Frame 20539: 1406 bytes on wire (11248 bits), 1406 bytes captured (11248 bits) Encapsulation type: Ethernet (1) Arrival Time: Jul 22, 2017 02:51:14.566573000 UTC UTC Arrival Time: Jul 22, 2017 02:51:14.566573000 UTC Epoch Arrival Time: 1500691874.566573000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000137000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 460.041224000 seconds] Frame Number: 20539 Frame Length: 1406 bytes (11248 bits) Capture Length: 1406 bytes (11248 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) Destination: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 3] Internet Protocol Version 4, Src: 63.217.21.41, Dst: 172.16.45.52 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1392 Identification: 0x6d6a (28010) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 59 Protocol: TCP (6) Header Checksum: 0x2e3d [validation disabled] [Header checksum status: Unverified] Source Address: 63.217.21.41 Destination Address: 172.16.45.52 [Source GeoIP: Tin Shui Wai, HK, ASN 3491, CONSOLE-CONNECT-ASN] [Source GeoIP City: Tin Shui Wai] [Source or Destination GeoIP City: Tin Shui Wai] [Source GeoIP Country: Hong Kong] [Source or Destination GeoIP Country: Hong Kong] [Source GeoIP ISO Two Letter Country Code: HK] [Source or Destination GeoIP ISO Two Letter Country Code: HK] [Source GeoIP AS Number: 3491] [Source or Destination GeoIP AS Number: 3491] [Source GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source or Destination GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source GeoIP Latitude: 22.4489] [Source or Destination GeoIP Latitude: 22.4489] [Source GeoIP Longitude: 113.9984] [Source or Destination GeoIP Longitude: 113.9984] [Stream index: 40] Transmission Control Protocol, Src Port: 80, Dst Port: 49194, Seq: 784198, Ack: 3551, Len: 1352 Source Port: 80 Destination Port: 49194 [Stream index: 79] [Stream Packet Number: 1085] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1352] Sequence Number: 784198 (relative sequence number) Sequence Number (raw): 4187832565 [Next Sequence Number: 785550 (relative sequence number)] Acknowledgment Number: 3551 (relative ack number) Acknowledgment number (raw): 2526154665 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 1209 [Calculated window size: 38688] [Window size scaling factor: 32] Checksum: 0x8ca2 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 8.029668000 seconds] [Time since previous frame in this TCP stream: 0.000137000 seconds] [SEQ/ACK analysis] [iRTT: 0.076622000 seconds] [Bytes in flight: 2704] [Bytes sent since last PSH flag: 56784] TCP payload (1352 bytes) Hypertext Transfer Protocol File Data: 1352 bytes Data (1352 bytes) 0000 4e 9d 17 d8 29 f8 c1 d5 30 a1 91 bc f4 e0 66 31 N...)...0.....f1 0010 f7 55 c1 df 03 55 48 ef 5f 19 ef 19 ca 4e 43 0c .U...UH._....NC. 0020 ca 66 63 24 fe 3d 52 9f 30 57 cd c8 1e b1 23 4f .fc$.=R.0W....#O 0030 d1 b9 50 fb cb 1d cf 1f 36 c6 e1 34 f2 ee f1 6f ..P.....6..4...o 0040 84 4a 00 76 ec e5 a0 d5 31 1c ba e1 7d cf 46 6d .J.v....1...}.Fm 0050 da fe 77 34 66 27 fc 94 a1 fb 77 cd fd 26 5d 66 ..w4f'....w..&]f 0060 e7 9b a1 ba bb 95 64 36 d7 79 b9 d2 7a 19 36 35 ......d6.y..z.65 0070 34 a2 5e 82 d7 38 fe e4 c8 b3 68 20 1f ae 2e 76 4.^..8....h ...v 0080 75 ae a3 6b cb 06 a6 a1 d9 47 c2 cb b8 c3 dc be u..k.....G...... 0090 b6 c5 10 b1 13 8e b0 2c dc 19 66 df 57 8a 21 bf .......,..f.W.!. 00a0 1d ee 9a 5b 8e eb 50 6d 0f 2e 86 a4 cb 87 8d a3 ...[..Pm........ 00b0 73 38 2c 30 5f c1 28 9b b8 48 eb 69 07 0d dd 85 s8,0_.(..H.i.... 00c0 67 f4 da 94 ef bb 7c 4c 82 35 54 75 43 14 45 97 g.....|L.5TuC.E. 00d0 f8 90 e7 f3 4f 24 77 fc af 3a ae 63 cf 17 b8 88 ....O$w..:.c.... 00e0 7d 69 09 ff 4a 88 8a 74 72 f2 dc d4 b2 c7 c1 a9 }i..J..tr....... 00f0 87 1a 86 e7 17 80 9d dc f3 0c fb ec a3 42 6f 95 .............Bo. 0100 8c 9b b9 da 76 c8 ce 1f 1b 71 af 9a af 9a 71 b1 ....v....q....q. 0110 1a ef 9b b6 16 2e 50 d5 32 94 e8 2a 74 60 34 e6 ......P.2..*t`4. 0120 2e 24 74 04 e5 bb e3 0f 07 23 a7 62 61 73 7c 4d .$t......#.bas|M 0130 c3 86 8e f7 2d 23 86 c6 ac 4e f3 1a 3b 28 4a f3 ....-#...N..;(J. 0140 75 5e d5 99 46 89 76 6f 56 17 30 15 bb ed 22 42 u^..F.voV.0..."B 0150 b4 ad 38 14 0d b4 63 c9 00 75 33 d5 31 6d 94 08 ..8...c..u3.1m.. 0160 70 4b fd 0e 1d 14 89 3d 64 97 b2 6f 81 e6 f9 dc pK.....=d..o.... 0170 f6 09 f3 20 e3 4c c7 2e 69 36 d8 8e af 36 a1 10 ... .L..i6...6.. 0180 ed ed 17 c4 d9 1d af ac cb 55 4d b3 86 4e 23 20 .........UM..N# 0190 51 49 e3 7d d8 ca d9 03 b8 de cc 43 0c 0c a6 4b QI.}.......C...K 01a0 9f a3 66 ad da 6d b6 e8 97 ca a0 4e c9 63 d9 30 ..f..m.....N.c.0 01b0 24 10 ec 6c 89 65 58 6a b1 4b 76 10 de 0b e6 43 $..l.eXj.Kv....C 01c0 c3 cc 48 b3 1d f8 76 28 fa 71 f6 77 84 3a 27 46 ..H...v(.q.w.:'F 01d0 71 19 87 89 c9 e8 82 8d b2 07 52 5a cd c3 93 30 q.........RZ...0 01e0 cf 6c 0b 25 44 49 f9 5e d8 1c b4 65 44 56 85 aa .l.%DI.^...eDV.. 01f0 a0 88 60 b4 64 a7 26 e1 b2 1c 4e 7a a7 06 4a 39 ..`.d.&...Nz..J9 0200 35 9e 0f 38 bd 71 12 de 9b dc 31 87 74 d3 34 c1 5..8.q....1.t.4. 0210 d0 7c 0a d7 8d a2 e4 c3 b5 19 87 69 ce d7 ba 41 .|.........i...A 0220 11 31 41 54 5d 97 e1 2d 33 c7 14 e6 8b c5 cc 50 .1AT]..-3......P 0230 dc 27 e2 69 a8 59 fc fd 06 64 db 73 65 f6 38 eb .'.i.Y...d.se.8. 0240 61 28 51 15 e5 61 38 59 2c 6c 1e 46 42 98 f8 cb a(Q..a8Y,l.FB... 0250 5d c0 f4 cd 13 0a f8 a3 be ac ca a4 32 b9 bb 12 ]...........2... 0260 43 31 fa 98 a0 69 ac 9e 5c 12 09 9f 32 53 55 de C1...i..\...2SU. 0270 08 d9 85 bc 1c e3 8d 6b 26 f1 9e b9 51 56 44 09 .......k&...QVD. 0280 bf ea 39 15 89 bc 0e 1e a0 aa 6a 1e 15 d4 97 b3 ..9.......j..... 0290 bd 8a b7 8a f4 30 3c b5 29 0f 26 e0 6e e2 6f cf .....0<.).&.n.o. 02a0 0c fc 8d f4 fe ef 7c e3 03 f2 15 dc b3 33 68 85 ......|......3h. 02b0 0c dd 3b 96 64 38 e9 c8 1e bd e7 8f 6d 7e ea 8d ..;.d8......m~.. 02c0 92 65 2c 4d 72 f5 c4 64 9b 3a f9 a1 2e b6 67 13 .e,Mr..d.:....g. 02d0 01 08 5e bc 68 71 3d 6d f4 21 78 41 9c d8 07 45 ..^.hq=m.!xA...E 02e0 0b 26 e6 10 bc da e9 12 3a 3c 86 1d fa 62 67 6d .&......:<...bgm 02f0 6a d9 f0 06 e2 3c 44 95 71 88 0a fb 10 65 8b 45 j....5..=.. 0350 cb 4e 22 1c 37 3b 0f 67 6a 1c f3 09 b6 84 87 ae .N".7;.gj....... 0360 4a df ea b2 02 92 c6 eb b4 4e be 22 d5 97 e8 c8 J........N.".... 0370 56 9f ac cc 38 59 1d e7 a5 bd ce c1 cb 67 ff fa V...8Y.......g.. 0380 63 82 67 62 f0 68 15 07 c9 83 32 66 58 ba f9 06 c.gb.h....2fX... 0390 c2 e6 01 4b 25 20 04 4f e2 9b d1 ef 00 ef fe e6 ...K% .O........ 03a0 6d 4b 61 bb 16 38 3c 3d ff f5 d7 bf 7d d3 ff f3 mKa..8<=....}... 03b0 f6 5e cf 3f ff f5 e2 7e b9 40 6d 0a ef d7 5f bf .^.?...~.@m..._. 03c0 d9 f2 8c 52 76 a5 0b 75 51 fa fd 3f ef f5 f6 c2 ...Rv..uQ..?.... 03d0 5f 7f fd b5 e7 2f c8 12 bc bf 2d 32 2e 50 51 c2 _..../....-2.PQ. 03e0 fb 66 00 25 30 fc d6 37 00 6c 51 89 4d 5c 6f d2 .f.%0..7.lQ.M\o. 03f0 03 b9 96 89 57 71 89 ce 94 b5 a7 5f 6d 7f e2 d2 ....Wq....._m... 0400 c6 a0 8f 39 5f 4a 59 f3 22 b2 77 74 58 0e c7 e4 ...9_JY.".wtX... 0410 65 5b 5d 2a b9 ef 52 4e 16 ea 1e bf 12 e5 ee 6d e[]*..RN.......m 0420 f7 f0 22 fc 94 7d ce 30 4e 8e bf dd ab f6 bc 8d .."..}.0N....... 0430 5e 54 6d e0 a4 5d 27 29 f9 36 d5 f3 f1 b7 fe 9f ^Tm..]').6...... 0440 61 e2 7e 7d 7a f1 94 51 70 b1 00 8b a1 6b d7 0f a.~}z..Qp....k.. 0450 e4 dd 7a db f3 bd 20 c3 1a 38 c6 31 d9 b8 ba 83 ..z... ..8.1.... 0460 9a 32 ca f7 3c 5b ce 62 f1 c2 43 38 b3 de bf d3 .2..<[.b..C8.... 0470 2e 83 92 5c 95 c4 60 49 40 1f 9b fe b3 b1 3c c2 ...\..`I@.....<. 0480 48 57 71 1e b0 86 ff 04 fc c7 be fa 45 5e c6 f1 HWq.........E^.. 0490 00 39 7c 97 e7 39 d8 6a 67 74 c5 ea cf 71 96 73 .9|..9.jgt...q.s 04a0 9e 2b b9 7d 18 98 8c e7 1c 63 d8 91 a3 43 63 89 .+.}.....c...Cc. 04b0 0b bc b4 db 95 14 74 cd 03 ba 85 06 4a 97 65 5e ......t.....J.e^ 04c0 c3 b1 46 84 95 f4 68 59 ca c6 ac 66 73 36 61 53 ..F...hY...fs6aS 04d0 49 42 3b e1 fb cc 24 bb b9 4e 2e f5 80 b8 f5 8f IB;...$..N...... 04e0 a5 82 db 3c 3b 8e 49 5d 17 f9 cc 04 b8 ea f5 fb ...<;.I]........ 04f0 68 8e aa 82 f0 a3 8c 42 e0 59 1f ca ae 8f 8c 63 h......B.Y.....c 0500 8b 16 1a a2 8e 46 ae ef fc 1a a0 36 16 87 1f d5 .....F.....6.... 0510 24 3c 3f d0 a4 55 42 35 d9 ce f5 e9 68 09 d3 a5 $