Frame 3301: 1406 bytes on wire (11248 bits), 1406 bytes captured (11248 bits) Encapsulation type: Ethernet (1) Arrival Time: Jul 22, 2017 02:50:08.859347000 UTC UTC Arrival Time: Jul 22, 2017 02:50:08.859347000 UTC Epoch Arrival Time: 1500691808.859347000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000171000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 394.333998000 seconds] Frame Number: 3301 Frame Length: 1406 bytes (11248 bits) Capture Length: 1406 bytes (11248 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) Destination: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 3] Internet Protocol Version 4, Src: 204.79.197.200, Dst: 172.16.45.52 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1392 Identification: 0x463b (17979) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 122 Protocol: TCP (6) Header Checksum: 0xd955 [validation disabled] [Header checksum status: Unverified] Source Address: 204.79.197.200 Destination Address: 172.16.45.52 [Source GeoIP: US, ASN 8068, MICROSOFT-CORP-MSN-AS-BLOCK] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP AS Number: 8068] [Source or Destination GeoIP AS Number: 8068] [Source GeoIP AS Organization: MICROSOFT-CORP-MSN-AS-BLOCK] [Source or Destination GeoIP AS Organization: MICROSOFT-CORP-MSN-AS-BLOCK] [Source GeoIP Latitude: 37.751] [Source or Destination GeoIP Latitude: 37.751] [Source GeoIP Longitude: -97.822] [Source or Destination GeoIP Longitude: -97.822] [Stream index: 31] Transmission Control Protocol, Src Port: 80, Dst Port: 49162, Seq: 5508, Ack: 1593, Len: 1352 Source Port: 80 Destination Port: 49162 [Stream index: 45] [Stream Packet Number: 15] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1352] Sequence Number: 5508 (relative sequence number) Sequence Number (raw): 3117760176 [Next Sequence Number: 6860 (relative sequence number)] Acknowledgment Number: 1593 (relative ack number) Acknowledgment number (raw): 3447443749 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 1021 [Calculated window size: 261376] [Window size scaling factor: 256] Checksum: 0x548a [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 2.698906000 seconds] [Time since previous frame in this TCP stream: 0.000171000 seconds] [SEQ/ACK analysis] [iRTT: 0.065448000 seconds] [Bytes in flight: 2704] [Bytes sent since last PSH flag: 2704] TCP payload (1352 bytes) Hypertext Transfer Protocol File Data: 1352 bytes Data (1352 bytes) 0000 88 9f f6 4b 44 49 00 7d e2 ae 3e 47 0c 01 c1 a5 ...KDI.}..>G.... 0010 27 a5 8d b0 f1 7c dc ef 64 75 7a 19 48 b4 a5 09 '....|..duz.H... 0020 1c 71 02 ec d8 8a dd e2 42 49 ea 37 fc ed 9f ef .q......BI.7.... 0030 37 27 ad 49 73 38 db d6 aa ac eb 14 2b 1a 92 42 7'.Is8......+..B 0040 8c 64 b1 62 7d c9 24 93 f8 d6 56 ab aa 0b 2b 37 .d.b}.$...V...+7 0050 9d 9b 6f 3b 51 99 0b 20 63 d3 71 c8 00 7b 92 07 ..o;Q.. c.q..{.. 0060 bd 5e c8 c2 5e fc ee ba 99 7a db 7d bf 5d b3 b6 .^..^....z.}.].. 0070 68 d4 c7 0b 97 25 e0 9a 37 42 30 49 59 32 11 d7 h....%..7B0IY2.. 0080 94 18 c1 eb d6 b5 e3 52 14 9f e1 3d eb 98 f0 d6 .......R...=.... 0090 67 ba b8 9b 17 18 93 8f 9e 26 55 42 18 e5 37 33 g........&UB..73 00a0 b1 66 5c ed e3 80 14 72 6b ad 60 16 10 3d b9 a1 .f\....rk.`..=.. 00b0 6c 3a ba 3e 5e c7 2d e2 77 11 e9 ad 16 e5 32 4a l:.>^.-.w.....2J 00c0 c0 22 b3 00 4e 39 38 19 04 fe 19 c7 a5 60 e9 7a ."..N98......`.z 00d0 ce 93 77 63 e7 4b 1c b2 17 01 1f 63 79 64 e5 7a ..wc.K.....cyd.z 00e0 10 48 ed c7 d0 9f 53 5b 3e 26 b8 7f b6 24 23 7e .H....S[>&...$#~ 00f0 d4 5d e5 31 2a 87 3d 81 c8 d8 dc ed c1 1c 8c f5 .].1*.=......... 0100 e2 bc e7 40 d4 1e c2 21 67 ad c2 f1 6d 60 a5 a5 ...@...!g...m`.. 0110 40 c8 cc 31 eb c7 b5 65 2b 29 73 32 d7 37 2a 51 @..1...e+)s2.7*Q 0120 dc f4 d8 35 2d 17 99 6e 09 83 76 67 2d 77 32 f0 ...5-..n..vg-w2. 0130 44 86 40 70 18 9e 4b 16 1c 63 00 7a 01 56 e3 d5 D.@p..K..c.z.V.. 0140 ec af bc c5 b0 b8 49 c4 5c 31 8f a0 eb fe 06 b9 ......I.\1...... 0150 bb 6b cd 24 c6 49 b8 b5 6d aa 70 c2 dd 01 55 08 .k.$.I..m.p...U. 0160 cf d4 8c e0 05 6f a7 4a b3 3e b7 6a 90 90 b3 0c .....o.J.>.j.... 0170 46 1b 70 0b c8 da a0 9e dd 7e 65 5f f7 8e de bc F.p......~e_.... 0180 56 e9 c6 da 18 b8 d4 6f 52 dd dc f8 7e a2 8a e6 V......oR...~... 0190 6f fc 49 61 03 fe f2 e3 f8 8a e4 2f 1c 7b ff 00 o.Ia......./.{.. 01a0 9e 94 53 ba 17 2c bb 0f fe cf d3 d1 97 fd 0a 12 ..S..,.......... 01b0 aa a0 00 57 3d 17 68 cf ae 14 91 f4 35 0d cc 36 ...W=.h.....5..6 01c0 11 80 12 ce 10 ec 78 01 7e 9f 90 f9 57 f2 15 85 ......x.~...W... 01d0 1e a9 32 5b a8 b3 d3 ae 92 1e 48 9a 64 21 40 eb ..2[......H.d!@. 01e0 9e fe b9 ec 2b 77 4b b3 f3 f1 33 31 96 52 01 24 ....+wK...31.R.$ 01f0 f6 ac 74 7b 17 69 47 73 1e eb 44 98 5e c5 a9 d9 ..t{.iGs..D.^... 0200 a0 2f 18 0b 22 28 c0 da 3a 6d 1d b1 5a b6 57 d1 ./.."(..:m..Z.W. 0210 f9 c9 24 09 b2 56 20 17 89 00 72 71 c8 c8 c3 92 ..$..V ...rq.... 0220 40 ce 37 2a 80 0e 7d 2b a5 58 e3 81 70 3f fd 75 @.7*..}+.X..p?.u 0230 cc c9 a1 da dd eb 9e 7b cc 21 b2 52 0d d2 16 01 .......{.!.R.... 0240 5f 27 0a 84 9e 00 27 a9 ec 01 ac ec ee 6b 09 59 _'....'......k.Y 0250 dd 1e 91 65 aa ad c5 9c 53 a0 21 64 52 ca 31 f3 ...e....S.!dR.1. 0260 31 0a 58 85 1d ce 14 9c 52 2e b1 35 d3 33 59 45 1.X.....R..5.3YE 0270 f6 94 5f 99 70 0b 19 30 a0 c9 1e 07 dc 91 4b 03 .._.p..0......K. 0280 b1 80 dc 14 e0 f3 91 52 c7 44 9f 52 70 da 92 34 .......R.D.Rp..4 0290 70 8f 95 ad a4 40 08 c3 37 ca 47 cc ac bb 5f e5 p....@..7.G..._. 02a0 91 0a b0 c7 af 4e b3 ca 92 1b 49 5a ca 25 9a e7 .....N....IZ.%.. 02b0 cb f9 04 af 8f 31 80 c2 ef 7e 4f a6 49 c9 ad d4 .....1...~O.I... 02c0 5b 14 9d 38 3e ef f0 32 be cf ad 22 c2 30 92 b2 [..8>..2...".0.. 02d0 fc 93 6d 08 03 14 91 72 ca 7b 09 11 98 f4 f9 76 ..m....r.{.....v 02e0 63 be 6b 3f 52 b1 8e f5 a3 8b 58 d3 e3 17 0e be c.k?R.....X..... 02f0 5c 72 5b c7 b6 46 76 95 e3 00 12 40 0a 55 77 60 \r[..Fv....@.Uw` 0300 92 76 9e 6a d6 8b e2 db 9b cd 4a 4b 2d 57 4f 83 .v.j......JK-WO. 0310 4e 96 dd 43 4e 25 b8 2a ea 0a e4 15 8f 69 ee 3b N..CN%.*.....i.; 0320 b7 71 d7 82 7a 72 52 78 8e d2 7b 8e 38 64 38 20 .q..zrRx..{.8d8 0330 fb 83 c9 f7 ab 9d 27 1d 19 10 c4 45 fd 95 f9 1e ......'....E.... 0340 45 ac 97 d3 23 37 17 46 6b fd 3e 4d cc 6e 2d 83 E...#7.Fk.>M.n-. 0350 30 61 f3 06 dd 19 e0 fd e6 ce 01 c8 27 82 0f 0c 0a..........'... 0360 b1 f8 85 a0 c3 1e f8 2e a1 66 c6 d0 64 93 6b 2a .........f..d.k* 0370 e7 3b 46 ee 8b 93 9d a3 81 5d 8e ad 65 f6 6b af .;F......]..e.k. 0380 b3 b2 17 b6 74 45 86 28 11 e5 98 2c 60 6d 11 20 ....tE.(...,`m. 0390 6f 95 63 51 b8 c8 dc 97 6c 01 83 83 e4 9a b7 c3 o.cQ....l....... 03a0 21 77 e2 66 85 65 9e d6 39 49 0c 21 83 2b b8 0c !w.f.e..9I.!.+.. 03b0 ef c9 c6 d5 61 cf 4e 0e 47 1d 2b 1e 5e a8 d6 a4 ....a.N.G.+.^... 03c0 a5 a2 bd d3 d8 ef a3 f1 a5 b5 e2 06 b4 7f 3c 1e ..............<. 03d0 f1 36 ff 00 e5 54 af 1a 6b 99 3f b5 35 75 58 92 .6...T..k.?.5uX. 03e0 25 64 b4 b6 56 04 82 c3 92 c7 1c 9e a7 1f 30 03 %d..V.........0. 03f0 b1 c5 67 68 bf 0c ae f4 2f 9b 4d d6 67 da 58 33 ..gh..../.M.g.X3 0400 47 2c 0a ca 71 cf e1 9a da b9 b6 4b 38 52 7f 10 G,..q......K8R.. 0410 cc c6 38 b8 2e 10 b4 6b cf 53 81 c7 6e 48 ec 3d ..8....k.S..nH.= 0420 05 4b ba 0a 7c ab 5b 9a 3e 11 b3 8a 0b 49 2e cc .K..|.[.>....I.. 0430 4a 8d 21 da 08 85 53 20 7d 19 8e 3d b3 81 d0 0c J.!...S }..=.... 0440 01 5a d7 37 e2 35 95 df 88 e2 4d e4 e4 0e 9f 52 .Z.7.5....M....R 0450 07 ea 2b 04 f8 b3 4a 55 11 c1 7b 1b 85 01 42 47 ..+...JU..{...BG 0460 96 23 3d 07 03 8c fb d5 7b b1 a9 6a 90 88 6d e0 .#=.....{..j..m. 0470 96 08 5c ee 96 49 17 6b 37 a0 f6 aa 4d 24 44 ef ..\..I.k7...M$D. 0480 39 f3 33 9f d5 35 53 6d 37 da 16 d1 a6 96 59 4e 9.3..5Sm7.....YN 0490 f1 02 9c af 52 b9 5e 4f 76 38 ed eb 8c 54 d6 fa ....R.^Ov8...T.. 04a0 86 8f ad 59 bd b5 e8 58 6e 38 df 0c c3 04 e4 e0 ...Y...Xn8...... 04b0 1e 7d cf d6 8b fd 11 ec a2 2f 1b ed 94 0e a3 a7 .}......./...... 04c0 e3 eb 5c 6c de 35 9d 2f 3c bf ec 85 6b a4 f9 4b ..\l.5./<...k..K 04d0 19 07 6f 7c 70 2a 95 ad a9 12 bc a5 72 5d 4e d6 ..o|p*......r]N. 04e0 e3 44 9a e9 20 ba cc 71 e7 01 f0 7e 52 09 03 1f .D.. ..q...~R... 04f0 8f 4f 7a c3 83 51 d6 2f 98 29 b8 58 57 21 7e 58 .Oz..Q./.).XW!~X 0500 c6 48 e3 fc 07 e5 5b a2 c9 b5 68 a4 9b 53 bc b7 .H....[...h..S.. 0510 17 0e db 99 44 80 04 f6 03 e9 8a a4 96 8b 6d aa ....D.........m. 0520 bc 11 90 55 5d 40 fc 40 ff 00 1a 76 49 03 93 6c ...U]@.@...vI..l 0530 49 fc 29 29 8d 6e 13 52 93 cd 7e 18 4f 18 95 40 I.)).n.R..~.O..@ 0540 f6 07 a5 15 d9 dc 5a 79 ......Zy Data […]: 889ff64b4449007de2ae3e470c01c1a527a58db0f17cdcef64757a1948b4a5091c7102ecd88adde24249ea37fced9fef3727ad497338dbd6aaaceb142b1a92428c64b1627dc92493f8d656abaa0b2b379d9b6f3b51990b2063d371c8007b9207bd5ec8c25efceeba997adb7dbf5db3b668d [Length: 1352]