Frame 17: Packet, 1328 bytes on wire (10624 bits), 1328 bytes captured (10624 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 20, 2017 23:07:53.638962000 UTC UTC Arrival Time: Nov 20, 2017 23:07:53.638962000 UTC Epoch Arrival Time: 1511219273.638962000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 60.000 microseconds] [Time since reference or first frame: 1.469587000 seconds] Frame Number: 17 Frame Length: 1328 bytes (10624 bits) Capture Length: 1328 bytes (10624 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Cisco_57:9e:ab (00:05:32:57:9e:ab), Dst: Dell_ac:63:2a (00:15:c5:ac:63:2a) Destination: Dell_ac:63:2a (00:15:c5:ac:63:2a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_57:9e:ab (00:05:32:57:9e:ab) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 188.225.38.247, Dst: 192.168.1.121 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1314 Identification: 0x8457 (33879) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x0b85 [validation disabled] [Header checksum status: Unverified] Source Address: 188.225.38.247 Destination Address: 192.168.1.121 [Source GeoIP: RU] [Source GeoIP Country: Russia] [Source or Destination GeoIP Country: Russia] [Source GeoIP ISO Two Letter Country Code: RU] [Source or Destination GeoIP ISO Two Letter Country Code: RU] [Source GeoIP Latitude: 55.7386] [Source or Destination GeoIP Latitude: 55.7386] [Source GeoIP Longitude: 37.6068] [Source or Destination GeoIP Longitude: 37.6068] [Stream index: 1] Transmission Control Protocol, Src Port: 80, Dst Port: 49160, Seq: 4137, Ack: 822, Len: 1274 Source Port: 80 Destination Port: 49160 [Stream index: 1] [Stream Packet Number: 11] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1274] Sequence Number: 4137 (relative sequence number) Sequence Number (raw): 383186836 [Next Sequence Number: 5411 (relative sequence number)] Acknowledgment Number: 822 (relative ack number) Acknowledgment number (raw): 888253826 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x36c4 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 847.191000 milliseconds] [Time since previous frame in this TCP stream: 60.000 microseconds] [SEQ/ACK analysis] [iRTT: 192.228000 milliseconds] [Bytes in flight: 2862] [Bytes sent since last PSH flag: 1274] [Client Contiguous Streams: 1] [Server Contiguous Streams: 1] TCP payload (1274 bytes) Hypertext Transfer Protocol File Data: 1274 bytes Data (1274 bytes) 0000 31 30 30 30 0d 0a 46 34 e4 28 ac 89 25 a6 6e cf 1000..F4.(..%.n. 0010 c4 32 51 df 60 41 3c 98 f9 36 61 12 8a 5d 2c 73 .2Q.`A<..6a..],s 0020 fd 11 f7 66 9c 40 55 bf 7d 2a 52 f5 dc 2e 8a 9b ...f.@U.}*R..... 0030 6f b9 88 20 22 09 9d 94 28 20 aa de a2 b0 28 51 o.. "...( ....(Q 0040 78 53 81 58 c0 76 4b c9 85 4a 7a 97 c7 89 87 94 xS.X.vK..Jz..... 0050 1f 77 48 19 cf a0 df 65 35 63 f9 82 d8 70 62 51 .wH....e5c...pbQ 0060 7c 1c a7 bb b1 00 eb 3e 87 76 0b ae b4 0a 3a 31 |......>.v....:1 0070 2d 09 72 86 81 95 09 93 96 21 05 a3 b4 f5 0d 35 -.r......!.....5 0080 23 1d 58 45 5a 72 03 a3 55 4c 73 e2 6e e3 2d 2e #.XEZr..ULs.n.-. 0090 95 99 7f 13 c0 c6 62 e9 9b 8a c7 34 3c e4 69 04 ......b....4<.i. 00a0 df 21 4f be 49 8e fd 1e 9d c3 a4 5f 0c d8 6e c9 .!O.I......_..n. 00b0 8d 58 9a 21 52 c8 10 88 6f 2d 6b 38 bd 1b 62 2c .X.!R...o-k8..b, 00c0 4f d8 d0 d9 80 30 f3 15 a3 53 2c 35 1b 62 42 4c O....0...S,5.bBL 00d0 f8 62 1a af f5 24 34 31 01 69 26 77 e6 28 40 93 .b...$41.i&w.(@. 00e0 6a cc e4 c6 62 ba bb dc 49 c0 98 1b 39 e2 09 90 j...b...I...9... 00f0 ff 3e 95 1d cb 59 44 9e 46 24 4c c1 b0 02 f3 f1 .>...YD.F$L..... 0100 4d 0e 32 72 b5 6f 19 a0 bb d4 5f 08 44 31 4b 7d M.2r.o...._.D1K} 0110 67 ee 42 63 f5 7b dd 88 78 13 cd 32 a2 74 b8 6a g.Bc.{..x..2.t.j 0120 f2 bb bc ff 2d 96 89 31 27 e4 49 4c 3a f5 bc 6f ....-..1'.IL:..o 0130 2a 18 4f 75 c7 34 37 36 8f 48 9b a2 e4 db fd a2 *.Ou.476.H...... 0140 49 9c 6a 73 78 a4 d6 d6 bc 86 d1 8d 9e f5 d1 42 I.jsx..........B 0150 6f 19 c6 d2 f0 2d 11 62 5e 83 44 a7 b5 a5 c7 58 o....-.b^.D....X 0160 76 d7 cc 07 c0 07 35 bb 22 38 70 0c 39 95 44 53 v.....5."8p.9.DS 0170 dc d5 c0 e9 4d c1 43 c4 60 be b9 67 cd 72 04 fc ....M.C.`..g.r.. 0180 e8 4a b2 12 ff 0a 77 25 30 49 30 0c 6d 2e e9 97 .J....w%0I0.m... 0190 9e 10 63 a2 25 8c 2f 88 2c 43 77 d6 66 30 ab 73 ..c.%./.,Cw.f0.s 01a0 9f 0d fd 73 10 f6 48 00 dc 2a a1 63 c3 9d 3b 4d ...s..H..*.c..;M 01b0 7a ad 4b 4d 6e b8 af d5 1c e6 50 d4 09 05 3d 98 z.KMn.....P...=. 01c0 04 da d0 2d 48 50 61 06 51 0a 53 bb 68 44 ee c7 ...-HPa.Q.S.hD.. 01d0 dd 18 73 80 39 5c 92 6f 94 c4 43 17 cc 5a f7 dd ..s.9\.o..C..Z.. 01e0 1c 88 24 ac 0b 52 36 06 a3 d9 62 70 57 f5 86 c4 ..$..R6...bpW... 01f0 89 56 51 78 c5 d9 95 f5 c0 dd 7d 8b 44 77 4b fd .VQx......}.DwK. 0200 2c 13 20 0c e4 4b 76 32 88 e4 11 34 9f 74 8e 38 ,. ..Kv2...4.t.8 0210 8c ce e6 9a dc 20 af c4 fc d6 d2 3d e3 a9 35 5d ..... .....=..5] 0220 6e 11 23 f4 cf 40 81 3a ca 48 01 9f d8 47 89 61 n.#..@.:.H...G.a 0230 a9 64 85 8a 41 88 e1 8e ab 03 09 30 8a ec 1c 53 .d..A......0...S 0240 99 cf 65 64 42 f8 65 99 0c 97 00 6b ee 3e 97 b4 ..edB.e....k.>.. 0250 84 04 01 15 e3 a9 67 74 f3 dc d3 73 23 1f a2 9c ......gt...s#... 0260 16 ee 79 d6 54 8c 74 62 21 8c 23 41 19 e4 4e c2 ..y.T.tb!.#A..N. 0270 2c 01 83 89 5e 1f 53 45 94 c9 a0 2c 96 cf bb 4f ,...^.SE...,...O 0280 96 c6 ec a8 7b 33 68 77 4b 97 6e 84 98 b1 45 ae ....{3hwK.n...E. 0290 28 9d 1f 4b 39 c7 fd f7 18 58 7d c4 f1 21 e6 0e (..K9....X}..!.. 02a0 47 b8 12 b3 3d d1 b2 96 7b 33 04 df fa 07 37 a8 G...=...{3....7. 02b0 b9 a5 32 e3 eb 44 f7 be e5 9d 91 bf 05 38 df 64 ..2..D.......8.d 02c0 72 a3 ce 23 e7 23 34 2d b7 96 be 71 bd 62 d6 29 r..#.#4-...q.b.) 02d0 9e 1f bf 21 ed 6d a1 d3 bd f5 78 73 2e ef 17 05 ...!.m....xs.... 02e0 83 95 a4 98 93 19 b9 e5 df ae 53 c5 e3 ba 30 9d ..........S...0. 02f0 12 fa 21 df c4 65 b1 d4 68 44 8d 1b 6e c5 83 8c ..!..e..hD..n... 0300 78 8a c7 bd 99 8e 6f 48 30 bc 37 12 b7 0c 77 e4 x.....oH0.7...w. 0310 d0 dc 16 68 3f ee 26 74 8b 23 6e d3 8d 6c ed b7 ...h?.&t.#n..l.. 0320 2b 48 b1 74 ce f8 f7 b6 f8 b6 90 e8 de dd a0 c3 +H.t............ 0330 8c 70 20 f7 f9 f9 f8 6a 7e 20 be ba 85 6f 16 95 .p ....j~ ...o.. 0340 6f ae e6 6d c5 25 c8 4b 05 e4 8b 69 52 18 35 45 o..m.%.K...iR.5E 0350 3d 84 6e 49 2c da 8a 8c c1 7d 68 17 ac da 44 56 =.nI,....}h...DV 0360 ed ce 5c c6 1c 9b 5b 14 11 b9 46 77 91 43 10 58 ..\...[...Fw.C.X 0370 c4 f3 00 a9 fb 98 e7 c6 bc 7b e3 34 89 98 17 79 .........{.4...y 0380 7b 37 93 19 25 fb 7f 9f 33 0b 17 4b e2 71 f8 fd {7..%...3..K.q.. 0390 dc 3e ee 3d cb db 52 f1 2e 5a a8 8d 48 1d 59 d3 .>.=..R..Z..H.Y. 03a0 b8 d7 76 73 1f 6f b1 d4 9d eb 1a 63 71 e8 5f b8 ..vs.o.....cq._. 03b0 b1 86 7e 1f 4e c7 56 95 bf 5d c7 d4 23 8c 62 c9 ..~.N.V..]..#.b. 03c0 3b 2e c4 4a 5f 6e 94 8d e9 71 bc 0a 24 ee 54 46 ;..J_n...q..$.TF 03d0 79 d3 df bb f9 bf 8b d5 63 fe c7 5d 5c 1b 06 ca y.......c..]\... 03e0 4e 14 09 df 54 69 72 83 df 5b f6 e2 b6 d8 78 03 N...Tir..[....x. 03f0 b1 58 c8 73 8e ad 1d c6 7d 99 6f 54 3a 72 2c 53 .X.s....}.oT:r,S 0400 77 90 12 86 e9 f1 70 e9 1e c8 43 a3 11 0f 8e ee w.....p...C..... 0410 17 89 a3 48 78 1c a9 52 e4 f4 c5 17 be 62 82 15 ...Hx..R.....b.. 0420 88 b6 9e dd 45 1c bd ae 24 e9 69 72 6f 6b ee 81 ....E...$.irok.. 0430 79 d4 fe d6 2d 33 f4 4d 10 a1 65 1e f6 38 ca a4 y...-3.M..e..8.. 0440 f0 8e 0f 3a 5e 51 b4 4b 73 1b 1b 1d b3 f7 97 c8 ...:^Q.Ks....... 0450 38 05 7e 51 8a eb 24 4c f7 36 25 6d c7 75 97 e6 8.~Q..$L.6%m.u.. 0460 a9 11 61 11 ed f8 37 be 78 ac 24 22 56 40 72 23 ..a...7.x.$"V@r# 0470 ce 33 3d ad a8 92 69 78 ab 06 2a 05 0d c7 23 ba .3=...ix..*...#. 0480 aa 15 c5 0c 74 bc a6 09 59 b7 c0 a8 96 6d 37 db ....t...Y....m7. 0490 d0 69 56 4b 3b 9a 51 96 83 be 50 c4 ae d0 3c c4 .iVK;.Q...P...<. 04a0 ab 18 be f1 d4 f5 fa 15 08 13 8e f9 0e ca 57 a1 ..............W. 04b0 d5 15 49 cc 1d e9 d0 0e 6e fa 6f a7 9a 70 b4 da ..I.....n.o..p.. 04c0 7b a9 e4 6e dd 96 ed 4f c1 22 39 9f 5c 4d d2 b1 {..n...O."9.\M.. 04d0 a8 38 6e 51 bf 5d 1e 8b 57 ac c0 e1 0b 6c 5f f7 .8nQ.]..W....l_. 04e0 74 69 84 42 06 8f 4a 73 6d 72 0b 39 25 e7 2f 33 ti.B..Jsmr.9%./3 04f0 6a b3 dd 4c b4 62 17 66 ee 83 j..L.b.f.. Data […]: 313030300d0a4634e428ac8925a66ecfc43251df60413c98f93661128a5d2c73fd11f7669c4055bf7d2a52f5dc2e8a9b6fb9882022099d942820aadea2b0285178538158c0764bc9854a7a97c78987941f774819cfa0df653563f982d87062517c1ca7bbb100eb3e87760baeb40a3a312d0 [Length: 1274]