Frame 20724: 1406 bytes on wire (11248 bits), 1406 bytes captured (11248 bits) Encapsulation type: Ethernet (1) Arrival Time: Jul 22, 2017 02:51:14.810468000 UTC UTC Arrival Time: Jul 22, 2017 02:51:14.810468000 UTC Epoch Arrival Time: 1500691874.810468000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000044000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 460.285119000 seconds] Frame Number: 20724 Frame Length: 1406 bytes (11248 bits) Capture Length: 1406 bytes (11248 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) Destination: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 3] Internet Protocol Version 4, Src: 63.217.21.41, Dst: 172.16.45.52 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1392 Identification: 0x6d8e (28046) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 59 Protocol: TCP (6) Header Checksum: 0x2e19 [validation disabled] [Header checksum status: Unverified] Source Address: 63.217.21.41 Destination Address: 172.16.45.52 [Source GeoIP: Tin Shui Wai, HK, ASN 3491, CONSOLE-CONNECT-ASN] [Source GeoIP City: Tin Shui Wai] [Source or Destination GeoIP City: Tin Shui Wai] [Source GeoIP Country: Hong Kong] [Source or Destination GeoIP Country: Hong Kong] [Source GeoIP ISO Two Letter Country Code: HK] [Source or Destination GeoIP ISO Two Letter Country Code: HK] [Source GeoIP AS Number: 3491] [Source or Destination GeoIP AS Number: 3491] [Source GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source or Destination GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source GeoIP Latitude: 22.4489] [Source or Destination GeoIP Latitude: 22.4489] [Source GeoIP Longitude: 113.9984] [Source or Destination GeoIP Longitude: 113.9984] [Stream index: 40] Transmission Control Protocol, Src Port: 80, Dst Port: 49194, Seq: 830166, Ack: 3551, Len: 1352 Source Port: 80 Destination Port: 49194 [Stream index: 79] [Stream Packet Number: 1150] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1352] Sequence Number: 830166 (relative sequence number) Sequence Number (raw): 4187878533 [Next Sequence Number: 831518 (relative sequence number)] Acknowledgment Number: 3551 (relative ack number) Acknowledgment number (raw): 2526154665 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 1209 [Calculated window size: 38688] [Window size scaling factor: 32] Checksum: 0xba43 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 8.273563000 seconds] [Time since previous frame in this TCP stream: 0.000044000 seconds] [SEQ/ACK analysis] [iRTT: 0.076622000 seconds] [Bytes in flight: 4056] [Bytes sent since last PSH flag: 105456] TCP payload (1352 bytes) Hypertext Transfer Protocol File Data: 1352 bytes Data (1352 bytes) 0000 3d 66 73 8b 53 66 e8 90 89 c3 03 10 e8 83 98 a2 =fs.Sf.......... 0010 a4 d0 f1 96 1c 1c 84 db 83 40 60 43 d0 2f 2a 4d .........@`C./*M 0020 e3 b3 27 5f f6 48 79 cd c3 b0 64 86 97 fa f0 30 ..'_.Hy...d....0 0030 83 c3 14 51 3b 03 de 06 f1 69 0e 6b f3 ba 28 11 ...Q;....i.k..(. 0040 92 21 28 05 c2 40 50 01 83 34 a6 84 35 59 ec 33 .!(..@P..4..5Y.3 0050 bc 3b fe 8a 52 16 25 05 5f 27 09 81 44 ba 68 ae .;..R.%._'..D.h. 0060 4d c4 02 ca 43 7c a7 4f fb 94 dc 1d 59 5a f0 0d M...C|.O....YZ.. 0070 1f ee e9 ba 37 03 4e 67 8e dd d7 05 fb c3 4d e4 ....7.Ng......M. 0080 07 dc 92 1f bc 1f 76 f1 a4 dd 85 07 b3 ca 09 71 ......v........q 0090 8a 27 9a ac 81 a3 e6 05 30 74 15 ca ee da f5 5c .'......0t.....\ 00a0 95 1c 18 a5 21 d5 6e 35 a3 64 e0 1b 9b a2 3f b3 ....!.n5.d....?. 00b0 2c 21 74 3c 5e 9c d7 65 82 87 6d 81 a5 c5 40 ac ,!t<^..e..m...@. 00c0 94 46 77 69 91 1d 95 ba ce 4d c0 1a c4 59 11 3d .Fwi.....M...Y.= 00d0 f8 df a7 5b bf 97 bf e7 bf d7 bf 4f cf 1e c0 28 ...[.......O...( 00e0 3e 78 da db de db bb 43 c7 12 77 79 51 8d cb 74 >x.....C..wyQ..t 00f0 5e df 21 cf 74 27 9e ab fa 26 4b 7c fd d5 ef 0f ^.!.t'...&K|.... 0100 9e c1 87 65 43 17 3b e9 13 bd f8 f3 c9 db 5f a2 ...eC.;......._. 0110 9a 9c 34 b8 68 b0 b7 c7 cf e7 f3 9d 1d fa 81 1e ..4.h........... 0120 49 c6 9f f2 2a 9e 26 bf e0 d2 91 8a c9 b4 43 da I...*.&.......C. 0130 99 af 4c df 33 4e 52 bb 16 3e a9 93 ab 3d 70 dd ..L.3NR..>...=p. 0140 ed 5e 67 81 e2 05 ba f7 30 02 1d d5 23 ee 43 33 .^g.....0...#.C3 0150 16 b8 09 e9 37 29 6d 27 46 06 d2 93 57 b5 3a a9 ....7)m'F...W.:. 0160 6a 86 81 7f 4a 7b cd e9 e0 6c 67 27 95 c1 76 3b j...J{...lg'..v; 0170 5c a2 aa c7 8f f6 7f 7c e2 ef ca 5b 41 8b 57 42 \......|...[A.WB 0180 61 79 de 9f e8 eb d8 c3 44 18 33 72 15 72 20 da ay......D.3r.r . 0190 fa 6c d4 88 77 b6 bd 41 30 f4 59 87 a0 d9 7b 0d .l..w..A0.Y...{. 01a0 27 21 6b 6e e1 6b 3a db ba 7f aa de bf 84 a5 94 '!kn.k:......... 01b0 1d 0e e8 37 b2 e6 74 2a 37 e7 a6 c1 d9 e0 ec cc ...7..t*7....... 01c0 ad 83 71 5d 06 e9 ee ae 3d f2 a8 d5 4f 0e aa 7d ..q]....=...O..} 01d0 f3 c4 2b d7 db 4f 82 66 d5 43 58 e8 eb c0 c8 63 ..+..O.f.CX....c 01e0 3f ef 6f 72 7f 65 5f f1 69 06 04 5d 9c 71 10 b4 ?.or.e_.i..].q.. 01f0 ae 66 23 2b e4 53 ee ee 0a 25 b4 41 e9 bd 34 24 .f#+.S...%.A..4$ 0200 13 44 3c f4 b0 94 23 48 11 83 22 fe a3 d4 24 fb .D<...#H.."...$. 0210 a3 f4 d0 88 2a ad a8 32 d4 bc 0e b2 cb 7c 0e 93 ....*..2.....|.. 0220 9c 84 f9 19 12 b0 d2 3b fc 3a 64 24 fb df 71 37 .......;.:d$..q7 0230 36 6d de 8d 99 7e 6a e5 fd 04 15 7c 58 0a d1 74 6m...~j....|X..t 0240 08 f5 29 78 15 f6 0e 1e db fe 71 3b 6e d6 66 78 ..)x......q;n.fx 0250 b3 a6 d2 95 06 bb fa 17 6f 17 3f b3 fc de 4a fd ........o.?...J. 0260 3a b6 b2 93 9d 8c 03 61 6e a2 d0 11 95 75 37 1b :......an....u7. 0270 55 e8 2a 82 59 1f 3f d0 43 6b 74 78 65 75 38 bc U.*.Y.?.Cktxeu8. 0280 65 ed 23 5f 0d 74 2f 0d 12 de ee ea c3 09 9e a7 e.#_.t/......... 0290 c1 00 da ee 07 43 a1 ee 34 0d 66 c0 76 5d 45 32 .....C..4.f.v]E2 02a0 49 58 ef 5e 62 25 9b 77 1a ca f5 ed 51 34 18 1d IX.^b%.w....Q4.. 02b0 3d 95 77 f7 a3 a3 dd 5d 7f 1c 25 a7 47 67 c1 34 =.w....]..%.Gg.4 02c0 ba 82 02 c6 c1 91 1f cc 76 a3 b8 87 99 63 17 10 ........v....c.. 02d0 17 4c fd 70 11 2d 84 1e e6 05 77 cc 4d 80 16 e6 .L.p.-....w.M... 02e0 74 35 22 c2 b7 51 16 0f 6d 28 d3 a4 52 65 be 84 t5"..Q..m(..Re.. 02f0 32 b7 7b 37 d1 39 49 7e 7a be 0f ab 38 4f 46 50 2.{7.9I~z...8OFP 0300 f0 4d ff 0a 15 3e 54 d9 2f a1 3a 8e d2 b7 48 a8 .M...>T./.:...H. 0310 e4 ca 82 aa 71 2c f3 19 1d 43 e7 8f a3 e3 d3 21 ....q,...C.....! 0320 37 a7 ec 1d c3 2e ee ef 5e 52 e6 83 46 d6 fe 72 7.......^R..F..r 0330 d9 66 f0 61 00 6f 6f c5 c4 82 29 31 27 ef cb 52 .f.a.oo...)1'..R 0340 2d 6b 66 79 fc b5 1c 8c ca bb d1 41 88 93 07 a8 -kfy.......A.... 0350 ee 5a 5e e4 66 6b 5d 55 2a 22 4e 79 34 b0 ae 0f .Z^.fk]U*"Ny4... 0360 7f 8e f3 49 96 54 da 9f c1 05 ec 51 42 dc f7 3a ...I.T.....QB..: 0370 6f 79 ad 31 b9 dd 49 17 b7 3b ee 1f 1f 7d 78 fe oy.1..I..;...}x. 0380 f1 f9 c9 fb 8f e8 d0 c0 0b 3d e8 b4 5b 0f 1f a2 .........=..[... 0390 01 1c b2 7d 7c 18 c2 43 88 0f fb de 12 e6 da 83 ...}|..C........ 03a0 d3 a8 1f da 37 ca d5 5a f7 a0 2b fd 86 cb d6 01 ....7..Z..+..... 03b0 69 25 55 c3 8d c6 c1 b6 fc 5d 77 a4 fb eb b8 bd i%U......]w..... 03c0 e8 dd ab 35 d0 30 1b c5 53 b0 a3 43 73 7f b4 16 ...5.0..S..Cs... 03d0 f7 ff 5d c6 5f fb fb ab 19 75 83 ca 6d 1a ba 02 ..]._....u..m... 03e0 bf c4 f0 0b 5d de 71 93 7e 93 7f 47 65 a4 66 18 ....].q.~..Ge.f. 03f0 de 86 06 c8 82 dc 32 e9 12 5a 44 1e 87 39 3f 58 ......2..ZD..9?X 0400 2e d1 f0 32 ae eb 58 e0 13 50 ee fa b5 47 02 01 ...2..X..P...G.. 0410 ac 90 3b 6b d4 ba 6e 25 c5 4c 85 b4 5c 42 a9 35 ..;k..n%.L..\B.5 0420 14 48 37 6f 5e 11 20 97 bc 41 f3 e8 03 ac 89 fc .H7o^. ..A...... 0430 26 27 dc 4d c4 80 4b 4a 87 bd 6d cb 3d 4b 6b b4 &'.M..KJ..m.=Kk. 0440 70 12 d0 68 af 73 93 bd 6d 9f 45 e2 94 e2 4b 8e p..h.s..m.E...K. 0450 bb bb 6d 01 4e 20 49 a6 76 88 4d 6d b3 07 1a 49 ..m.N I.v.Mm...I 0460 84 85 79 c0 cf bf 16 68 21 5a 85 2e de 81 e3 44 ..y....h!Z.....D 0470 42 ab 73 aa 30 47 c1 90 2c b1 d9 d9 10 27 63 f4 B.s.0G..,....'c. 0480 3c f0 45 46 d2 62 84 b2 90 e9 d8 94 88 b4 8c b9 <.EF.b.......... 0490 d4 70 3b 77 dd 16 ed 7f 07 d3 ad 18 82 5e 11 d8 .p;w.........^.. 04a0 df 2a b1 67 5d 7c 42 ad 4a 16 5c 2c a5 1c e2 c1 .*.g]|B.J.\,.... 04b0 5e af ef 5b bb a1 a2 83 36 e7 98 91 f2 51 15 49 ^..[....6....Q.I 04c0 03 6f 56 ed c1 76 63 f2 ce e3 78 96 a0 1e 2c 51 .oV..vc...x...,Q 04d0 d9 0f fe f7 1e a4 78 d0 66 99 55 2a 20 4b e9 22 ......x.f.U* K." 04e0 71 7f 13 b3 51 49 96 6e 0f 46 b0 04 f0 dc cd 47 q...QI.n.F.....G 04f0 4a da 8d 44 26 11 a3 48 a7 a6 3b 3b ec 67 2b 45 J..D&..H..;;.g+E 0500 5a 51 0a f9 06 18 4f d7 27 4a ea 47 01 25 b2 50 ZQ....O.'J.G.%.P 0510 51 1a a0 79 b4 e6 c4 02 2a 08 a1 06 d3 7c 01 dc Q..y....*....|.. 0520 8e 3c 69 53 82 1f 04 06 bc 3a d4 8f 90 47 88 6f .