Frame 5902: 1050 bytes on wire (8400 bits), 1050 bytes captured (8400 bits) Encapsulation type: Ethernet (1) Arrival Time: Oct 21, 2017 05:02:06.067637000 UTC UTC Arrival Time: Oct 21, 2017 05:02:06.067637000 UTC Epoch Arrival Time: 1508562126.067637000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000006000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 612.754134000 seconds] Frame Number: 5902 Frame Length: 1050 bytes (8400 bits) Capture Length: 1050 bytes (8400 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: LinksysGroup_f8:1a:ac (00:04:5a:f8:1a:ac), Dst: ASUSTekCOMPU_6a:b2:1f (60:a4:4c:6a:b2:1f) Destination: ASUSTekCOMPU_6a:b2:1f (60:a4:4c:6a:b2:1f) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: LinksysGroup_f8:1a:ac (00:04:5a:f8:1a:ac) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 1] Internet Protocol Version 4, Src: 35.198.166.240, Dst: 10.0.1.95 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1036 Identification: 0x1b71 (7025) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x4566 [validation disabled] [Header checksum status: Unverified] Source Address: 35.198.166.240 Destination Address: 10.0.1.95 [Source GeoIP: Frankfurt am Main, DE, ASN 396982, GOOGLE-CLOUD-PLATFORM] [Source GeoIP City: Frankfurt am Main] [Source or Destination GeoIP City: Frankfurt am Main] [Source GeoIP Country: Germany] [Source or Destination GeoIP Country: Germany] [Source GeoIP ISO Two Letter Country Code: DE] [Source or Destination GeoIP ISO Two Letter Country Code: DE] [Source GeoIP AS Number: 396982] [Source or Destination GeoIP AS Number: 396982] [Source GeoIP AS Organization: GOOGLE-CLOUD-PLATFORM] [Source or Destination GeoIP AS Organization: GOOGLE-CLOUD-PLATFORM] [Source GeoIP Latitude: 50.1169] [Source or Destination GeoIP Latitude: 50.1169] [Source GeoIP Longitude: 8.6837] [Source or Destination GeoIP Longitude: 8.6837] [Stream index: 23] Transmission Control Protocol, Src Port: 80, Dst Port: 61115, Seq: 45669, Ack: 497, Len: 996 Source Port: 80 Destination Port: 61115 [Stream index: 172] [Stream Packet Number: 52] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 996] Sequence Number: 45669 (relative sequence number) Sequence Number (raw): 427083065 [Next Sequence Number: 46665 (relative sequence number)] Acknowledgment Number: 497 (relative ack number) Acknowledgment number (raw): 4216854217 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xf70b [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 0.868807000 seconds] [Time since previous frame in this TCP stream: 0.000006000 seconds] [SEQ/ACK analysis] [iRTT: 0.207659000 seconds] [Bytes in flight: 2456] [Bytes sent since last PSH flag: 2456] TCP payload (996 bytes) Hypertext Transfer Protocol […] s:_XWF�hÚ��L���H\021�\017\031������T\030��\002]S\026�ށt=�f�7߂\037���L�x��,\002���q\000�;(\017�9c��}u ��;��$\b0?\b\003.'W���-��\023A\000\177g�K\037 File Data: 883 bytes Data (883 bytes) 0000 16 6d f3 f7 42 5d 5d f9 80 b6 1d a9 cf 46 b9 66 .m..B]]......F.f 0010 64 d4 d9 40 97 28 4a 33 7e 4e b2 dd c4 cd b3 18 d..@.(J3~N...... 0020 f1 a3 d5 e5 64 47 59 cb 35 01 0a 49 4a 3d 0c 20 ....dGY.5..IJ=. 0030 ee f1 b8 62 16 64 ce 62 a3 8b 57 dd 45 ad 14 9a ...b.d.b..W.E... 0040 28 e2 ed 20 51 9b d0 c4 85 83 67 c7 bd d7 3a 3f (.. Q.....g...:? 0050 fb 75 4a 46 e3 37 71 c4 4d 81 9a ac 4a b3 b0 0e .uJF.7q.M...J... 0060 0f 26 83 7a 5e ac c9 ae d0 f2 94 25 c7 d1 49 7e .&.z^......%..I~ 0070 e8 76 9f 86 18 a2 33 ae 84 dc c9 4c 84 8b a5 ea .v....3....L.... 0080 86 91 ee 1d c5 eb cf 60 0a 5b 04 41 b8 34 b1 72 .......`.[.A.4.r 0090 7b f9 84 60 44 d3 bf d7 8e a9 00 31 bd 07 ce 52 {..`D......1...R 00a0 ca 6e 1f 7d 88 49 f3 f1 f4 95 4e d9 21 24 5f 15 .n.}.I....N.!$_. 00b0 cb 3e 30 ba c0 67 43 f4 5c 4f 0f dc a1 12 ed 0a .>0..gC.\O...... 00c0 ae 1b 5f 3c 7e b2 da 60 65 2e dd 2c b2 49 df 69 .._<~..`e..,.I.i 00d0 f5 ee 8f 83 4a 46 15 19 10 b5 f1 8b d7 da e8 78 ....JF.........x 00e0 cc 69 97 a6 55 a8 4a 98 6a 15 96 a4 44 64 ac a2 .i..U.J.j...Dd.. 00f0 e9 41 8f 3b 00 8a cd 43 5c 05 eb c1 fb 9e 5a ea .A.;...C\.....Z. 0100 21 2e 77 8a bf 05 f6 a2 c1 76 7d da 29 ce 19 e7 !.w......v}.)... 0110 0f d8 0e 94 b3 92 5c 9b 04 6c 62 04 db 7d 1e 13 ......\..lb..}.. 0120 bf 6b 44 2c a4 1c 50 ba 0f a5 b6 fd ea fb be 12 .kD,..P......... 0130 eb 92 47 bc 0d 51 6d ec 66 64 9e c1 18 0f 16 3f ..G..Qm.fd.....? 0140 61 95 67 fe 0c e7 fd 7e 6f 5e 39 8a c7 28 0d db a.g....~o^9..(.. 0150 53 41 5b ca 24 4a 8d e3 13 7b 55 ef 70 c6 53 44 SA[.$J...{U.p.SD 0160 6e dd 4d f6 6d 8f d1 3f 96 7c 65 da c6 70 6a 36 n.M.m..?.|e..pj6 0170 fd b6 43 73 38 b5 ff d8 40 b3 aa b0 a7 5a 61 35 ..Cs8...@....Za5 0180 50 d3 77 3d 5a 3e 8d 4f 56 36 b1 2e 2c f8 22 b3 P.w=Z>.OV6..,.". 0190 ff 54 38 1f 53 05 4d e9 a3 b8 8a 7b d1 d9 6a b8 .T8.S.M....{..j. 01a0 dd 4c a2 87 d4 35 8f 0a c0 38 69 84 a5 76 71 3d .L...5...8i..vq= 01b0 94 b3 aa ee 1a 88 cd 38 4b f1 62 80 1d 11 8d f3 .......8K.b..... 01c0 ee a9 0c 8b d2 f7 20 3f 60 fa 2e 85 7d 5b d2 72 ...... ?`...}[.r 01d0 eb 3c 7b 79 c5 79 b2 89 dd a3 d6 66 dc 5e b9 7a .<{y.y.....f.^.z 01e0 fc ae d9 1d 0d 31 92 5a dd 2f 08 d0 ad 97 d1 f9 .....1.Z./...... 01f0 7d 88 3d ed 06 e0 09 66 c3 81 c6 e0 87 5c 45 0c }.=....f.....\E. 0200 42 c5 b4 a0 72 c0 8f 19 56 16 26 4c c1 95 a3 d7 B...r...V.&L.... 0210 1e cf 49 62 fb 90 c9 c8 89 95 4f 03 55 1a 60 1d ..Ib......O.U.`. 0220 4b 3c a1 74 23 c2 55 e0 16 e7 d0 6d 34 9c ff 46 K<.t#.U....m4..F 0230 79 e5 3a 46 3e 5e 32 26 6e 68 3b 03 8c ee 8f 95 y.:F>^2&nh;..... 0240 23 31 71 d2 a5 38 54 6c 3f 15 3f d3 f0 1c 9c 64 #1q..8Tl?.?....d 0250 86 38 f9 3a 41 5b 09 6b 6e 28 fa 65 41 47 fa 5a .8.:A[.kn(.eAG.Z 0260 ee 19 35 0e a6 3a 3d 9d 06 22 5a b0 55 1a bd fb ..5..:=.."Z.U... 0270 f1 e8 5e 08 be 1e dd 80 6e a6 ff f8 59 a2 cd df ..^.....n...Y... 0280 ef 4c 83 db d0 91 b8 99 3f be 8e 75 2d b8 7c 27 .L......?..u-.|' 0290 e6 90 5a d1 6b 54 20 c2 e1 19 81 63 9c 9f 41 17 ..Z.kT ....c..A. 02a0 72 76 2a f0 51 4f 25 9d ef af 86 45 8a 0a 11 11 rv*.QO%....E.... 02b0 10 c9 2c bf bb d3 08 f6 7c 80 42 03 5d c8 1d 24 ..,.....|.B.]..$ 02c0 de 94 12 07 26 ec 3c b0 00 fd 73 f8 43 34 35 7e ....&.<...s.C45~ 02d0 53 81 2f 3e 89 8c 06 22 2a f9 e1 c6 7c d8 56 0c S./>..."*...|.V. 02e0 ed ef e3 34 20 bb f5 c0 15 45 5c 46 0a 59 72 05 ...4 ....E\F.Yr. 02f0 fc 8b 78 5c 93 95 99 4e 49 d3 3d 06 91 3f fa 6b ..x\...NI.=..?.k 0300 c9 d2 de ff ca ad 19 9f a4 8b be 20 7c 03 75 e8 ........... |.u. 0310 0c 7f 31 8d 4f 5e 8a 8f e2 9e 25 a7 fc 7d 5d e2 ..1.O^....%..}]. 0320 4f 5a 5b 44 bf 9a 3f 9e 20 09 99 a4 88 94 a0 72 OZ[D..?. ......r 0330 eb e9 0c b2 74 84 22 43 e0 da fb 0d f8 21 a8 5c ....t."C.....!.\ 0340 f1 9f 82 5e 27 c1 98 58 f5 58 23 79 71 c8 e9 e3 ...^'..X.X#yq... 0350 a4 fb c3 8e 7a bc 99 f4 97 59 78 a6 b3 bc 04 49 ....z....Yx....I 0360 3a fb 71 9f b9 91 6a 3e bc 52 a5 f8 da cc 4a d4 :.q...j>.R....J. 0370 79 97 b6 y.. Data […]: 166df3f7425d5df980b61da9cf46b96664d4d94097284a337e4eb2ddc4cdb318f1a3d5e5644759cb35010a494a3d0c20eef1b8621664ce62a38b57dd45ad149a28e2ed20519bd0c4858367c7bdd73a3ffb754a46e33771c44d819aac4ab3b00e0f26837a5eacc9aed0f29425c7d1497ee87 [Length: 883]