Frame 3555: 1406 bytes on wire (11248 bits), 1406 bytes captured (11248 bits) Encapsulation type: Ethernet (1) Arrival Time: Jul 22, 2017 02:50:09.156014000 UTC UTC Arrival Time: Jul 22, 2017 02:50:09.156014000 UTC Epoch Arrival Time: 1500691809.156014000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000148000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 394.630665000 seconds] Frame Number: 3555 Frame Length: 1406 bytes (11248 bits) Capture Length: 1406 bytes (11248 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) Destination: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 3] Internet Protocol Version 4, Src: 204.79.197.200, Dst: 172.16.45.52 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1392 Identification: 0x4661 (18017) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 122 Protocol: TCP (6) Header Checksum: 0xd92f [validation disabled] [Header checksum status: Unverified] Source Address: 204.79.197.200 Destination Address: 172.16.45.52 [Source GeoIP: US, ASN 8068, MICROSOFT-CORP-MSN-AS-BLOCK] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP AS Number: 8068] [Source or Destination GeoIP AS Number: 8068] [Source GeoIP AS Organization: MICROSOFT-CORP-MSN-AS-BLOCK] [Source or Destination GeoIP AS Organization: MICROSOFT-CORP-MSN-AS-BLOCK] [Source GeoIP Latitude: 37.751] [Source or Destination GeoIP Latitude: 37.751] [Source GeoIP Longitude: -97.822] [Source or Destination GeoIP Longitude: -97.822] [Stream index: 31] Transmission Control Protocol, Src Port: 80, Dst Port: 49162, Seq: 28546, Ack: 4754, Len: 1352 Source Port: 80 Destination Port: 49162 [Stream index: 45] [Stream Packet Number: 54] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1352] Sequence Number: 28546 (relative sequence number) Sequence Number (raw): 3117783214 [Next Sequence Number: 29898 (relative sequence number)] Acknowledgment Number: 4754 (relative ack number) Acknowledgment number (raw): 3447446910 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 1021 [Calculated window size: 261376] [Window size scaling factor: 256] Checksum: 0x2357 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 2.995573000 seconds] [Time since previous frame in this TCP stream: 0.000148000 seconds] [SEQ/ACK analysis] [iRTT: 0.065448000 seconds] [Bytes in flight: 4056] [Bytes sent since last PSH flag: 9464] TCP payload (1352 bytes) Hypertext Transfer Protocol File Data: 1352 bytes Data (1352 bytes) 0000 4a 99 89 2b 96 a6 97 dd 89 49 08 40 15 03 29 e2 J..+.....I.@..). 0010 52 d5 5c c6 32 d2 52 99 09 9a 95 89 39 d2 94 f0 R.\.2.R.....9... 0020 95 a8 97 51 ab f0 e8 34 1e b1 9c 44 14 a5 64 38 ...Q...4...D..d8 0030 24 92 a7 53 ec 5e cf a6 b1 2c 69 8c 65 cc 04 b4 $..S.^...,i.e... 0040 ba 5d da f5 6f 08 07 68 ca 32 f7 64 48 54 f5 4f .]..o..h.2.dHT.O 0050 42 54 b2 12 99 40 93 36 60 35 51 60 19 28 03 5d BT...@.6`5Q`.(.] 0060 4d 04 0d 62 52 d3 a2 41 60 43 8b d2 ce 7f 94 80 M..bR..A`C...... 0070 c6 53 95 04 35 a9 af 99 fb 44 c5 50 03 38 2a 58 .S..5....D.P.8*X 0080 05 2c c6 f5 f7 7a 9e b0 c4 24 90 50 14 e6 94 d0 .,...z...$.P.... 0090 bb 1a b0 d2 2a ac 02 19 27 c4 58 e5 76 03 5f de ....*...'.X.v._. 00a0 18 18 98 82 95 03 52 a3 c2 4d 6b cf 78 8a 90 38 ......R..Mk.x..8 00b0 8c c0 08 25 c4 bb 79 c0 ab cc aa 03 a3 35 b4 f1 ...%..y......5.. 00c0 45 46 44 a8 f7 69 4b 75 02 e5 f4 03 48 2c 4b 19 EFD..iKu....H,K. 00d0 81 55 a0 a5 d8 03 c8 18 29 1e f3 80 92 c1 56 21 .U......).....V! 00e0 2e 47 d2 08 49 66 cc a1 ef 70 82 6e d6 68 8a d8 .G..If...p.n.h.. 00f0 96 91 de 84 84 00 a5 aa a1 35 24 f4 0d 1a 19 47 .........5$....G 0100 11 ca 43 31 20 14 b3 24 9b 44 56 35 4b 01 44 0a ..C1 ..$.DV5K.D. 0110 a4 5d 86 96 be 94 86 25 43 a7 39 7a 20 b5 48 b6 .].....%C.9z .H. 0120 de ad a4 16 21 23 30 29 f0 80 97 2a 00 9a 3d 29 ....!#0)...*..=) 0130 b9 88 2e 54 d2 85 12 65 26 62 80 21 09 98 38 73 ...T...e&b.!..8s 0140 37 89 81 19 9b 47 a4 41 8d 2a 28 20 a6 87 c8 9c 7....G.A.*( .... 0150 a6 d0 88 a4 a5 dd 4a 71 52 a3 b0 a5 fa c5 c1 80 ......JqR....... 0160 4b cc 95 3a d2 84 b3 a7 39 aa 8a ac c0 3f ed 19 K..:....9....?.. 0170 c0 26 6a e5 24 e5 1c 4b 19 0a 98 15 04 9a 1c 87 .&j.$..K........ 0180 47 d5 a2 08 0a 4a 5c 04 05 2b fb c6 66 6b a9 bf G....J\..+..fk.. 0190 53 5a 22 44 17 29 24 a4 a9 47 de 27 4e 5b 44 50 SZ"D.)$..G.'N[DP 01a0 e9 07 2a 52 5c 55 3a 1e 63 a4 03 55 4e 66 64 a9 ..*R\U:.c..UNfd. 01b0 c8 23 70 1e 90 58 01 52 80 35 4b b9 29 e5 d7 ac .#p..X.R.5K.)... 01c0 05 66 0a 00 00 00 50 00 65 21 dc fe d1 55 b3 3f .f....P.e!...U.? 01d0 13 8f c7 2a 4c a5 71 89 28 12 70 98 69 48 09 42 ...*L.q.(.p.iH.B 01e0 25 a7 88 e4 96 81 6a 66 5a ae 6e 4c 49 33 c3 3e %.....jfZ.nLI3.> 01f0 10 a5 3a bb bc e7 23 06 51 2e 1c 87 39 6a c6 34 ..:...#.Q...9j.4 0200 8c 4b 98 4a ec 0b 1b 5d dc 52 25 52 4a 9a e7 2e .K.J...].R%RJ... 0210 6d 48 73 5d 9b a4 41 89 08 53 59 81 04 94 90 e0 mHs]..A..SY..... 0220 f3 89 8a a0 91 98 a5 26 bf a8 d9 d5 7c a2 12 22 .......&....|.." 0230 80 7a 25 89 3c 23 93 52 91 a5 32 0d 78 49 20 f0 .z%.<#.R..2.xI . 0240 a7 7d 29 b6 f1 30 49 c9 dd 24 77 64 9f 12 96 5e .})..0I..$wd...^ 0250 af a2 53 64 81 f1 80 cb 2a 52 98 91 2d d2 08 2f ..Sd....*R..-../ 0260 70 0f e9 2d 16 44 6c 62 31 38 bc 74 c3 89 c6 4d p..-.Dlb18.t...M 0270 38 89 8a 01 21 6b 61 95 22 c8 4a 50 c9 4a 13 fa 8...!ka.".JP.J.. 0280 50 00 11 38 f1 92 76 5b 5a e1 07 29 bb 3d 4e 83 P..8..v[Z..).=N. 0290 76 7f 8c 30 44 c0 a2 b2 a7 7f 93 26 c7 a4 4a 32 v..0D......&..J2 02a0 a5 69 1c 25 39 95 fa 85 0d 2b 78 dc 0d 2b 98 a5 .i.%9....+x..+.. 02b0 04 cb 1d da 89 74 b0 77 7d 39 c5 45 14 2f 29 4a .....t.w}9.E./)J 02c0 54 50 a4 96 59 51 a0 3a 24 01 4f 48 a8 73 94 a4 TP..YQ.:$.OH.s.. 02d0 ca 44 8c ca 32 92 54 a4 25 f8 73 16 75 04 fd e2 .D..2.T.%.s.u... 02e0 51 8c 92 a2 82 e7 3f bc e4 d1 f9 d8 44 03 97 ca Q.....?.....D... 02f0 2e 19 b4 f3 7d a2 2a 55 9d cb 12 54 4b b9 d4 36 ....}.*U...TK..6 0300 a6 20 ca 91 83 18 65 1c cb 99 8c 59 70 5c 26 4c . ....e....Yp\&L 0310 b4 0a 30 17 5a d5 e4 91 cc c6 71 67 86 b8 50 70 ..0.Z.....qg..Pp 0320 59 8e 80 8b 18 0b 12 e7 90 ac ae 50 4d 42 5a aa Y..........PMBZ. 0330 20 65 01 21 cb 9d 39 45 ca 8c 65 33 25 80 82 0a e.!..9E..e3%... 0340 3f 50 b9 25 b7 b5 23 35 41 4a 56 0b 13 9d 98 8d ?P.%..#5AJV..... 0350 3a 51 c1 68 98 b1 9f 07 85 18 95 29 07 13 27 0d :Q.h.......)..'. 0360 2e 5a 1e 6c ec 52 f2 a2 5a 6c 42 52 90 a5 ad 67 .Z.l.R..ZlBR...g 0370 dd 42 01 26 25 b8 35 96 9e 35 29 41 4c 9a 22 61 .B.&%.5..5)AL."a 0380 17 02 81 b3 58 1f 84 28 73 02 72 80 90 c6 a9 77 ....X..(s.r....w 0390 67 e7 4d a3 35 63 1a b2 a4 38 ab 97 07 63 72 62 g.M.5c...8...crb 03a0 03 2a 94 4d 49 48 ca 54 54 c5 c6 95 78 83 26 1c .*.MIH.TT...x.&. 03b0 e1 d0 a5 2a 7c 93 88 70 d2 d2 56 50 90 af d4 b6 ...*|..p..VP.... 03c0 e2 56 5d 9c 0d e1 12 b1 24 55 b3 06 55 54 b6 25 .V].....$U..UT.% 03d0 86 ec 2f 11 54 4c 92 a2 13 98 a1 1e 1c cc 97 3a ../.TL.........: 03e0 a9 83 b0 85 c2 10 21 ea 1c 8a be 8e 6e 58 44 12 ......!.....nXD. 03f0 14 68 34 d8 3d 5a 20 14 6e 0d 1e fe bc a2 29 97 .h4.=Z .n.....). 0400 60 07 93 d3 d2 01 00 4b 54 53 c2 1e fa bc 02 35 `......KTS.....5 0410 a6 ee 48 de 00 70 14 16 52 c7 46 2f 7d de 01 66 ..H..p..R.F/}..f 0420 70 49 67 37 de 00 24 07 16 6b be e7 68 00 84 f8 pIg7..$..k..h... 0430 99 b5 ad a9 47 80 08 24 d7 f6 ae c2 01 65 53 31 ....G..$.....eS1 0440 0c 74 02 e2 01 10 fc 99 e9 af 9c 03 41 97 99 94 .t..........A... 0450 92 b4 dd 92 40 24 b6 e5 e1 31 53 42 ec 02 52 6c ....@$...1SB..Rl 0460 01 26 9b 73 88 15 5d f6 ad 76 b1 80 1d aa ed ac .&.s..]..v...... 0470 42 07 51 56 65 17 59 14 24 bd 20 25 9c 54 38 da B.QVe.Y.$. %.T8. 0480 20 00 ad 5c 74 df 73 14 0f 50 0f ae d1 02 e7 ae ..\t.s..P...... 0490 9a 7c 20 0a 36 50 f4 a0 1a 3c 04 b0 a9 b8 80 ac .| .6P...<...... 04a0 b6 0c 41 36 26 90 12 29 6b ea 77 82 17 4a ea 2d ..A6&..)k.w..J.- 04b0 e7 11 41 1b 57 51 af a4 14 6e f6 37 3b 44 a1 33 ..A.WQ...n.7;D.3 04c0 de e5 d8 6f 00 a8 48 16 dc 35 20 24 00 d4 d3 43 ...o..H..5 $...C 04d0 d6 00 04 92 00 72 77 e5 00 8d d8 1a 9a b0 88 33 .....rw........3 04e0 00 6a 1e 86 cd ea f1 e8 70 34 6b e7 fe 4c 58 2d .j......p4k..LX- 04f0 28 0c 49 50 0c 3c 37 35 e5 04 2e a2 d7 88 32 61 (.IP.<75......2a 0500 f1 18 9c 3c ce f7 0d 39 72 27 65 52 04 c9 2b 54 ...<...9r'eR..+T 0510 b5 04 ac 65 58 cc 92 0b 28 16 30 cd 54 64 21 1c ...eX...(.0.Td!. 0520 21 90 18 01 a0 6d a2 86 2a ee 76 88 32 09 b3 3f !....m..*.v.2..? 0530 2f dc 77 8a 12 0a c4 ee e4 1e 12 b0 0a 42 c8 b3 /.w..........B.. 0540 81 68 a4 63 29 52 7c 41 .h.c)R|A Data […]: 4a99892b96a697dd89490840150329e252d55cc632d25299099a958939d294f095a89751abf0e8341eb19c4414a564382492a753ec5ecfa6b12c698c65cc04b4ba5ddaf56f080768ca32f7644854f54f4254b21299409336603551601928035d4d040d6252d3a24160438bd2ce7f9480c65 [Length: 1352]