Frame 20989: 1406 bytes on wire (11248 bits), 1406 bytes captured (11248 bits)
Encapsulation type: Ethernet (1)
Arrival Time: Jul 22, 2017 02:51:15.061593000 UTC
UTC Arrival Time: Jul 22, 2017 02:51:15.061593000 UTC
Epoch Arrival Time: 1500691875.061593000
[Time shift for this packet: 0.000000000 seconds]
[Time delta from previous captured frame: 0.001171000 seconds]
[Time delta from previous displayed frame: 0.000000000 seconds]
[Time since reference or first frame: 460.536244000 seconds]
Frame Number: 20989
Frame Length: 1406 bytes (11248 bits)
Capture Length: 1406 bytes (11248 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ethertype:ip:tcp:http:data-text-lines]
Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9)
Destination: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Type: IPv4 (0x0800)
[Stream index: 3]
Internet Protocol Version 4, Src: 172.217.4.130, Dst: 172.16.45.52
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 1392
Identification: 0xaa68 (43624)
000. .... = Flags: 0x0
0... .... = Reserved bit: Not set
.0.. .... = Don't fragment: Not set
..0. .... = More fragments: Not set
...0 0000 0000 0000 = Fragment Offset: 0
Time to Live: 60
Protocol: TCP (6)
Header Checksum: 0xd3e5 [validation disabled]
[Header checksum status: Unverified]
Source Address: 172.217.4.130
Destination Address: 172.16.45.52
[Source GeoIP: US, ASN 15169, GOOGLE]
[Source GeoIP Country: United States]
[Source or Destination GeoIP Country: United States]
[Source GeoIP ISO Two Letter Country Code: US]
[Source or Destination GeoIP ISO Two Letter Country Code: US]
[Source GeoIP AS Number: 15169]
[Source or Destination GeoIP AS Number: 15169]
[Source GeoIP AS Organization: GOOGLE]
[Source or Destination GeoIP AS Organization: GOOGLE]
[Source GeoIP Latitude: 37.751]
[Source or Destination GeoIP Latitude: 37.751]
[Source GeoIP Longitude: -97.822]
[Source or Destination GeoIP Longitude: -97.822]
[Stream index: 89]
Transmission Control Protocol, Src Port: 80, Dst Port: 49323, Seq: 1, Ack: 481, Len: 1352
Source Port: 80
Destination Port: 49323
[Stream index: 208]
[Stream Packet Number: 6]
[Conversation completeness: Incomplete, DATA (15)]
..0. .... = RST: Absent
...0 .... = FIN: Absent
.... 1... = Data: Present
.... .1.. = ACK: Present
.... ..1. = SYN-ACK: Present
.... ...1 = SYN: Present
[Completeness Flags: ··DASS]
[TCP Segment Len: 1352]
Sequence Number: 1 (relative sequence number)
Sequence Number (raw): 999813027
[Next Sequence Number: 1353 (relative sequence number)]
Acknowledgment Number: 481 (relative ack number)
Acknowledgment number (raw): 4112434619
0101 .... = Header Length: 20 bytes (5)
Flags: 0x010 (ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Accurate ECN: Not set
.... 0... .... = Congestion Window Reduced: Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 0... = Push: Not set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
[TCP Flags: ·······A····]
Window: 343
[Calculated window size: 43904]
[Window size scaling factor: 128]
Checksum: 0x37e5 [unverified]
[Checksum Status: Unverified]
Urgent Pointer: 0
[Timestamps]
[Time since first frame in this TCP stream: 0.161563000 seconds]
[Time since previous frame in this TCP stream: 0.027226000 seconds]
[SEQ/ACK analysis]
[iRTT: 0.065243000 seconds]
[Bytes in flight: 1352]
[Bytes sent since last PSH flag: 1352]
TCP payload (1352 bytes)
Hypertext Transfer Protocol
HTTP/1.1 302 Found\r\n
Response Version: HTTP/1.1
Status Code: 302
[Status Code Description: Found]
Response Phrase: Found
P3P: policyref="http://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"\r\n
Location: http://rp.gwallet.com/r1/ucm?r1s=qp93pb76uzif6nxmpr9g958aqmaz569iygnqj5eeh9ea3zarrbfy&google_gid=CAESEPmLeAxAicJrTbly8l_7mMA&google_cver=1\r\n
Date: Sat, 22 Jul 2017 02:51:12 GMT\r\n
Pragma: no-cache\r\n
Expires: Fri, 01 Jan 1990 00:00:00 GMT\r\n
Cache-Control: no-cache, must-revalidate\r\n
Content-Type: text/html; charset=UTF-8\r\n
Server: HTTP server (unknown)\r\n
Content-Length: 343\r\n
[Content length: 343]
X-XSS-Protection: 1; mode=block\r\n
Set-Cookie: id=24fa64fa3374ec2b||t=1500691872|et=730|cs=002213fd483e9affc086f7779a; expires=Mon, 22-Jul-2019 02:51:12 GMT; path=/; domain=.doubleclick.net\r\n
Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT\r\n
Set-Cookie: IDE=AHWqTUlFgWikIJ6ynqgmy-N8RJ9huOUGm7rgIydG_zZ8wdFlNvqrgccUZg; expires=Mon, 22-Jul-2019 02:51:12 GMT; path=/; domain=.doubleclick.net; HttpOnly\r\n
\r\n
[Request in frame: 20910]
[Time since request: 0.096318000 seconds]
[Request URI: /pixel?google_cm&google_nid=gwallet&google_hm=a3kJC6eAQ5WFCKxGrEtKoHyNA0U&r1s=qp93pb76uzif6nxmpr9g958aqmaz569iygnqj5eeh9ea3zarrbfy]
[Full request URI: http://cm.g.doubleclick.net/pixel?google_cm&google_nid=gwallet&google_hm=a3kJC6eAQ5WFCKxGrEtKoHyNA0U&r1s=qp93pb76uzif6nxmpr9g958aqmaz569iygnqj5eeh9ea3zarrbfy]
File Data: 341 bytes
Line-based text data: text/html (6 lines)
\n
302 Moved\n
302 Moved
\n
The document has moved\n
here.\r\n