Frame 4492: 1406 bytes on wire (11248 bits), 1406 bytes captured (11248 bits) Encapsulation type: Ethernet (1) Arrival Time: Jul 22, 2017 02:50:10.109833000 UTC UTC Arrival Time: Jul 22, 2017 02:50:10.109833000 UTC Epoch Arrival Time: 1500691810.109833000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000124000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 395.584484000 seconds] Frame Number: 4492 Frame Length: 1406 bytes (11248 bits) Capture Length: 1406 bytes (11248 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) Destination: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 3] Internet Protocol Version 4, Src: 204.79.197.200, Dst: 172.16.45.52 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1392 Identification: 0x7aed (31469) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 122 Protocol: TCP (6) Header Checksum: 0xa4a3 [validation disabled] [Header checksum status: Unverified] Source Address: 204.79.197.200 Destination Address: 172.16.45.52 [Source GeoIP: US, ASN 8068, MICROSOFT-CORP-MSN-AS-BLOCK] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP AS Number: 8068] [Source or Destination GeoIP AS Number: 8068] [Source GeoIP AS Organization: MICROSOFT-CORP-MSN-AS-BLOCK] [Source or Destination GeoIP AS Organization: MICROSOFT-CORP-MSN-AS-BLOCK] [Source GeoIP Latitude: 37.751] [Source or Destination GeoIP Latitude: 37.751] [Source GeoIP Longitude: -97.822] [Source or Destination GeoIP Longitude: -97.822] [Stream index: 31] Transmission Control Protocol, Src Port: 80, Dst Port: 49158, Seq: 74391, Ack: 11458, Len: 1352 Source Port: 80 Destination Port: 49158 [Stream index: 41] [Stream Packet Number: 140] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1352] Sequence Number: 74391 (relative sequence number) Sequence Number (raw): 3262168407 [Next Sequence Number: 75743 (relative sequence number)] Acknowledgment Number: 11458 (relative ack number) Acknowledgment number (raw): 433223755 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 1024 [Calculated window size: 262144] [Window size scaling factor: 256] Checksum: 0x3a21 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 4.893819000 seconds] [Time since previous frame in this TCP stream: 0.000124000 seconds] [SEQ/ACK analysis] [iRTT: 0.065264000 seconds] [Bytes in flight: 2704] [Bytes sent since last PSH flag: 20280] TCP payload (1352 bytes) Hypertext Transfer Protocol File Data: 1352 bytes Data (1352 bytes) 0000 6c fd dc 23 fc 3e 57 f0 e4 e7 77 1d 09 3c fe 5e l..#.>W...w..<.^ 0010 55 ad ec ee b9 1d f4 8d 6d 7e a9 15 d4 c3 0c e0 U.......m~...... 0020 66 29 fe 23 c9 bd e9 78 4b 1f 9b b1 bc 48 e5 f2 f).#...xK....H.. 0030 f4 60 a4 ec f6 a1 14 2f 33 aa 2a a0 c9 3b aa 5a .`...../3.*..;.Z 0040 65 b4 21 33 33 e0 c8 76 90 3c 80 23 f3 e7 f2 af e.!33..v.<.#.... 0050 43 bb b2 fb 2f da 52 48 8f 77 17 97 2d e0 fe 2c C.../.RH.w..-.., 0060 f9 8f d2 b2 70 fd df 05 8d d5 b7 7b 14 93 30 c4 ....p......{..0. 0070 32 1c 71 9a 65 95 b5 62 3c 29 4a 90 02 5b 63 3c 2.q.e..b<)J..[c< 0080 c4 c2 ad b7 93 8c e7 00 51 de ca 45 73 6f 3c e2 ........Q..Eso<. 0090 58 25 93 4f 99 36 4d 18 5e 1b d3 e0 47 ad 42 da X%.O.6M.^...G.B. 00a0 14 b7 77 97 ed 41 97 bb 2b 81 18 0b 9c 74 ce 7f ..w..A..+....t.. 00b0 95 6a f4 98 a2 b7 b2 99 fe d5 1c bb e6 3e 21 81 .j...........>!. 00c0 8c f4 5a 9b 97 a1 64 b5 67 3d 53 4c bc ba b7 ee ..Z...d.g=SL.... 00d0 be d0 05 ca 8c d9 ce 64 0a d7 2b d7 63 0e bb c7 .......d..+.c... 00e0 ad 65 64 68 e2 b8 58 ef 63 06 e1 4a b6 f3 b8 9f .edh..X.c..J.... 00f0 9e df 30 73 5a fd 56 78 e0 82 31 7a c4 d8 48 c1 ..0sZ.Vx..1z..H. 0100 5d 93 86 81 ff 00 76 45 3f ad 51 d7 34 5b 8b db ].....vE?.Q.4[.. 0110 46 b8 46 0d 79 12 06 7e e8 78 6e a3 f2 91 7d fd F.F.y..~.xn...}. 0120 40 fe 63 2f 17 aa 6c 8c d5 3b 8a 33 57 12 c1 32 @.c/..l..;.3W..2 0130 a1 84 6d 62 b8 75 0a d9 18 f2 39 eb 51 d2 64 b9 ..mb.u....9.Q.d. 0140 86 f5 2e ec c7 ed 20 6d db 8f 1b bd be 1e 54 34 ...... m......T4 0150 dc 28 27 32 6e 07 ce 8f 76 76 d2 59 52 5b 88 df .('2n...vv.YR[.. 0160 08 7c 38 2a 4f 1e 67 e5 4f 38 28 c7 b2 78 f2 39 .|8*O.g.O8(..x.9 0170 4f aa 35 9a b5 94 5a c6 9e a2 35 db 1c f9 92 16 O.5...Z...5..... 0180 23 fc b9 3d 0f c4 92 a7 fe df 5a c5 49 6d a7 c5 #..=......Z.Im.. 0190 71 1a cb 2e d7 8c 95 9b c8 13 f3 e9 5a fd 1e 49 q...........Z..I 01a0 fb c1 a7 cc 33 14 ea d8 90 7f d3 7c 70 71 e8 7f ....3......|pq.. 01b0 a5 04 ed 1e 8d 7f 3c b1 6a 36 30 49 df 31 db 71 ......<.j60I.1.q 01c0 10 1c ab 8f de 1e c7 d7 fa d4 b1 d5 d3 3a 72 b7 .............:r. 01d0 57 12 ac da 4c a9 88 ed d6 27 91 df 2b ca 92 17 W...L....'..+... 01e0 00 f3 5a 4d 22 4b c8 b4 96 8d 94 4b 3d 8c ca ca ..ZM"K.....K=... 01f0 70 17 74 4d d4 7c bc 5f 95 08 d3 ed e7 b1 48 da p.tM.|._......H. 0200 e2 43 0d c1 5d c7 bd 19 c0 c6 28 be 99 72 8b 72 .C..].....(..r.r 0210 86 5b c5 78 ae 47 76 cb dd ed 38 39 19 eb c7 34 .[.x.Gv...89...4 0220 4a da 08 52 76 f4 67 f5 cd 22 7b 1d 51 9e dc 24 J..Rv.g.."{.Q..$ 0230 91 4c db e3 c9 e4 03 e9 f0 a7 d4 fb 3e f6 0b 6f .L..........>..o 0240 3c 57 70 3f 7c c5 77 af 41 d3 ad 18 d6 2c 23 92 ..ZFI....._.Y 0280 c8 d7 00 7d 8a ec 86 2e 78 65 75 52 7f 30 71 59 ...}....xeuR.0qY 0290 db 8d 3e e8 5f dd da a4 a4 01 2b 29 50 dc 15 c9 ..>._.....+)P... 02a0 db 9e 7d 0d 4f 44 b4 d4 27 d2 b5 8b 27 72 24 96 ..}.OD..'...'r$. 02b0 25 9e 33 bc 1e 51 b9 c7 c9 aa 5d a9 66 87 5e 66 %.3..Q....].f.^f 02c0 c9 58 ee 63 0f f8 bc ca e3 f5 15 a9 6d a4 c4 6f .X.c........m..o 02d0 ca 9b 47 0b 48 6f 74 fb a8 ee 20 83 7e c6 c8 38 ..G.Hot... .~..8 02e0 e2 b6 fa b5 e1 b8 b3 bd b2 58 71 21 b6 49 b3 bc .........Xq!.I.. 02f0 10 4e 07 15 e5 ef 6f 71 14 22 2e f1 03 9c 3e fe .N....oq."....>. 0300 fc 0e 08 e9 d6 b7 57 56 a5 ad ee 2e 44 98 2f a1 ......WV....D./. 0310 c4 09 cf 1b bf b1 49 3c 71 b4 c7 c7 96 4d 3b 46 ......I..9.GF.. 04a0 ef 79 2c 23 f6 2a db 23 da 09 1b 47 4a 04 d7 50 .y,#.*.#...GJ..P 04b0 fd aa 10 8d 38 3b 9b 01 8b 7f 3a c8 c2 91 49 4e ....8;....:...IN 04c0 dd a7 a0 75 ad ce a5 73 77 34 36 f0 24 8f 16 7c ...u...sw46.$..| 04d0 24 e0 70 dd 7e 94 6b 4d d3 f5 39 0e c9 a2 8e 18 $.p.~.kM..9..... 04e0 f1 99 a5 92 42 44 6a 39 2d f9 9a 0d d9 a0 26 d7 ....BDj9-.....&. 04f0 e5 40 1d 9d dc aa 05 27 f1 6e cf 38 f2 c0 3d 78 .@.....'.n.8..=x 0500 af 42 d6 27 b2 d0 b4 32 26 64 91 9b 9d 87 fe ab .B.'...2&d...... 0510 8e 99 ff 00 48 eb fd f2 d9 5a 8b 49 76 4f 15 b4 ....H....Z.IvO.. 0520 e4 df 40 6d 42 f6 1d 36 d7 ec f6 eb 04 0e a8 4d ..@mB..6.......M 0530 9c 4c 00 30 a9 c8 32 31 fe 26 c9 e3 c8 7c eb 20 .L.0..21.&...|. 0540 d7 7a 97 72 42 c9 67 95 .z.rB.g. Data […]: 6cfddc23fc3e57f0e4e7771d093cfe5e55adeceeb91df48d6d7ea915d4c30ce06629fe23c9bde9784b1f9bb1bc48e5f2f460a4ecf6a1142f33aa2aa0c93baa5a65b4213333e0c876903c8023f3e7f2af43bbb2fb2fda52488f7717972de0fe2cf98fd2b270fddf058dd5b77b149330c4321 [Length: 1352]