Frame 6618: 1406 bytes on wire (11248 bits), 1406 bytes captured (11248 bits) Encapsulation type: Ethernet (1) Arrival Time: Jul 22, 2017 02:50:13.732001000 UTC UTC Arrival Time: Jul 22, 2017 02:50:13.732001000 UTC Epoch Arrival Time: 1500691813.732001000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.016240000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 399.206652000 seconds] Frame Number: 6618 Frame Length: 1406 bytes (11248 bits) Capture Length: 1406 bytes (11248 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) Destination: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 3] Internet Protocol Version 4, Src: 72.21.81.200, Dst: 172.16.45.52 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1392 Identification: 0xb72f (46895) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 59 Protocol: TCP (6) Header Checksum: 0x9f9c [validation disabled] [Header checksum status: Unverified] Source Address: 72.21.81.200 Destination Address: 172.16.45.52 [Source GeoIP: US] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP Latitude: 37.751] [Source or Destination GeoIP Latitude: 37.751] [Source GeoIP Longitude: -97.822] [Source or Destination GeoIP Longitude: -97.822] [Stream index: 32] Transmission Control Protocol, Src Port: 80, Dst Port: 49164, Seq: 2273328, Ack: 744, Len: 1352 Source Port: 80 Destination Port: 49164 [Stream index: 47] [Stream Packet Number: 2858] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1352] Sequence Number: 2273328 (relative sequence number) Sequence Number (raw): 2198282564 [Next Sequence Number: 2274680 (relative sequence number)] Acknowledgment Number: 744 (relative ack number) Acknowledgment number (raw): 4247732229 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 65535 [Calculated window size: 65535] [Window size scaling factor: 1] Checksum: 0xaec3 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 7.273231000 seconds] [Time since previous frame in this TCP stream: 0.016240000 seconds] [SEQ/ACK analysis] [iRTT: 0.060207000 seconds] [Bytes in flight: 1352] [Bytes sent since last PSH flag: 87880] TCP payload (1352 bytes) Hypertext Transfer Protocol File Data: 1352 bytes Data (1352 bytes) 0000 34 5a 49 f8 4c 87 72 48 48 66 a6 dc 3f 09 90 31 4ZI.L.rHHf..?..1 0010 9a 6a b8 c3 01 3a f6 17 92 95 a7 44 88 06 53 53 .j...:.....D..SS 0020 c7 95 46 8f c3 ed 13 12 f6 90 1c 0f b5 dd db a4 ..F............. 0030 98 64 f8 fa c8 6e 28 04 90 5b 0a 00 0c fa e5 14 .d...n(..[...... 0040 2a 65 68 3e 0e b3 c4 25 e8 22 22 54 5b c0 e4 26 *eh>...%.""T[..& 0050 2d 3e e1 ae fc 89 78 e2 26 c2 75 8d 8b 22 3e df ->....x.&.u..">. 0060 22 f0 fa 64 78 6c b5 a0 87 cf 28 53 05 17 57 98 "..dxl....(S..W. 0070 ca 36 0f 3d 78 34 03 ba cd 80 0c f8 2a 84 05 22 .6.=x4......*.." 0080 48 0d 11 5e 1e 0f b1 1e 55 73 7b d0 83 39 d2 a8 H..^....Us{..9.. 0090 ae e0 7c 63 f9 34 de 58 35 c9 b2 00 42 66 34 bf ..|c.4.X5...Bf4. 00a0 d0 23 5e 60 4b dc 18 47 8e f9 91 d0 48 b0 1e 69 .#^`K..G....H..i 00b0 8d 0c 24 8a c1 6b 72 c6 b2 c9 16 9d 5b 71 a7 32 ..$..kr.....[q.2 00c0 7d 6c e3 17 b1 9f 6f 0e ae ff f4 aa 23 56 63 a0 }l....o.....#Vc. 00d0 a3 8e 8a a7 c6 4a cd e1 a7 70 d7 11 8b bc a9 95 .....J...p...... 00e0 d7 a4 d7 2b 81 e9 4e ae 5f 1b 02 ef ac 0c 19 b8 ...+..N._....... 00f0 7e a8 69 8c e6 39 6c a9 94 a1 96 e6 2e 21 86 0b ~.i..9l......!.. 0100 34 bb f0 6c 45 c5 a8 52 50 a9 2d 01 c0 55 26 30 4..lE..RP.-..U&0 0110 40 9c 43 fe d7 9a 16 3c f9 20 64 fb a2 4f f9 01 @.C....<. d..O.. 0120 9f e2 20 b8 a6 8b 4b 5f 8f 54 fe 1c 62 70 a4 5a .. ...K_.T..bp.Z 0130 aa b2 c1 f9 56 a9 36 0f d3 5b 8d d1 3e f0 0b 47 ....V.6..[..>..G 0140 02 39 8b 6b 68 d1 39 07 62 48 74 50 fe 70 b5 03 .9.kh.9.bHtP.p.. 0150 44 31 f3 66 b1 a8 4e 62 c6 75 06 8d 96 d8 6f d7 D1.f..Nb.u....o. 0160 01 4e 0a b4 cc ba b5 42 39 f5 26 4f bc 63 3d 02 .N.....B9.&O.c=. 0170 26 10 81 9c a5 93 4c c4 65 b0 7c 81 99 a4 cb 85 &.....L.e.|..... 0180 5c 39 2b 81 7a 32 1b 45 e2 19 e3 69 9b 4d 2f 05 \9+.z2.E...i.M/. 0190 ef 24 0e fa 5d 5b 1c d0 3c 49 b5 5b 91 c0 20 f4 .$..][....t 0330 59 f8 1d a6 97 01 88 10 79 e2 83 cd 19 a1 6e e4 Y.......y.....n. 0340 4d 38 e5 13 0b b6 f7 ef a0 b0 1c 82 bf 01 ab 93 M8.............. 0350 ed c4 19 d2 fe f6 9c 25 3b c5 92 25 00 0d 14 4e .......%;..%...N 0360 c9 2f 2a 44 65 af 68 3f 4f a3 da c9 34 8e 5b cf ./*De.h?O...4.[. 0370 3b 07 13 9b 0f e0 38 d3 69 ed 74 a9 ec 77 db 26 ;.....8.i.t..w.& 0380 e3 df 3a 51 63 b6 c3 2b e9 5c 16 3f 35 25 b6 2e ..:Qc..+.\.?5%.. 0390 c4 43 61 51 a9 09 30 64 0c 73 41 81 ef b2 3b 42 .CaQ..0d.sA...;B 03a0 08 16 7f d6 b2 61 75 87 1a 1b ca 1b 80 e6 ae a6 .....au......... 03b0 5a 4d d5 52 bf e9 c2 12 08 5a 18 cc 32 3f f4 54 ZM.R.....Z..2?.T 03c0 e1 4b 92 10 3f c5 4f a9 a1 ef 62 c9 18 80 b1 63 .K..?.O...b....c 03d0 bc 43 ff 13 a5 63 11 1a 36 a6 e0 bb 79 f5 2b 8a .C...c..6...y.+. 03e0 cf d6 45 c4 18 f3 34 17 5e df 9a 8e 8f 31 48 2d ..E...4.^....1H- 03f0 ee c0 91 e0 95 9e 59 96 03 ce c5 5a e1 d8 55 d2 ......Y....Z..U. 0400 33 47 62 4c e5 bc c5 34 95 1f 63 96 67 d8 ea 7b 3GbL...4..c.g..{ 0410 ad 76 9e 7a 1d fd 2d 45 cf a2 ee 13 0c 94 7a a2 .v.z..-E......z. 0420 b4 84 b7 b4 ea 0f b2 74 87 c5 3e fc 38 0d 25 cd .......t..>.8.%. 0430 83 aa 68 4b 2b 46 77 b5 ef 02 e3 e5 57 1e c6 3d ..hK+Fw.....W..= 0440 87 ba 7e 43 89 76 78 47 9d 40 67 98 2f 8a 36 af ..~C.vxG.@g./.6. 0450 31 ac d9 d3 ab 5a 31 b1 b9 93 d5 ad 94 8b 57 59 1....Z1.......WY 0460 45 1b 99 8a da 8d fa ac 33 0b 0e fa 31 e2 12 83 E.......3...1... 0470 55 b1 9e b4 08 26 12 0d 8e 0f d5 25 a1 51 b0 be U....&.....%.Q.. 0480 04 ed 33 f6 4b 65 80 f3 e8 c5 a6 56 8d 81 d5 45 ..3.Ke.....V...E 0490 3d 79 53 40 e2 4d 17 88 3e 47 16 09 bd fd 64 9d =yS@.M..>G....d. 04a0 19 ab 23 d2 d3 a5 e1 97 c5 b5 d7 e8 b5 f5 df 80 ..#............. 04b0 77 a8 59 1d 54 c4 b4 04 d1 77 19 ee 91 20 fc ba w.Y.T....w... .. 04c0 40 d6 c3 60 6d 66 b1 ff 36 88 e2 95 0f 34 ea 29 @..`mf..6....4.) 04d0 6f 1d 8e 5e 2c be af 2c 55 1f 61 d0 5b 42 38 29 o..^,..,U.a.[B8) 04e0 c9 7e e6 aa 61 ae d0 41 67 06 2f 47 54 57 2a b2 .~..a..Ag./GTW*. 04f0 f5 f8 e8 e5 91 f2 1c 14 d4 99 83 a6 db 48 50 06 .............HP. 0500 a3 9a 98 93 8f a1 f1 36 95 0a dd c7 4e 57 9e 02 .......6....NW.. 0510 95 c9 49 e3 79 09 ce c9 fa 77 6a cf 88 45 d0 ec ..I.y....wj..E.. 0520 7a 72 e6 b1 a8 ca 8d 02 58 5a 76 1e f0 5c a8 4d zr......XZv..\.M 0530 d2 f1 9b eb 4e 56 3e 9c a1 4f 9b 38 68 a1 49 2c ....NV>..O.8h.I, 0540 7f 5d 0e 66 ae 6e 43 99 .].f.nC. Data […]: 345a49f84c8772484866a6dc3f0990319a6ab8c3013af6179295a74488065353c795468fc3ed1312f6901c0fb5dddba49864f8fac86e2804905b0a000cfae5142a65683e0eb3c425e82222545bc0e4262d3ee1aefc8978e226c2758d8b223edf22f0fa64786cb5a087cf285305175798ca3 [Length: 1352]