8...I0.. 00d0 5a b4 e9 1f cd c6 eb ca 58 62 18 c2 29 62 b4 f7 Z.......Xb..)b.. 00e0 f4 7f 9f 8d 80 fd 1f 02 71 dd ca f0 1a 07 10 b3 ........q....... 00f0 b2 e7 33 47 fd 2c 88 fb b3 df bc ad 65 57 ac 5a ..3G.,......eW.Z 0100 96 5c 5a 49 07 17 50 f5 ef 34 a9 15 30 71 f3 1c .\ZI..P..4..0q.. 0110 91 6b 18 54 83 1f 9e b0 42 b4 9e b6 50 8d a9 bf .k.T....B...P... 0120 b5 bd 49 c1 a1 b4 91 8e 52 1e af 0a c4 07 4b b1 ..I.....R.....K. 0130 66 a4 2e 3d 89 d0 0a 37 c3 7f 89 c1 83 7f 85 81 f..=...7........ 0140 37 dd 44 10 3e 50 40 7c e0 8d 83 a4 c5 71 04 b7 7.D.>P@|.....q.. 0150 6d 17 d0 e4 09 33 c2 0f e1 26 53 50 c6 59 9e 53 m....3...&SP.Y.S 0160 85 60 7a 07 36 b9 58 89 fe 33 00 e2 2c 71 b1 68 .`z.6.X..3..,q.h 0170 32 91 e0 85 8a 6a 69 1f 64 fd 17 a5 65 8d b4 ae 2....ji.d...e... 0180 85 66 73 54 88 1d 65 7f 59 89 c9 1c 5a 9c 19 a5 .fsT..e.Y...Z... 0190 75 c4 14 49 09 01 b8 99 8b ec 24 13 4e e0 cd ba u..I......$.N... 01a0 6f 3d 34 2b 43 dd ce 50 15 6e b2 57 b8 e6 19 ae o=4+C..P.n.W.... 01b0 59 39 1a 83 8a 3b 55 66 94 9f 8b 54 6d c1 a3 2c Y9...;Uf...Tm.., 01c0 fe 26 17 92 2d f3 eb d9 6d da c2 82 ce 3f cb 83 .&..-...m....?.. 01d0 0c d1 b8 f5 b6 89 98 3e 7b 05 36 6e cd 14 9d f8 .......>{.6n.... 01e0 ce 3d 85 48 3e 50 8c b4 0c 27 72 b2 dd c8 cb 61 .=.H>P...'r....a 01f0 27 03 b6 1e 2b 83 db 55 89 f2 b2 1a 54 55 d6 6b '...+..U....TU.k 0200 30 de 44 73 85 4f 80 ba b9 f1 08 cd 1d 5d 68 6d 0.Ds.O.......]hm 0210 e9 16 37 92 b6 d6 6e 02 f0 5e 2d 8e 4a 30 98 b7 ..7...n..^-.J0.. 0220 f9 7a 08 7e bb 69 bb 8b f6 e9 84 af a5 03 cd de .z.~.i.......... 0230 43 68 ae 6b 41 73 55 3d 1a dd 65 68 b4 17 a1 a9 Ch.kAsU=..eh.... 0240 20 87 60 3c 0d 6d 85 59 38 54 54 80 8e 62 d6 7f .`<.m.Y8TT..b.. 0250 17 50 e4 e3 88 2b 9f 80 bc 80 60 bb 00 3d 65 05 .P...+....`..=e. 0260 38 4a 40 ce 00 de 47 40 7e bc a6 18 7d d5 04 e8 8J@...G@~...}... 0270 15 05 e8 2a 2f 41 57 7d 1d ba 7d 1d 38 cc 92 94 ...*/AW}..}.8... 0280 b6 e3 14 a7 05 c4 db 18 c0 09 ba 19 c4 f9 71 ab ..............q. 0290 80 b8 82 6e 29 c8 6c be 0e 80 b7 73 9c 47 db a1 ...n).l....s.G.. 02a0 0b 14 04 e3 f4 fe 96 26 ce 86 f7 c0 e7 3d 0c 5f .......&.....=._ 02b0 3d 7d 87 fa 46 b4 54 57 49 43 a2 56 82 ea 9a 9c =}..F.TWIC.V.... 02c0 83 28 3d b8 13 55 59 c9 f0 16 65 a2 c5 95 03 1f .(=..UY...e..... 02d0 01 b8 af 2c 17 ad a5 79 a2 2f f5 95 aa ec 78 93 ...,...y./....x. 02e0 64 c4 0b 51 4f df b1 8e 20 bc 81 a0 bd 3c 77 1f d..QO... ....Q@\F... 0360 50 10 0f 6d 72 93 20 cd 84 58 9e 22 0e 21 ec aa P..mr. ..X.".!.. 0370 11 ae 7a 18 28 78 55 73 98 ee b1 1e c8 b0 eb a1 ..z.(xUs........ 0380 67 c8 83 b3 f0 b4 10 90 64 90 35 d4 f3 5b 40 5c g.......d.5..[@\ 0390 e9 c9 83 bb 01 07 3a 67 fe 8c 55 61 50 e8 20 ce ......:g..UaP. . 03a0 77 30 a5 6b b1 bf 5b 71 70 c2 20 42 9b 73 94 85 w0.k..[qp. B.s.. 03b0 ab 14 ba 46 aa ec b7 49 ab 9b 61 6d bd ee ab 1d ...F...I..am.... 03c0 19 61 a5 a0 85 48 b8 02 70 f5 9c 49 41 78 94 0e .a...H..p..IAx.. 03d0 b9 aa 49 d2 a2 85 8b e8 7f 3f 47 ec 04 55 64 6b ..I......?G..Udk 03e0 a1 1e 33 7c 33 fc b2 e7 f7 ad a3 c6 2a 8d b9 66 ..3|3.......*..f 03f0 17 a8 2f 0a a2 74 2f ef 70 be 73 7d 0b b6 6d dd ../..t/.p.s}..m. 0400 81 8c 8c 2c a4 a5 66 68 da ec 34 2d d2 71 f0 40 ...,..fh..4-.q.@ 0410 1a 32 d2 32 b0 7e cd 7a ba 66 27 48 b2 25 7c 50 .2.2.~.z.f'H.%|P 0420 38 c2 06 0e 41 38 83 38 eb f9 c3 f5 ef c1 c7 34 8...A8.8.......4 0430 21 9a be eb 82 59 f3 91 9d 91 23 ef e7 63 a5 1d !....Y....#..c.. 0440 4c 97 e3 1d 38 90 4a cf a9 e0 45 c0 a6 8d 5b 44 L...8.J...E...[D 0450 8a 12 e2 a0 12 66 d4 a0 3c 42 40 3c 22 2c 5c 12 .....f..