Frame 20542: 1406 bytes on wire (11248 bits), 1406 bytes captured (11248 bits) Encapsulation type: Ethernet (1) Arrival Time: Jul 22, 2017 02:51:14.566983000 UTC UTC Arrival Time: Jul 22, 2017 02:51:14.566983000 UTC Epoch Arrival Time: 1500691874.566983000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000113000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 460.041634000 seconds] Frame Number: 20542 Frame Length: 1406 bytes (11248 bits) Capture Length: 1406 bytes (11248 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) Destination: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 3] Internet Protocol Version 4, Src: 63.217.21.41, Dst: 172.16.45.52 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1392 Identification: 0x6d6c (28012) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 59 Protocol: TCP (6) Header Checksum: 0x2e3b [validation disabled] [Header checksum status: Unverified] Source Address: 63.217.21.41 Destination Address: 172.16.45.52 [Source GeoIP: Tin Shui Wai, HK, ASN 3491, CONSOLE-CONNECT-ASN] [Source GeoIP City: Tin Shui Wai] [Source or Destination GeoIP City: Tin Shui Wai] [Source GeoIP Country: Hong Kong] [Source or Destination GeoIP Country: Hong Kong] [Source GeoIP ISO Two Letter Country Code: HK] [Source or Destination GeoIP ISO Two Letter Country Code: HK] [Source GeoIP AS Number: 3491] [Source or Destination GeoIP AS Number: 3491] [Source GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source or Destination GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source GeoIP Latitude: 22.4489] [Source or Destination GeoIP Latitude: 22.4489] [Source GeoIP Longitude: 113.9984] [Source or Destination GeoIP Longitude: 113.9984] [Stream index: 40] Transmission Control Protocol, Src Port: 80, Dst Port: 49194, Seq: 786902, Ack: 3551, Len: 1352 Source Port: 80 Destination Port: 49194 [Stream index: 79] [Stream Packet Number: 1088] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1352] Sequence Number: 786902 (relative sequence number) Sequence Number (raw): 4187835269 [Next Sequence Number: 788254 (relative sequence number)] Acknowledgment Number: 3551 (relative ack number) Acknowledgment number (raw): 2526154665 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 1209 [Calculated window size: 38688] [Window size scaling factor: 32] Checksum: 0xae5f [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 8.030078000 seconds] [Time since previous frame in this TCP stream: 0.000113000 seconds] [SEQ/ACK analysis] [iRTT: 0.076622000 seconds] [Bytes in flight: 4056] [Bytes sent since last PSH flag: 59488] TCP payload (1352 bytes) Hypertext Transfer Protocol File Data: 1352 bytes Data (1352 bytes) 0000 53 b2 be a2 c4 0c b6 c1 1d cf a0 47 ca e4 23 a0 S..........G..#. 0010 f9 af a2 2b fe 3d 3d 60 86 84 a0 95 00 a1 15 6d ...+.==`.......m 0020 ca 0a 37 24 92 3b f2 02 90 cf 98 8d 87 9b f2 f0 ..7$.;.......... 0030 01 33 a6 94 9a d2 a3 38 9e 95 38 9f 18 a3 84 d2 .3.....8..8..... 0040 09 1d 29 32 24 e4 e9 8a b7 4f fb ae 2a e8 11 4d ..)2$....O..*..M 0050 6b 29 05 0f 90 41 1b 19 77 71 4d 13 57 e3 ac 79 k)...A..wqM.W..y 0060 70 db 79 98 c2 5f 9f dd c2 8d 43 d7 06 3d 40 c6 p.y.._....C..=@. 0070 17 7e 05 7c a1 3b 60 9c 14 e2 b6 e2 4f 98 95 26 .~.|.;`.....O..& 0080 f3 8f 11 ef b1 7c 26 90 7b 2d e0 ed 35 e9 95 a4 .....|&.{-..5... 0090 f0 8a 5f 55 e2 11 32 69 25 08 14 cc a2 1b 0e 29 .._U..2i%......) 00a0 f0 81 1f d7 58 1c 57 99 8c 8a 1f 8a 68 82 c1 bc ....X.W.....h... 00b0 e5 0b 9d 43 a7 b6 14 a7 b6 fc 4c fb 9c f7 68 ce ...C......L...h. 00c0 7b 03 3f a8 d9 29 72 f0 11 33 f3 f4 ee 86 6f 34 {.?..)r..3....o4 00d0 f1 28 32 65 eb f2 19 b7 73 84 f7 82 d9 03 3b 07 .(2e....s.....;. 00e0 8b 88 0d 5a 88 ed 59 e5 7c 9b c0 2f 26 6f f9 be ...Z..Y.|../&o.. 00f0 bb bd 11 fb 40 ee 01 4c ca 6d 5a f1 7d da b4 b3 ....@..L.mZ.}... 0100 7b ac 71 02 62 38 df 3e 5e 7b 54 ab 8e a1 f0 ab {.q.b8.>^{T..... 0110 c1 09 6f 97 01 50 2c 6c 05 1d aa 49 45 37 8f 34 ..o..P,l...IE7.4 0120 ea b2 9f e9 14 8b 3d 20 77 b0 8d 80 c4 84 f0 88 ......= w....... 0130 97 b8 77 42 0a 34 8e 11 6e e2 6b fc b9 bc a4 b0 ..wB.4..n.k..... 0140 91 fc 89 83 0c 64 35 8d 43 9b 71 a1 bd 43 71 1d .....d5.C.q..Cq. 0150 f7 fb 6f be e1 28 76 50 f2 20 d9 31 5e 4b 41 45 ..o..(vP. .1^KAE 0160 d5 66 a4 49 51 06 11 e3 f4 47 50 28 5d 36 c0 3f .f.IQ....GP(]6.? 0170 c7 b6 61 90 dd 50 22 fc d0 b0 1a d9 7e 73 ae d5 ..a..P".....~s.. 0180 3c e1 3f 53 fe 73 1d 4a c7 50 c2 49 09 c6 0d 26 <.?S.s.J.P.I...& 0190 25 dd 49 88 b1 bd ae 31 2c 24 a5 e7 21 62 ff a4 %.I....1,$..!b.. 01a0 c4 0f 1f eb 28 a9 7d 3e 68 e1 89 53 a4 cc 40 44 ....(.}>h..S..@D 01b0 94 47 93 61 94 a1 34 31 b8 4a ae 72 18 c9 98 a6 .G.a..41.J.r.... 01c0 c8 28 de 4c 9b 0a 88 98 db ab cf 4b d4 30 2c 2f .(.L.......K.0,/ 01d0 38 8d 3c 6b 05 6e 7a b2 8b 23 19 a0 56 a7 5f 2b 8.0...*. 0240 a4 24 28 93 a6 1a 5b 56 1c 4e 66 2e 74 8a 3e 23 .$(...[V.Nf.t.># 0250 b3 12 d8 0f c4 b7 c0 15 d6 fc 0b c9 d9 10 9a 3c ...............< 0260 a5 a1 e0 28 db 71 6e 4f 31 69 35 ec cc 44 2b 02 ...(.qnO1i5..D+. 0270 95 a4 91 88 fb 0c 95 10 a9 c9 eb 50 36 3a 0b 75 ...........P6:.u 0280 b3 b7 9a a5 e2 d8 be 53 be 7d a1 94 9a 4a b5 95 .......S.}...J.. 0290 27 7a 2b 13 41 36 1a f2 31 e2 a2 0a ab 02 4b 47 'z+.A6..1.....KG 02a0 63 14 3a f2 b9 d2 45 dd d8 bd b5 73 f7 d6 74 80 c.:...E....s..t. 02b0 ce eb 0b e3 54 40 6a 6b 4b c1 bc d1 de 08 32 02 ....T@jkK.....2. 02c0 cc e5 9b fb 66 c5 e6 be f1 e7 7a 3f 96 6a 73 df ....f.....z?.js. 02d0 98 9b fb 4e 6c ee 1b 74 ab b8 33 bc 79 7d 35 bc ...Nl..t..3.y}5. 02e0 82 cd 7d 77 7e 65 6e ee 2b dc dc 46 65 77 c6 5e ..}w~en.+..Few.^ 02f0 e4 cb ce b7 e3 8c dd b2 39 6d 44 5b 2f de 25 49 ........9mD[/.%I 0300 70 28 20 8b b8 ae 34 c1 12 d6 c1 38 4a 74 38 2a p( ...4....8Jt8* 0310 6f a3 f1 03 54 be 03 02 07 2f be 5b 21 06 7f 84 o...T..../.[!... 0320 86 c7 6a 83 7d 7e 10 5c 72 28 ea c6 d6 16 ff 3d ..j.}~.\r(.....= 0330 47 ba c9 bb 68 24 f1 d2 86 8e 4b 16 8e e7 2f 16 G...h$....K.../. 0340 cf 77 06 3b cf 1c 9c 83 d5 f6 ee c6 bd 4a 6c d1 .w.;.........Jl. 0350 52 6d 6b e9 c5 43 66 68 5e 22 e7 43 8a 75 d9 38 Rmk..Cfh^".C.u.8 0360 c0 08 b1 e4 ef 9c 2b 11 6d 00 05 31 cd 27 1b 30 ......+.m..1.'.0 0370 92 df bc ed 78 db fb ad ef 89 f5 f7 3c a7 b4 3a ....x.......<..: 0380 e3 55 6e 2a 4d f7 b6 ac 76 0f 25 b4 0d e1 2c ca .Un*M...v.%...,. 0390 65 87 39 c9 4d cd 5e 00 f6 f2 24 8d 6f e3 54 f6 e.9.M.^...$.o.T. 03a0 07 cf d0 46 5d a2 a3 87 ef bd ed 7c db 7b dd f7 ...F]......|.{.. 03b0 14 74 ac 1a c2 6f 9a 04 84 06 00 11 63 0c 41 26 .t...o......c.A& 03c0 1e d1 6f 12 e2 2b c8 d9 16 a2 68 3a e9 f7 ed 02 ..o..+....h:.... 03d0 9a a7 3e ef d7 59 f2 f7 1a a1 e0 62 d1 33 52 70 ..>..Y.....b.3Rp 03e0 71 a2 d6 0d 02 0e 1a 39 ba e5 c2 98 ec c9 85 fc q......9........ 03f0 b8 20 fe 29 39 15 23 60 a4 9f c8 cf 87 58 13 94 . .)9.#`.....X.. 0400 88 c0 e0 8f aa 8d 2f 18 bc 18 b6 1f 79 d7 a7 83 ....../.....y... 0410 b7 81 32 bb 0d 58 01 c9 61 54 eb b7 ed e1 04 2c ..2..X..aT....., 0420 2d 39 bb 18 79 fb 98 a1 b5 88 ad 2a 17 fb 0d d5 -9..y......*.... 0430 d4 d8 54 4d 35 bc 6f 0e 9b c6 b8 14 26 2e 41 b3 ..TM5.o.....&.A. 0440 4a 5f f9 6d 6c 95 81 ea f5 fc f7 9c d3 eb 2b e0 J_.ml.........+. 0450 14 4b 83 fe 5a c8 0d 0a 6e c6 12 f7 a1 2a b4 95 .K..Z...n....*.. 0460 55 5d 8d 18 b9 b2 11 8a 15 9b bd 08 66 11 9d b9 U]..........f... 0470 f4 7c bf 3f 81 bb 64 e8 b7 7a 12 61 a3 75 4c 7d .|.?..d..z.a.uL} 0480 16 cf d8 f3 8e d0 73 38 61 d8 03 97 21 90 56 c3 ......s8a...!.V. 0490 b0 f6 70 c5 f7 70 a5 55 55 b7 b6 c6 3d 23 29 2f ..p..p.UU...=#)/ 04a0 2f 86 74 ec dc 03 1c 8f fb f9 72 8a e1 5b 4a 7e /.t.......r..[J~ 04b0 5c 78 58 76 23 b6 a9 a9 60 af 24 25 67 45 1c ff \xXv#...`.$%gE.. 04c0 98 e7 9f 3d 53 b9 5e 71 14 95 3d 3a 45 86 a6 77 ...=S.^q..=:E..w 04d0 d8 d5 d3 79 3c 46 32 6d b5 ae 58 ff 29 2a 68 02 ...y