Frame 2497: Packet, 253 bytes on wire (2024 bits), 253 bytes captured (2024 bits) Encapsulation type: Ethernet (1) Arrival Time: Oct 21, 2017 04:55:15.674545000 UTC UTC Arrival Time: Oct 21, 2017 04:55:15.674545000 UTC Epoch Arrival Time: 1508561715.674545000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 3.000 microseconds] [Time since reference or first frame: 3 minutes, 22.361042000 seconds] Frame Number: 2497 Frame Length: 253 bytes (2024 bits) Capture Length: 253 bytes (2024 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: LinksysGroup_f8:1a:ac (00:04:5a:f8:1a:ac), Dst: ASUSTekCOMPU_6a:b2:1f (60:a4:4c:6a:b2:1f) Destination: ASUSTekCOMPU_6a:b2:1f (60:a4:4c:6a:b2:1f) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: LinksysGroup_f8:1a:ac (00:04:5a:f8:1a:ac) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 1] Internet Protocol Version 4, Src: 35.198.166.240, Dst: 10.0.1.95 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 239 Identification: 0x110d (4365) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x52e7 [validation disabled] [Header checksum status: Unverified] Source Address: 35.198.166.240 Destination Address: 10.0.1.95 [Source GeoIP: Mountain View, US] [Source GeoIP City: Mountain View] [Source or Destination GeoIP City: Mountain View] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP Latitude: 37.4043] [Source or Destination GeoIP Latitude: 37.4043] [Source GeoIP Longitude: -122.0748] [Source or Destination GeoIP Longitude: -122.0748] [Stream index: 23] Transmission Control Protocol, Src Port: 80, Dst Port: 63963, Seq: 250645, Ack: 465, Len: 199 Source Port: 80 Destination Port: 63963 [Stream index: 70] [Stream Packet Number: 209] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 199] Sequence Number: 250645 (relative sequence number) Sequence Number (raw): 4249576867 [Next Sequence Number: 250845 (relative sequence number)] Acknowledgment Number: 465 (relative ack number) Acknowledgment number (raw): 977245852 0101 .... = Header Length: 20 bytes (5) Flags: 0x019 (FIN, PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...1 = Fin: Set [Expert Info (Chat/Sequence): Connection finish (FIN)] [Connection finish (FIN)] [Severity level: Chat] [Group: Sequence] [TCP Flags: ·······AP··F] [Expert Info (Note/Sequence): This frame initiates the connection closing] [This frame initiates the connection closing] [Severity level: Note] [Group: Sequence] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x0bd1 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 1.643734000 seconds] [Time since previous frame in this TCP stream: 3.000 microseconds] [SEQ/ACK analysis] [iRTT: 166.347000 milliseconds] [Bytes in flight: 3119] [Bytes sent since last PSH flag: 7499] [Client Contiguous Streams: 1] [Server Contiguous Streams: 12] TCP payload (199 bytes) Hypertext Transfer Protocol File Data: 199 bytes Data (199 bytes) 0000 5a c9 e0 e2 5d d3 0d 05 a3 94 59 d8 8e 82 df be Z...].....Y..... 0010 09 9b 9e 34 ff 68 a2 94 d1 19 df 9c 91 88 96 2f ...4.h........./ 0020 10 64 32 41 c6 8c 2c 5c 15 3b 38 fd 05 83 a4 37 .d2A..,\.;8....7 0030 52 18 5f b8 db 78 f6 66 2c 54 11 64 50 4d ff e6 R._..x.f,T.dPM.. 0040 cf db c2 df 75 fd 1c e6 ab 1a 03 7b d2 e4 05 70 ....u......{...p 0050 6c dd ba 25 9d 1a f9 48 e6 88 9f 25 ed dc 82 82 l..%...H...%.... 0060 fa f3 cc ad a0 86 3e 51 43 13 4e b5 a1 56 ad 05 ......>QC.N..V.. 0070 48 5b fb 49 33 3d 22 d8 ff 93 86 49 20 de 47 62 H[.I3="....I .Gb 0080 8c 40 17 ff 63 0b 91 ee a8 09 58 07 bc 91 56 30 .@..c.....X...V0 0090 0e 86 bb af f6 9a 6f db 35 75 b5 85 0c 5a 19 ff ......o.5u...Z.. 00a0 84 58 82 30 30 c0 e5 01 5c 9c d8 1e 77 49 f2 b0 .X.00...\...wI.. 00b0 2d 38 79 ee c9 04 b8 07 35 9a b2 71 1f b3 8c 0b -8y.....5..q.... 00c0 cd ec a8 81 10 b9 d6 ....... Data […]: 5ac9e0e25dd30d05a39459d88e82dfbe099b9e34ff68a294d119df9c9188962f10643241c68c2c5c153b38fd0583a43752185fb8db78f6662c541164504dffe6cfdbc2df75fd1ce6ab1a037bd2e405706cddba259d1af948e6889f25eddc8282faf3ccada0863e5143134eb5a156ad05485 [Length: 199]