Frame 3594: Packet, 1282 bytes on wire (10256 bits), 1282 bytes captured (10256 bits) Encapsulation type: Ethernet (1) Arrival Time: Oct 21, 2017 04:55:49.963365000 UTC UTC Arrival Time: Oct 21, 2017 04:55:49.963365000 UTC Epoch Arrival Time: 1508561749.963365000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 78.250000 milliseconds] [Time since reference or first frame: 3 minutes, 56.649862000 seconds] Frame Number: 3594 Frame Length: 1282 bytes (10256 bits) Capture Length: 1282 bytes (10256 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: LinksysGroup_f8:1a:ac (00:04:5a:f8:1a:ac), Dst: ASUSTekCOMPU_6a:b2:1f (60:a4:4c:6a:b2:1f) Destination: ASUSTekCOMPU_6a:b2:1f (60:a4:4c:6a:b2:1f) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: LinksysGroup_f8:1a:ac (00:04:5a:f8:1a:ac) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 1] Internet Protocol Version 4, Src: 35.198.166.240, Dst: 10.0.1.95 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1268 Identification: 0x1495 (5269) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x4b5a [validation disabled] [Header checksum status: Unverified] Source Address: 35.198.166.240 Destination Address: 10.0.1.95 [Source GeoIP: Mountain View, US] [Source GeoIP City: Mountain View] [Source or Destination GeoIP City: Mountain View] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP Latitude: 37.4043] [Source or Destination GeoIP Latitude: 37.4043] [Source GeoIP Longitude: -122.0748] [Source or Destination GeoIP Longitude: -122.0748] [Stream index: 23] Transmission Control Protocol, Src Port: 80, Dst Port: 56621, Seq: 174377, Ack: 497, Len: 1228 Source Port: 80 Destination Port: 56621 [Stream index: 93] [Stream Packet Number: 173] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1228] Sequence Number: 174377 (relative sequence number) Sequence Number (raw): 1516335174 [Next Sequence Number: 175605 (relative sequence number)] Acknowledgment Number: 497 (relative ack number) Acknowledgment number (raw): 1599680301 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x4c99 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 1.327336000 seconds] [Time since previous frame in this TCP stream: 78.250000 milliseconds] [SEQ/ACK analysis] [iRTT: 155.415000 milliseconds] [TCP Analysis Flags] [Expert Info (Warning/Sequence): Previous segment(s) not captured (common at capture start)] [Previous segment(s) not captured (common at capture start)] [Severity level: Warning] [Group: Sequence] [Client Contiguous Streams: 1] [Server Contiguous Streams: 6] TCP payload (1228 bytes) Hypertext Transfer Protocol File Data: 1228 bytes Data (1228 bytes) 0000 62 e7 77 b3 0c 52 27 4b 5b 2e b1 e5 8c 55 fb f3 b.w..R'K[....U.. 0010 e5 6f 73 38 c7 d4 f3 d8 d8 c7 44 06 d6 97 75 77 .os8......D...uw 0020 3a 00 8a 99 86 fb 81 16 4a e5 62 b1 94 9a e7 2f :.......J.b..../ 0030 ff ee cb 36 6e b3 19 78 21 38 74 50 ef 4d 4a 72 ...6n..x!8tP.MJr 0040 53 9d 40 e6 8b 28 09 85 28 e6 90 f8 55 d9 36 4e S.@..(..(...U.6N 0050 b0 ff 03 be f7 c4 8d df 50 5b 97 61 c5 bb 2e 43 ........P[.a...C 0060 da 69 fd 38 94 f1 03 06 b2 de b9 e5 14 6a b5 ad .i.8.........j.. 0070 39 ab 81 76 ca 86 9d 8b ee fb cb 5f fc b5 8b bd 9..v......._.... 0080 58 1b 2c 17 2d bb 66 8b 6c de c1 23 30 2a 1c 86 X.,.-.f.l..#0*.. 0090 4a 8a af 2e b9 15 af 95 ea 4e fa f3 a1 8d e4 35 J........N.....5 00a0 72 71 fa 72 08 6e 7d 98 e0 86 8c 38 b5 f7 b2 ed rq.r.n}....8.... 00b0 c4 aa 6f 59 df 48 fa da ec cf 84 3e 31 a0 be 22 ..oY.H.....>1.." 00c0 64 20 8a 67 49 06 2f bb 49 23 94 95 db 02 62 0d d .gI./.I#....b. 00d0 e4 f2 ab ac 61 6c 72 52 34 ec 8a 8b 28 22 32 f4 ....alrR4...("2. 00e0 b4 0e 0b e6 d7 e3 a1 45 24 c0 40 18 4e 81 7f 10 .......E$.@.N... 00f0 5b b1 4a 26 97 ef 8f dd 42 d5 d4 d1 2d 8b 6a 2c [.J&....B...-.j, 0100 8c 76 fe 36 03 2f 2a 91 2b 0f 6f 26 52 59 a1 cc .v.6./*.+.o&RY.. 0110 9c cd 77 83 fd 15 86 c0 bc b7 5b 6b 1b 3e 37 54 ..w.......[k.>7T 0120 ff 61 6a ff 53 68 93 4e 87 78 fc be 97 43 2c 27 .aj.Sh.N.x...C,' 0130 33 3f d0 97 4e 2d 11 d4 54 01 47 f4 ca 0c 6f 05 3?..N-..T.G...o. 0140 2a b4 a2 da 8e e0 7a 8b c0 9c 0e f2 ab d5 ee c3 *.....z......... 0150 da 34 d9 49 e4 fd 7d b3 6e b4 db 60 8c 42 9b 87 .4.I..}.n..`.B.. 0160 ee df ae 68 87 0a 2e f1 70 9b db b0 d1 b2 47 15 ...h....p.....G. 0170 46 f3 fc 8f d6 7e 60 97 d0 48 72 52 98 79 f1 af F....~`..HrR.y.. 0180 c7 a8 fb 80 57 56 a9 27 3c 4f ac 63 9d c6 f6 0f ....WV.'.... 0490 cd de dc 7b 65 89 7e b9 4a c3 62 cf 2c 25 4a f1 ...{e.~.J.b.,%J. 04a0 a9 f5 b1 c2 22 45 32 41 95 94 7c b6 a1 09 af 59 ...."E2A..|....Y 04b0 ec 3c 4d 4d fa 1c 4f be b0 8a 9b 8b 94 36 65 80 .