Frame 2372: 1406 bytes on wire (11248 bits), 1406 bytes captured (11248 bits) Encapsulation type: Ethernet (1) Arrival Time: Jul 22, 2017 02:50:06.866345000 UTC UTC Arrival Time: Jul 22, 2017 02:50:06.866345000 UTC Epoch Arrival Time: 1500691806.866345000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000415000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 392.340996000 seconds] Frame Number: 2372 Frame Length: 1406 bytes (11248 bits) Capture Length: 1406 bytes (11248 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) Destination: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 3] Internet Protocol Version 4, Src: 72.21.81.200, Dst: 172.16.45.52 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1392 Identification: 0xb0c0 (45248) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 59 Protocol: TCP (6) Header Checksum: 0xa60b [validation disabled] [Header checksum status: Unverified] Source Address: 72.21.81.200 Destination Address: 172.16.45.52 [Source GeoIP: US] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP Latitude: 37.751] [Source or Destination GeoIP Latitude: 37.751] [Source GeoIP Longitude: -97.822] [Source or Destination GeoIP Longitude: -97.822] [Stream index: 32] Transmission Control Protocol, Src Port: 80, Dst Port: 49164, Seq: 85177, Ack: 369, Len: 1352 Source Port: 80 Destination Port: 49164 [Stream index: 47] [Stream Packet Number: 127] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1352] Sequence Number: 85177 (relative sequence number) Sequence Number (raw): 2196094413 [Next Sequence Number: 86529 (relative sequence number)] Acknowledgment Number: 369 (relative ack number) Acknowledgment number (raw): 4247731854 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 65535 [Calculated window size: 65535] [Window size scaling factor: 1] Checksum: 0x84f6 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 0.407575000 seconds] [Time since previous frame in this TCP stream: 0.000415000 seconds] [SEQ/ACK analysis] [iRTT: 0.060207000 seconds] [Bytes in flight: 2704] [Bytes sent since last PSH flag: 78416] TCP payload (1352 bytes) Hypertext Transfer Protocol File Data: 1352 bytes Data (1352 bytes) 0000 79 a7 dd 6e 6e 08 91 57 48 1b af c5 62 29 e7 49 y..nn..WH...b).I 0010 ca af f4 f2 c7 6c 9a d7 cd 62 18 0d 3b 8d c7 68 .....l...b..;..h 0020 ac 03 cc 8f 13 3c bd d6 1d a6 f6 e3 1f de b6 f2 .....<.......... 0030 05 5c 33 d0 2f ba 87 79 f4 48 a4 36 31 ab 06 94 .\3./..y.H.61... 0040 66 12 47 81 b1 5e 29 2a 12 06 ad a6 7e 78 04 ad f.G..^)*....~x.. 0050 d9 8d b4 be c7 35 19 a7 ed b0 88 1c e3 91 4a 82 .....5........J. 0060 c8 17 56 c0 f3 5d 48 5c 24 60 a1 d8 d0 fe 9a a1 ..V..]H\$`...... 0070 73 64 ef 71 38 6d d9 74 cb 34 8c cd ec 69 99 b0 sd.q8m.t.4...i.. 0080 eb ee 79 02 aa 59 c3 ee 06 f4 19 27 ed 80 7e e6 ..y..Y.....'..~. 0090 f6 34 bd 4c 41 3c cb d6 bc 43 c5 34 80 ab 64 e3 .4.LA<...C.4..d. 00a0 da 81 d5 ca c9 77 10 5d 99 46 a2 45 09 2e e4 69 .....w.].F.E...i 00b0 54 32 80 bc e0 50 5e df a8 de 4e ec 83 b7 13 1d T2...P^...N..... 00c0 21 b8 38 aa 54 a7 d4 48 5a 07 f9 98 e7 1a b4 e9 !.8.T..HZ....... 00d0 04 ef 09 a8 3b 86 97 0e c7 82 68 89 31 b5 0d 35 ....;.....h.1..5 00e0 ba 0e e1 db 1c 6d 4c 47 d2 15 42 07 72 c5 6b 37 .....mLG..B.r.k7 00f0 d6 a2 db 75 f5 23 78 f6 a5 ad 18 85 06 ef a7 48 ...u.#x........H 0100 c2 15 e4 41 48 cf 21 2e db b3 0d e8 cd 74 b6 96 ...AH.!......t.. 0110 c4 2a f1 bb 91 59 82 d6 59 14 34 7c 79 a7 21 e9 .*...Y..Y.4|y.!. 0120 c3 b6 c9 39 c8 6d db 35 2e c8 28 1d c0 3c 46 35 ...9.m.5..(......._N... 0440 98 d7 11 28 67 65 3a a3 e4 d6 e6 bb b8 c9 02 42 ...(ge:........B 0450 b8 f6 a6 0f 48 8b 65 49 9a 36 1e 46 2b 9d 79 d3 ....H.eI.6.F+.y. 0460 26 b7 bf 85 44 a6 44 90 8d 45 88 e2 a1 4e 27 6e &...D.D..E...N'n 0470 45 d1 3b 8e d2 d8 92 7a f3 d2 35 6f 7f 7f 9d 51 E.;....z..5o...Q 0480 c9 23 01 ce 05 5a 5c cd 39 69 26 12 02 3c 15 22 .#...Z\.9i&..<." 0490 bb 70 24 10 95 58 94 28 00 67 f3 5b 21 1a 42 c5 .p$..X.(.g.[!.B. 04a0 43 66 b0 39 d6 cd 63 af 78 11 b5 54 f3 f3 b0 74 Cf.9..c.x..T...t 04b0 c3 1c c6 78 5a 0c 4f aa 3f 46 a0 14 ed b5 3b d6 ...xZ.O.?F....;. 04c0 61 16 a8 f2 44 ab ea 39 24 9c 63 f1 5c cf ad 91 a...D..9$.c.\... 04d0 99 51 76 56 5f bb e6 ba 31 fa 92 d4 6d 39 8e 40 .QvV_...1...m9.@ 04e0 a4 a9 31 e8 ba 84 e7 10 b9 c0 c7 35 bb 79 6c 2d ..1........5.yl- 04f0 a4 2d 31 0c e4 fd e7 91 5c e9 2e 63 c3 32 1d 47 .-1.....\..c.2.G 0500 82 0f fe 2b a7 65 d3 3a 7d c5 aa bb ba bb 9e 41 ...+.e.:}......A 0510 23 22 93 aa a8 b6 b5 0d b1 d3 36 c4 fa b8 33 a5 #"........6...3. 0520 1d cd a3 a8 75 94 f6 ff 00 ed c1 ac 5f 58 5a 75 ....u......._XZu 0530 26 8d e3 7c 34 67 50 27 03 38 a4 25 b3 b5 e9 91 &..|4gP'.8.%.... 0540 96 59 49 d5 c4 63 04 52 .YI..c.R Data […]: 79a7dd6e6e089157481bafc56229e749caaff4f2c76c9ad7cd62180d3b8dc768ac03cc8f133cbdd61da6f6e31fdeb6f2055c33d02fba8779f448a43631ab069466124781b15e292a1206ada67e7804add98db4bec73519a7edb0881ce3914a82c81756c0f35d485c2460a1d8d0fe9aa1736 [Length: 1352]