Frame 6248: 1074 bytes on wire (8592 bits), 1074 bytes captured (8592 bits) Encapsulation type: Ethernet (1) Arrival Time: Oct 21, 2017 05:02:27.485889000 UTC UTC Arrival Time: Oct 21, 2017 05:02:27.485889000 UTC Epoch Arrival Time: 1508562147.485889000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000018000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 634.172386000 seconds] Frame Number: 6248 Frame Length: 1074 bytes (8592 bits) Capture Length: 1074 bytes (8592 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: LinksysGroup_f8:1a:ac (00:04:5a:f8:1a:ac), Dst: ASUSTekCOMPU_6a:b2:1f (60:a4:4c:6a:b2:1f) Destination: ASUSTekCOMPU_6a:b2:1f (60:a4:4c:6a:b2:1f) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: LinksysGroup_f8:1a:ac (00:04:5a:f8:1a:ac) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 1] Internet Protocol Version 4, Src: 104.18.61.210, Dst: 10.0.1.95 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1060 Identification: 0x21b7 (8631) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x63da [validation disabled] [Header checksum status: Unverified] Source Address: 104.18.61.210 Destination Address: 10.0.1.95 [Source GeoIP: US, ASN 13335, CLOUDFLARENET] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP AS Number: 13335] [Source or Destination GeoIP AS Number: 13335] [Source GeoIP AS Organization: CLOUDFLARENET] [Source or Destination GeoIP AS Organization: CLOUDFLARENET] [Source GeoIP Latitude: 37.751] [Source or Destination GeoIP Latitude: 37.751] [Source GeoIP Longitude: -97.822] [Source or Destination GeoIP Longitude: -97.822] [Stream index: 41] Transmission Control Protocol, Src Port: 80, Dst Port: 61209, Seq: 61262, Ack: 366, Len: 1020 Source Port: 80 Destination Port: 61209 [Stream index: 176] [Stream Packet Number: 81] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1020] Sequence Number: 61262 (relative sequence number) Sequence Number (raw): 353726897 [Next Sequence Number: 62282 (relative sequence number)] Acknowledgment Number: 366 (relative ack number) Acknowledgment number (raw): 226089930 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x9149 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 0.876971000 seconds] [Time since previous frame in this TCP stream: 0.000018000 seconds] [SEQ/ACK analysis] [iRTT: 0.035158000 seconds] [Bytes in flight: 2480] [Bytes sent since last PSH flag: 2480] TCP payload (1020 bytes) Hypertext Transfer Protocol File Data: 1020 bytes Data (1020 bytes) 0000 72 65 2e 22 20 3a 20 22 68 74 74 70 3a 2f 2f 77 re." : "http://w 0010 77 77 2e 22 29 3b 0a 20 20 20 20 2f 2f 2d 2d 3e ww.");. //--> 0020 0a 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 .document.write( 0030 22 3c 73 63 22 2b 22 72 69 70 74 20 73 72 63 3d "" 0080 29 3b 3c 2f 73 63 72 69 70 74 3e 20 3c 6e 6f 73 );
< 00b0 61 20 74 69 74 6c 65 3d 22 77 65 62 20 61 6e 61 a title="web ana 00c0 6c 79 74 69 63 73 22 20 68 72 65 66 3d 22 68 74 lytics" href="ht 00d0 74 70 73 3a 2f 2f 73 74 61 74 63 6f 75 6e 74 65 tps://statcounte 00e0 72 2e 63 6f 6d 2f 22 3e 3c 69 6d 67 20 63 6c 61 r.com/">web 0140 20 61 6e 61 6c 79 74 69 63 73 22 20 2f 3e 3c 2f analytics
var m4lczf 01a0 74 72 63 30 79 74 65 68 73 67 2c 6d 34 6c 63 7a trc0ytehsg,m4lcz 01b0 66 74 72 63 30 79 74 65 68 73 67 5f 70 6f 6c 6c ftrc0ytehsg_poll 01c0 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 =function(){var 01d0 72 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 r=0;return funct 01e0 69 6f 6e 28 6e 2c 6c 29 7b 63 6c 65 61 72 49 6e ion(n,l){clearIn 01f0 74 65 72 76 61 6c 28 72 29 2c 72 3d 73 65 74 49 terval(r),r=setI 0200 6e 74 65 72 76 61 6c 28 6e 2c 6c 29 7d 7d 28 29 nterval(n,l)}}() 0210 3b 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e ;!function(e,t,n 0220 29 7b 69 66 28 65 2e 67 65 74 45 6c 65 6d 65 6e ){if(e.getElemen 0230 74 42 79 49 64 28 6e 29 29 7b 6d 34 6c 63 7a 66 tById(n)){m4lczf 0240 74 72 63 30 79 74 65 68 73 67 5f 70 6f 6c 6c 28 trc0ytehsg_poll( 0250 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 77 69 function(){if(wi 0260 6e 64 6f 77 5b 27 6f 6d 5f 6c 6f 61 64 65 64 27 ndow['om_loaded' 0270 5d 29 7b 69 66 28 21 6d 34 6c 63 7a 66 74 72 63 ]){if(!m4lczftrc 0280 30 79 74 65 68 73 67 29 7b 6d 34 6c 63 7a 66 74 0ytehsg){m4lczft 0290 72 63 30 79 74 65 68 73 67 3d 6e 65 77 20 4f 70 rc0ytehsg=new Op 02a0 74 69 6e 4d 6f 6e 73 74 65 72 41 70 70 28 29 3b tinMonsterApp(); 02b0 72 65 74 75 72 6e 20 6d 34 6c 63 7a 66 74 72 63 return m4lczftrc 02c0 30 79 74 65 68 73 67 2e 69 6e 69 74 28 7b 75 3a 0ytehsg.init({u: 02d0 22 34 30 30 36 2e 31 37 34 37 34 34 22 2c 73 74 "4006.174744",st 02e0 61 67 69 6e 67 3a 30 7d 29 3b 7d 7d 7d 2c 32 35 aging:0});}}},25 02f0 29 3b 72 65 74 75 72 6e 3b 7d 76 61 72 20 64 3d );return;}var d= 0300 66 61 6c 73 65 2c 6f 3d 65 2e 63 72 65 61 74 65 false,o=e.create 0310 45 6c 65 6d 65 6e 74 28 74 29 3b 6f 2e 69 64 3d Element(t);o.id= 0320 6e 2c 6f 2e 73 72 63 3d 22 2f 2f 61 2e 6f 70 74 n,o.src="//a.opt 0330 69 6e 6d 6f 6e 73 74 65 72 2e 63 6f 6d 2f 61 70 inmonster.com/ap 0340 70 2f 6a 73 2f 61 70 69 2e 6d 69 6e 2e 6a 73 22 p/js/api.min.js" 0350 2c 6f 2e 6f 6e 6c 6f 61 64 3d 6f 2e 6f 6e 72 65 ,o.onload=o.onre 0360 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 66 adystatechange=f 0370 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 64 29 unction(){if(!d) 0380 7b 69 66 28 21 74 68 69 73 2e 72 65 61 64 79 53 {if(!this.readyS 0390 74 61 74 65 7c 7c 74 68 69 73 2e 72 65 61 64 79 tate||this.ready 03a0 53 74 61 74 65 3d 3d 3d 22 6c 6f 61 64 65 64 22 State==="loaded" 03b0 7c 7c 74 68 69 73 2e 72 65 61 64 79 53 74 61 74 ||this.readyStat 03c0 65 3d 3d 3d 22 63 6f 6d 70 6c 65 74 65 22 29 7b e==="complete"){ 03d0 74 72 79 7b 64 3d 6f 6d 5f 6c 6f 61 64 65 64 3d try{d=om_loaded= 03e0 74 72 75 65 3b 6d 34 6c 63 7a 66 74 72 63 30 79 true;m4lczftrc0y 03f0 74 65 68 73 67 3d 6e 65 77 20 4f 70 tehsg=new Op Data […]: 72652e22203a2022687474703a2f2f7777772e22293b0a202020202f2f2d2d3e0a646f63756d656e742e777269746528223c7363222b2272697074207372633d2722202b73634a73486f7374202b2273746174636f756e7465722e636f6d2f636f756e7465722f636f756e7465722e6a732 [Length: 1020]