Frame 20915: 750 bytes on wire (6000 bits), 750 bytes captured (6000 bits) Encapsulation type: Ethernet (1) Arrival Time: Jul 22, 2017 02:51:14.966459000 UTC UTC Arrival Time: Jul 22, 2017 02:51:14.966459000 UTC Epoch Arrival Time: 1500691874.966459000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000241000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 460.441110000 seconds] Frame Number: 20915 Frame Length: 750 bytes (6000 bits) Capture Length: 750 bytes (6000 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) Destination: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 3] Internet Protocol Version 4, Src: 23.48.156.193, Dst: 172.16.45.52 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 736 Identification: 0xc878 (51320) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 58 Protocol: TCP (6) Header Checksum: 0x77cf [validation disabled] [Header checksum status: Unverified] Source Address: 23.48.156.193 Destination Address: 172.16.45.52 [Source GeoIP: Vashi, IN, ASN 16625, AKAMAI-AS] [Source GeoIP City: Vashi] [Source or Destination GeoIP City: Vashi] [Source GeoIP Country: India] [Source or Destination GeoIP Country: India] [Source GeoIP ISO Two Letter Country Code: IN] [Source or Destination GeoIP ISO Two Letter Country Code: IN] [Source GeoIP AS Number: 16625] [Source or Destination GeoIP AS Number: 16625] [Source GeoIP AS Organization: AKAMAI-AS] [Source or Destination GeoIP AS Organization: AKAMAI-AS] [Source GeoIP Latitude: 19.0785] [Source or Destination GeoIP Latitude: 19.0785] [Source GeoIP Longitude: 73.0018] [Source or Destination GeoIP Longitude: 73.0018] [Stream index: 74] Transmission Control Protocol, Src Port: 80, Dst Port: 49279, Seq: 179626, Ack: 1037, Len: 696 Source Port: 80 Destination Port: 49279 [Stream index: 164] [Stream Packet Number: 345] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 696] Sequence Number: 179626 (relative sequence number) Sequence Number (raw): 3496266021 [Next Sequence Number: 180322 (relative sequence number)] Acknowledgment Number: 1037 (relative ack number) Acknowledgment number (raw): 2536047920 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 1013 [Calculated window size: 32416] [Window size scaling factor: 32] Checksum: 0xe553 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 2.828478000 seconds] [Time since previous frame in this TCP stream: 0.000241000 seconds] [SEQ/ACK analysis] [iRTT: 0.092733000 seconds] [Bytes in flight: 4752] [Bytes sent since last PSH flag: 115376] [TCP Analysis Flags] [Expert Info (Note/Sequence): This frame is a (suspected) fast retransmission] [This frame is a (suspected) fast retransmission] [Severity level: Note] [Group: Sequence] [Expert Info (Note/Sequence): This frame is a (suspected) retransmission] [This frame is a (suspected) retransmission] [Severity level: Note] [Group: Sequence] TCP payload (696 bytes) Hypertext Transfer Protocol File Data: 696 bytes Data (696 bytes) 0000 7a ae cb be 33 2e 6a fa a3 f8 b0 e2 42 38 7c ec z...3.j.....B8|. 0010 cd d3 b2 3c 49 ee a0 45 76 38 ec b1 9c e2 9e ba ...K.*O.. 0130 b7 31 71 9e a5 b4 bd d8 d2 62 63 6a 96 98 47 65 .1q......bcj..Ge 0140 74 54 84 27 eb f2 b4 63 61 a8 7b 6e 67 49 0e eb tT.'...ca.{ngI.. 0150 63 c9 ff b6 dc 3c 9d ca 78 91 5b b9 eb c7 1d cc c....<..x.[..... 0160 3f 6e 5f 37 d5 61 de d1 82 18 df f9 ca 52 5f 52 ?n_7.a.......R_R 0170 c6 7c b7 eb 57 fa 9c b1 e0 7d f2 a9 7c be 60 19 .|..W....}..|.`. 0180 a3 29 bc c5 52 a5 cd 56 f2 26 dd dd 71 2b ec ac .)..R..V.&..q+.. 0190 46 9b 14 d2 e3 26 8d 36 28 7c 7b 81 ab bb a3 b9 F....&.6(|{..... 01a0 b2 3d be d5 fd ed 99 00 5a 09 55 8e a2 84 2e 8d .=......Z.U..... 01b0 dc 1d 2d 02 c8 e4 88 91 62 50 4c 26 a8 26 fd 2d ..-.....bPL&.&.- 01c0 2b 56 26 8b 96 80 b5 26 44 ef 45 d2 d8 a1 cc a1 +V&....&D.E..... 01d0 48 e4 5c 1e c5 7a ae c5 20 fb 78 34 ce 0b 8f 27 H.\..z.. .x4...' 01e0 a5 70 31 aa bf 5c 12 f9 2c 81 73 c3 bc 71 9e 02 .p1..\..,.s..q.. 01f0 63 3d c9 a6 d2 7d fc 7d 7d 64 de 7b 13 e9 69 84 c=...}.}}d.{..i. 0200 d9 8f 3e 41 81 74 c7 1e 8f fc e1 f8 f2 a6 2d 6e ..>A.t........-n 0210 ca e9 e4 e7 91 ef 1f 18 7e db 06 cf d3 28 63 74 ........~....(ct 0220 67 78 dd c5 b0 14 a7 53 49 ff b7 61 e8 62 1e df gx.....SI..a.b.. 0230 5d de f9 d7 1f fe f8 cd f9 cf c6 af f3 78 2c 19 ]............x,. 0240 2b 48 df c9 a1 da d0 b9 fc 7a 45 9f 90 c1 a6 7d +H.......zE....} 0250 90 3e db 15 f6 dd f4 2d 7a df 16 fa cc 6c 1a bf .>.....-z....l.. 0260 a5 3b 59 78 c5 63 c9 c1 b3 61 ef bc 26 16 0e 7b .;Yx.c...a..&..{ 0270 f2 de 7a 0a 9e 36 70 f4 87 70 87 53 1e 2c 37 d4 ..z..6p..p.S.,7. 0280 d9 92 f2 56 5f 0f 5b 9f 0c e7 cb da 8e 05 f0 4a ...V_.[........J 0290 85 97 3f a4 97 2b 8b 23 79 4a fa 4b bc 20 70 4e ..?..+.#yJ.K. pN 02a0 1e 09 cb 9f 8e 4c 7e 3f d5 ab 07 a1 26 7a d2 be .....L~?....&z.. 02b0 87 18 1a 97 7b ef 7a ff ....{.z. Data […]: 7aaecbbe332e6afaa3f8b0e242387ceccdd3b23c49eea0457638ecb19ce29eba33bc0ed9e039a9049fb93cdbdff5d414e92241fb4e6998d69dda0c58eb75a857c05a3395b95f4922dacab52e3f440e33dcc751249efc22a165e9a097f14a99c9f04e2981097e3c69f356cdf76ad323f5105 [Length: 696]