Frame 21522: 1406 bytes on wire (11248 bits), 1406 bytes captured (11248 bits) Encapsulation type: Ethernet (1) Arrival Time: Jul 22, 2017 02:51:16.929438000 UTC UTC Arrival Time: Jul 22, 2017 02:51:16.929438000 UTC Epoch Arrival Time: 1500691876.929438000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000154000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 462.404089000 seconds] Frame Number: 21522 Frame Length: 1406 bytes (11248 bits) Capture Length: 1406 bytes (11248 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) Destination: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 3] Internet Protocol Version 4, Src: 172.217.11.74, Dst: 172.16.45.52 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1392 Identification: 0x42b9 (17081) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 60 Protocol: TCP (6) Header Checksum: 0x34cd [validation disabled] [Header checksum status: Unverified] Source Address: 172.217.11.74 Destination Address: 172.16.45.52 [Source GeoIP: US, ASN 15169, GOOGLE] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP AS Number: 15169] [Source or Destination GeoIP AS Number: 15169] [Source GeoIP AS Organization: GOOGLE] [Source or Destination GeoIP AS Organization: GOOGLE] [Source GeoIP Latitude: 37.751] [Source or Destination GeoIP Latitude: 37.751] [Source GeoIP Longitude: -97.822] [Source or Destination GeoIP Longitude: -97.822] [Stream index: 101] Transmission Control Protocol, Src Port: 80, Dst Port: 49350, Seq: 104105, Ack: 315, Len: 1352 Source Port: 80 Destination Port: 49350 [Stream index: 235] [Stream Packet Number: 137] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1352] Sequence Number: 104105 (relative sequence number) Sequence Number (raw): 419145978 [Next Sequence Number: 105457 (relative sequence number)] Acknowledgment Number: 315 (relative ack number) Acknowledgment number (raw): 966644853 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 343 [Calculated window size: 43904] [Window size scaling factor: 128] Checksum: 0x9388 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 0.370867000 seconds] [Time since previous frame in this TCP stream: 0.000259000 seconds] [SEQ/ACK analysis] [iRTT: 0.067782000 seconds] [Bytes in flight: 2704] [Bytes sent since last PSH flag: 105456] TCP payload (1352 bytes) Hypertext Transfer Protocol File Data: 1352 bytes Data (1352 bytes) 0000 77 85 7f 5d 6c 6e ea eb ba 71 e7 da a8 91 24 43 w..]ln...q....$C 0010 e8 72 09 5b 04 21 74 85 0f 6a d2 7f 94 a6 ed 9c .r.[.!t..j...... 0020 17 62 62 bc 20 8a 6f c5 c8 b8 5e e1 75 b9 1c 2b .bb. .o...^.u..+ 0030 5b 84 ef ef 0b 1e e7 bf ee 0d cb ef 4f 35 af 0d [...........O5.. 0040 52 b5 3b 69 b5 9a bf 2e 6c 24 81 62 35 ed bf 35 R.;i....l$.b5..5 0050 e7 b6 b7 f3 b0 d8 d5 2b 76 1a fa 03 1c 11 37 88 .......+v.....7. 0060 9e 9a e5 5c 98 bf 89 50 d8 8f 3a ee a0 58 ea fd ...\...P..:..X.. 0070 68 50 98 f2 d3 eb 81 e2 fe 40 6f 61 63 6a 87 c8 hP.......@oacj.. 0080 e0 50 44 e5 9e 64 65 73 7f fb ce 5c 1e 55 62 a1 .PD..des...\.Ub. 0090 87 d8 45 2b b4 d2 3a f8 ff 9f 56 34 a0 ce 29 bc ..E+..:...V4..). 00a0 1f 2d 2e ec 4c 74 d4 23 1c ad 59 af c4 9e eb c2 .-..Lt.#..Y..... 00b0 15 9d b0 d4 de af 31 9c f0 7f ab 9e a7 ce 6d a8 ......1.......m. 00c0 ab ea 9c d6 54 16 7b 3b 8f d1 4a 0e f6 51 cd 60 ....T.{;..J..Q.` 00d0 73 02 63 fd e4 9e aa 6d fd 2f ea 76 f6 db c1 fe s.c....m./.v.... 00e0 87 03 cd ff 1f 0f f4 d9 ef 07 7a bf 3c d0 bb ee ..........z.<... 00f0 bd 03 7d a4 06 5a 5b e1 fd bf 5e cf fd f2 40 ef ..}..Z[...^...@. 0100 d7 0e f4 ae 87 56 fb 17 e5 cb d8 ff b2 f0 2d 53 .....V........-S 0110 fa f3 df 0e 25 75 9e db 68 b5 0a 6e cb d7 e5 b3 ....%u..h..n.... 0120 f2 f8 1e 2a 3e 74 d3 d3 37 11 1b ad c5 cf cb f1 ...*>t..7....... 0130 8f 54 fc 63 75 e0 8a 84 8a 97 7b 72 51 fb 0e 7d .T.cu.....{rQ..} 0140 8d c3 8d c7 76 40 f0 77 46 ad 16 d0 a4 4d 12 02 ....v@.wF....M.. 0150 89 1b 3a 09 f9 29 06 8b 21 fd 10 7c 73 61 24 b6 ..:..)..!..|sa$. 0160 9c 73 7d ab 04 11 2a cd 1b 3c 08 0e 45 cf 8a fa .s}...*..<..E... 0170 6f 1c 0d 8a 3b 28 d6 5f 4c 34 a2 43 27 0a dc 67 o...;(._L4.C'..g 0180 f0 ee 5c f8 01 1c 11 20 37 48 ed 0f ae f9 04 28 ..\.... 7H.....( 0190 88 75 3d 62 27 07 60 98 d8 49 08 0f 62 67 44 22 .u=b'.`..I..bgD" 01a0 03 13 52 16 f3 a2 fe 5d 48 42 27 29 5a c0 9c 5c ..R....]HB')Z..\ 01b0 3e 17 a8 3b 9e 64 d4 ab 47 68 ed 90 15 11 2e 65 >..;.d..Gh.....e 01c0 f9 ad 12 a3 e4 a7 84 01 95 88 f5 7a 8b b3 d8 4e ...........z...N 01d0 9c 11 8a 48 e2 5c 4b bd ba c5 ec f6 2e 21 fb cb ...H.\K......!.. 01e0 e5 3e 4e 48 02 2c 49 4e c2 e5 f2 67 0a 58 b2 d7 .>NH.,IN...g.X.. 01f0 08 c7 e4 53 68 bf 0b ed a4 b0 d0 e3 24 08 a0 4a ...Sh.......$..J 0200 09 e1 fa ad dc 54 c2 f8 f5 b6 e4 f3 ba ee ad 7b .....T.........{ 0210 7e f5 2b 7c ec dc e2 d8 b9 69 9b ce 75 6e db 66 ~.+|.....i..un.f 0220 00 62 e7 a6 24 4e 4b 09 33 1a 28 cc 49 49 b4 a2 .b..$NK.3.(.II.. 0230 84 19 e4 a5 35 a0 e6 06 5b ad f0 d1 c5 7d 16 ab ....5...[....}.. 0240 a4 b9 ac 2c b6 4f 81 b1 e1 92 42 b8 34 5c 2e 9f ...,.O....B.4\.. 0250 0b 4f 29 5e 4a 9d 97 f2 66 22 67 cd c9 85 44 fe .O)^J...f"g...D. 0260 5d ef 61 2d 05 9f 48 61 0c 33 ac 2f b2 b5 7b 49 ].a-..Ha.3./..{I 0270 82 c0 84 07 ac 6c 23 a5 1a b5 db e8 4b 66 b3 7e .....l#.....Kf.~ 0280 34 c0 09 0e 51 05 a1 33 2e e6 b8 58 17 fe 3d e9 4...Q..3...X..=. 0290 3f 95 d3 97 49 9b 49 36 97 89 38 71 d7 45 63 a7 ?...I.I6..8q.Ec. 02a0 76 84 7a 20 1f 7b c4 ec 08 f9 f0 f9 29 b4 93 6a v.z .{......)..j 02b0 16 c9 fc ea 1f 64 71 18 8a 2c b6 e0 fb e3 46 1e .....dq..,....F. 02c0 eb 04 da 7f da 0c 58 df 59 6c f3 fb bb f0 ad 49 ......X.Yl.....I 02d0 cb 1d f1 6f b4 9e 07 d0 80 f7 24 7e 7f 5f c1 40 ...o......$~._.@ 02e0 43 56 81 7c a4 52 b4 62 e1 c4 a5 6d 2d a6 c1 ce CV.|.R.b...m-... 02f0 53 c2 80 4b 29 16 f8 8e d8 3f a4 5e d2 ca 18 48 S..K)....?.^...H 0300 94 0c 6c 4b d0 d3 92 7d 6d 40 a0 94 d8 3c 8e 4a ..lK...}m@...<.J 0310 62 86 d8 71 3d ec ec 61 4f 7e 80 2d c5 a8 cf 9c b..q=..aO~.-.... 0320 44 62 bc 41 e6 c2 3d 92 ee 75 ed 6e ea 9c d3 36 Db.A..=..u.n...6 0330 73 52 2d 32 22 76 44 c5 af 85 67 b1 1c 3e ff 7f sR-2"vD...g..>.. 0340 dc fd 79 77 db b8 92 38 80 fe ef 4f 21 63 7a d4 ..yw...8...O!cz. 0350 44 0b a6 49 6a b1 44 1a f1 91 ed 2c ee c4 d9 ec D..Ij.D....,.... 0360 6c ad 56 e7 80 24 44 d1 e2 a2 90 94 1d c7 d2 7c l.V..$D........| 0370 f6 77 b0 90 a2 24 ca 76 3a 77 de fc de bb b7 63 .w...$.v:w.....c 0380 91 58 8a 85 02 50 28 00 b5 ec 12 35 b2 eb f5 55 .X...P(....5...U 0390 ed 7d 4b b1 b1 c1 26 86 37 9f 7f 93 69 70 3e 57 .}K...&.7...ip>W 03a0 44 43 91 8d c1 88 fb cb ca 9d b3 ee d8 ea 8d 54 DC.............T 03b0 df 15 06 87 88 70 5f 16 3a 5a 85 cb 77 c6 2b 9b .....p_.:Z..w.+. 03c0 6f b2 8d c2 44 7d c7 d5 e0 d5 77 84 51 13 91 c2 o...D}....w.Q... 03d0 c8 6b 49 cc 77 05 fd 5f f8 e2 f5 ff 90 7e 0c dd .kI.w.._.....~.. 03e0 e7 12 8d f5 66 f2 85 80 8f e0 f1 b6 11 7c 59 1a ....f........|Y. 03f0 c1 63 e4 a0 91 3a 86 0b a2 06 ea d8 6d 88 33 57 .c...:......m.3W 0400 8f fb 9f 0b d4 97 ee 62 e4 47 24 08 6e ef 9c a3 .......b.G$.n... 0410 75 da 15 63 0e 9a 9c 95 2d 16 0b d4 af b4 c4 b0 u..c....-....... 0420 8e ab 42 a7 1f 39 18 84 f1 8f a5 1b 4d 67 4c 22 ..B..9......MgL" 0430 8f 02 f3 78 4b 04 f6 a3 1d 07 03 91 53 59 69 2d ...xK.......SYi- 0440 0e 3b bf 8b 06 1b 25 85 42 37 51 5f 63 a2 be 9e .;....%.B7Q_c... 0450 cf ed b1 72 4c b8 f9 b1 de 32 e0 ba 00 f2 62 73 ...rL....2....bs 0460 0f 17 e6 e2 87 2d b8 30 39 52 66 e3 f9 5c b9 1e .....-.09Rf..\.. 0470 63 1b 55 ba 15 cf ef 4e 13 a2 40 cb 51 27 04 7f c.U....N..@.Q'.. 0480 19 2b ec 8b e2 0a 6d 01 21 8f d5 a9 a1 42 22 d2 .+....m.!....B". 0490 20 34 73 a5 a0 b3 ab dc a5 a5 8c e8 99 6c fd 90 4s..........l.. 04a0 34 b4 2e eb 93 42 68 6d ca 4d c5 cd 7f b8 71 58 4....Bhm.M....qX 04b0 fc 27 eb c9 a5 8d 99 18 f2 d2 96 90 60 1d 63 b6 .'..........`.c. 04c0 3c 62 8d ff ca 35 70 fd 62 93 cc e7 f6 02 bd 58 V.7.'\.} 04f0 be 0a 5f 44 b9 5d 3d f8 e1 f7 93 44 6e fa 17 e8 .._D.]=....Dn... 0500 e5 d5 76 2f 33 bb d8 ae d7 7f db ea 19 9d 14 1e ..v/3........... 0510 78 b0 bd 80 0b f4 aa 52 cb d2 b1 95 cb 72 fd e5 x......R.....r.. 0520 27 6c d5 25 18 13 56 f5 69 65 55 6d cd 13 da d8 'l.%..V.ieUm.... 0530 e4 29 e3 65 8a 67 fa b6 3c 45 f2 d6 47 69 42 53 .).e.g..