Frame 2930: 107 bytes on wire (856 bits), 107 bytes captured (856 bits) Encapsulation type: Ethernet (1) Arrival Time: Jul 22, 2017 02:50:08.264714000 UTC UTC Arrival Time: Jul 22, 2017 02:50:08.264714000 UTC Epoch Arrival Time: 1500691808.264714000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000001000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 393.739365000 seconds] Frame Number: 2930 Frame Length: 107 bytes (856 bits) Capture Length: 107 bytes (856 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9), Dst: Cisco_01:e9:5c (00:09:e8:01:e9:5c) Destination: Cisco_01:e9:5c (00:09:e8:01:e9:5c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 3] Internet Protocol Version 4, Src: 172.16.45.52, Dst: 63.217.21.34 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 93 Identification: 0x022c (556) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x5995 [validation disabled] [Header checksum status: Unverified] Source Address: 172.16.45.52 Destination Address: 63.217.21.34 [Destination GeoIP: Tin Shui Wai, HK, ASN 3491, CONSOLE-CONNECT-ASN] [Destination GeoIP City: Tin Shui Wai] [Source or Destination GeoIP City: Tin Shui Wai] [Destination GeoIP Country: Hong Kong] [Source or Destination GeoIP Country: Hong Kong] [Destination GeoIP ISO Two Letter Country Code: HK] [Source or Destination GeoIP ISO Two Letter Country Code: HK] [Destination GeoIP AS Number: 3491] [Source or Destination GeoIP AS Number: 3491] [Destination GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source or Destination GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Destination GeoIP Latitude: 22.4489] [Source or Destination GeoIP Latitude: 22.4489] [Destination GeoIP Longitude: 113.9984] [Source or Destination GeoIP Longitude: 113.9984] [Stream index: 34] Transmission Control Protocol, Src Port: 49169, Dst Port: 80, Seq: 1353, Ack: 1, Len: 53 Source Port: 49169 Destination Port: 80 [Stream index: 52] [Stream Packet Number: 5] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 53] Sequence Number: 1353 (relative sequence number) Sequence Number (raw): 2947471052 [Next Sequence Number: 1406 (relative sequence number)] Acknowledgment Number: 1 (relative ack number) Acknowledgment number (raw): 2097437195 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 258 [Calculated window size: 66048] [Window size scaling factor: 256] Checksum: 0x82ef [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 0.079233000 seconds] [Time since previous frame in this TCP stream: 0.000001000 seconds] [SEQ/ACK analysis] [iRTT: 0.078962000 seconds] [Bytes in flight: 1405] [Bytes sent since last PSH flag: 1405] TCP payload (53 bytes) Hypertext Transfer Protocol File Data: 53 bytes Data (53 bytes) 0000 2e 32 35 26 55 54 43 3d 2d 32 34 30 3b 20 5f 52 .25&UTC=-240; _R 0010 77 42 66 3d 73 3d 37 30 26 6f 3d 31 36 3b 20 57 wBf=s=70&o=16; W 0020 4c 53 3d 54 53 3d 36 33 36 33 36 32 38 38 36 30 LS=TS=6363628860 0030 33 0d 0a 0d 0a 3.... Data: 2e3235265554433d2d3234303b205f527742663d733d3730266f3d31363b20574c533d54533d36333633363238383630330d0a0d0a [Length: 53]