Frame 186: Packet, 1328 bytes on wire (10624 bits), 1328 bytes captured (10624 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 20, 2017 23:07:56.874003000 UTC UTC Arrival Time: Nov 20, 2017 23:07:56.874003000 UTC Epoch Arrival Time: 1511219276.874003000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 165.000 microseconds] [Time since reference or first frame: 4.704628000 seconds] Frame Number: 186 Frame Length: 1328 bytes (10624 bits) Capture Length: 1328 bytes (10624 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Cisco_57:9e:ab (00:05:32:57:9e:ab), Dst: Dell_ac:63:2a (00:15:c5:ac:63:2a) Destination: Dell_ac:63:2a (00:15:c5:ac:63:2a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_57:9e:ab (00:05:32:57:9e:ab) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 188.225.38.247, Dst: 192.168.1.121 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1314 Identification: 0x84bc (33980) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x0b20 [validation disabled] [Header checksum status: Unverified] Source Address: 188.225.38.247 Destination Address: 192.168.1.121 [Source GeoIP: RU] [Source GeoIP Country: Russia] [Source or Destination GeoIP Country: Russia] [Source GeoIP ISO Two Letter Country Code: RU] [Source or Destination GeoIP ISO Two Letter Country Code: RU] [Source GeoIP Latitude: 55.7386] [Source or Destination GeoIP Latitude: 55.7386] [Source GeoIP Longitude: 37.6068] [Source or Destination GeoIP Longitude: 37.6068] [Stream index: 1] Transmission Control Protocol, Src Port: 80, Dst Port: 49163, Seq: 25760, Ack: 854, Len: 1274 Source Port: 80 Destination Port: 49163 [Stream index: 4] [Stream Packet Number: 36] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1274] Sequence Number: 25760 (relative sequence number) Sequence Number (raw): 1660938516 [Next Sequence Number: 27034 (relative sequence number)] Acknowledgment Number: 854 (relative ack number) Acknowledgment number (raw): 2973651637 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x812f [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 1.298026000 seconds] [Time since previous frame in this TCP stream: 165.000 microseconds] [SEQ/ACK analysis] [iRTT: 281.530000 milliseconds] [Bytes in flight: 1274] [Bytes sent since last PSH flag: 1274] [Client Contiguous Streams: 1] [Server Contiguous Streams: 1] TCP payload (1274 bytes) Hypertext Transfer Protocol File Data: 1274 bytes Data (1274 bytes) 0000 23 f9 a5 d6 ad c7 f6 16 b0 4f 12 29 44 ea b2 a0 #........O.)D... 0010 a9 7f 4c 44 52 e3 14 28 a6 4c 0c 2b d4 be 90 17 ..LDR..(.L.+.... 0020 93 63 b4 e2 d6 08 93 42 9d 62 3a b5 c0 1c 49 b9 .c.....B.b:...I. 0030 a3 98 c3 cb f8 31 65 b1 50 01 8f 33 72 8c 7a 59 .....1e.P..3r.zY 0040 91 9e 19 0b 0e ef 16 e9 f5 c6 f5 5c 77 24 c7 1f ...........\w$.. 0050 50 98 56 1b f0 86 15 11 1e 65 c6 c2 16 70 7a f3 P.V......e...pz. 0060 b9 4d 6a 45 78 de 71 d9 e0 f8 8f fa 9e 66 c8 38 .MjEx.q......f.8 0070 97 a0 27 2b 44 42 49 14 e3 05 e1 d6 f9 00 16 ea ..'+DBI......... 0080 1c 51 25 8a 1f 98 89 35 50 64 82 2c ff b1 6a d4 .Q%....5Pd.,..j. 0090 ca ca 81 3b 6e 6b 3e 19 9e 23 ba 4f 29 3f dc 09 ...;nk>..#.O)?.. 00a0 81 db 89 76 1b 28 14 3b 7d b6 20 d7 24 7f 4c 8a ...v.(.;}. .$.L. 00b0 f7 71 40 15 99 0e 2b 9c 35 6b 27 5a f7 f3 77 0a .q@...+.5k'Z..w. 00c0 06 db 7a 77 04 e2 41 18 55 32 99 df e3 3e 9b be ..zw..A.U2...>.. 00d0 b0 7d 9b 37 2d 61 25 fb 0c f3 37 c1 40 83 ce c1 .}.7-a%...7.@... 00e0 d0 b8 a4 ef 76 d6 3e 6e 59 05 53 5b 82 d9 8b 56 ....v.>nY.S[...V 00f0 13 5e a3 96 50 2c 1b a8 15 4d a2 2f fe 75 e7 75 .^..P,...M./.u.u 0100 b3 24 75 4f 77 3f 3b 20 d6 8f 02 c3 86 b7 c8 4d .$uOw?; .......M 0110 b0 14 f2 84 f0 ea ce bb 9c 66 84 a6 01 b1 d0 ea .........f...... 0120 26 3a 6d 54 22 9b a3 b9 0f e8 c4 68 d3 77 3a bc &:mT"......h.w:. 0130 62 e7 67 9e 34 9c 2f 05 71 43 b9 67 9f 40 ce 1b b.g.4./.qC.g.@.. 0140 ed 13 b6 14 53 b9 17 f7 f2 aa 33 3f 6e 55 45 d2 ....S.....3?nUE. 0150 bb 7e e7 4b 02 ee 5b 5e 4a 2d 24 76 c1 1c ef 32 .~.K..[^J-$v...2 0160 e7 29 26 b4 5d 53 9d 37 e7 fc 80 d9 47 b4 08 80 .)&.]S.7....G... 0170 78 07 3b fb bb c9 84 81 b5 1a 7d c5 0e 5a 84 9c x.;.......}..Z.. 0180 96 6c ec 78 41 f3 a6 c3 02 ea fd c9 62 de be af .l.xA.......b... 0190 73 83 f8 bd fb a5 6c 36 e9 c7 fd 88 cb ee ff c6 s.....l6........ 01a0 21 40 61 03 3d ba 45 fd 3d ad 39 60 1c 0f 14 ab !@a.=.E.=.9`.... 01b0 b2 6c 02 b1 bb 10 6b a3 d0 b9 68 49 56 fc f6 4e .l....k...hIV..N 01c0 d4 63 7c b9 61 1c f2 33 63 de ee 61 53 2d 97 07 .c|.a..3c..aS-.. 01d0 45 aa 48 98 cc 1b 70 07 92 87 41 0a 54 3b 20 4e E.H...p...A.T; N 01e0 cf f5 ac 63 b1 20 65 b1 b3 00 fc 90 27 45 0c cb ...c. e.....'E.. 01f0 e6 a8 68 9e e9 38 06 87 77 90 85 35 b5 24 a5 cf ..h..8..w..5.$.. 0200 a7 f3 6f cd 4b 90 6e 4b 82 3e cc fe d5 64 31 de ..o.K.nK.>...d1. 0210 35 b2 92 75 ee e1 d7 59 b1 49 35 43 03 91 06 b2 5..u...Y.I5C.... 0220 27 6e 31 fb 74 a9 5c 65 63 4f 76 24 4c da 14 e5 'n1.t.\ecOv$L... 0230 5a 90 67 c6 a7 d4 87 82 f0 ef 0f bb 26 a6 7b 59 Z.g.........&.{Y 0240 c2 7a e4 b5 aa d8 4c a3 81 23 61 78 9d 99 cb 0c .z....L..#ax.... 0250 c8 30 1e b8 16 3b 18 4c 69 d7 35 01 68 d3 fe bb .0...;.Li.5.h... 0260 a4 67 93 73 b5 55 18 6f 69 ad 6d 0c 1a b0 cc 32 .g.s.U.oi.m....2 0270 54 12 19 9e 31 68 04 15 5b 65 84 45 de 89 4b b5 T...1h..[e.E..K. 0280 0f 89 ad 30 7b e5 5f 94 30 4d f2 62 86 ed 2f 15 ...0{._.0M.b../. 0290 b2 16 1a 78 92 92 27 3a 3d 64 33 f4 17 11 7d 4d ...x..':=d3...}M 02a0 27 3d 9d b3 ca cc fc a6 67 38 25 23 74 43 15 0d '=......g8%#tC.. 02b0 05 bc 79 cd a4 6f 7a fb 82 4f e4 da 57 01 b2 e3 ..y..oz..O..W... 02c0 55 9f 17 9d 9a 36 5e e2 17 a3 d5 1f 22 18 c9 f4 U....6^....."... 02d0 4d 19 d2 06 82 05 73 71 46 25 1d 46 db 32 31 35 M.....sqF%.F.215 02e0 de f0 1a 08 15 f5 95 bf ee 23 9a f6 05 47 4c 34 .........#...GL4 02f0 e1 a9 c8 83 e0 ee 63 7c 46 9c c1 88 d6 20 23 55 ......c|F.... #U 0300 ff 36 87 94 aa 9c 9a 8f 33 8e 60 4b b1 59 0f 82 .6......3.`K.Y.. 0310 a6 e8 52 91 c9 49 39 0d 63 0c d4 60 f2 3f b3 4a ..R..I9.c..`.?.J 0320 d7 ec 11 40 ee 37 b8 9d 89 2f 7b 22 8f ac 37 cf ...@.7.../{"..7. 0330 96 5b 4c 03 ae e7 c7 33 66 29 3c d5 74 43 02 d3 .[L....3f)<.tC.. 0340 1c 33 b8 3b 10 be a0 3f c8 b2 b3 13 70 3a 9f fc .3.;...?....p:.. 0350 16 89 c2 00 2d 5b dc 88 a9 b4 cc 07 8d 92 4d fa ....-[........M. 0360 62 d0 60 96 f7 e6 97 92 8b ab 31 9e 17 38 d4 85 b.`.......1..8.. 0370 80 e2 58 8a 40 7f 10 8b 76 b6 e4 be 7f eb 8e b7 ..X.@...v....... 0380 52 2e f5 c4 5f 12 c6 eb a1 c0 89 f2 87 5b f4 cd R..._........[.. 0390 88 aa 66 63 c3 6c 0e f0 1a 86 09 18 74 26 8c 6c ..fc.l......t&.l 03a0 68 69 3e ce 77 19 d2 dc 0a d6 ed 30 72 65 3a f6 hi>.w......0re:. 03b0 01 5d dd 7f b8 1d 38 f1 08 7c 88 ff ba 38 b8 3f .]....8..|...8.? 03c0 24 73 34 d2 9c a0 80 df 3d 07 f3 07 aa 27 22 46 $s4.....=....'"F 03d0 36 d0 7e 8f 88 a5 88 1f ff 2f e8 47 d6 34 59 6b 6.~....../.G.4Yk 03e0 6d c4 61 57 95 05 34 fb 8e 63 06 7c a5 c2 d6 63 m.aW..4..c.|...c 03f0 c4 7d b0 85 e5 49 6c cb 0e de 3e f1 74 6d 1c 08 .}...Il...>.tm.. 0400 19 c3 98 08 04 d0 ee 2d 52 82 40 0f 2c 54 52 74 .......-R.@.,TRt 0410 5d 15 6b f6 9c 65 ff b7 c0 5a 4f 5c aa 9e d4 67 ].k..e...ZO\...g 0420 15 b2 46 27 c2 a1 b0 5a d5 d9 f0 bf cb e8 b2 d5 ..F'...Z........ 0430 b3 80 2f 97 1b 2d 26 83 0a 11 db 5c 24 36 b2 1e ../..-&....\$6.. 0440 be c2 f8 82 f8 ff e7 4a 7e 80 0a 55 02 4b 58 1d .......J~..U.KX. 0450 38 9a 4d 94 60 a5 30 9c 51 16 55 86 8b f0 5a 7a 8.M.`.0.Q.U...Zz 0460 de 45 1e 76 d8 f2 40 27 da 21 64 2a 01 92 73 e4 .E.v..@'.!d*..s. 0470 84 7d 3a 20 38 33 95 56 37 94 27 70 64 be b2 37 .}: 83.V7.'pd..7 0480 ad 67 dc bd 77 c7 fc f2 ab 1a 9d 73 95 4f 2b b3 .g..w......s.O+. 0490 27 e4 ad 49 4e 4e 02 e4 bf 3e aa ca 37 3c 8b 3b '..INN...>..7<.; 04a0 a8 24 fa 62 0c fa 65 13 72 bd fb 8d 71 57 e2 a1 .$.b..e.r...qW.. 04b0 ce 13 56 d4 de 14 29 15 66 f7 cc f2 c4 a4 f7 c5 ..V...).f....... 04c0 fd 9a 8e 6b f1 f7 e6 3f 54 f1 4c 8e fe 3b 79 b2 ...k...?T.L..;y. 04d0 26 e5 86 26 b5 9d 58 e0 49 c0 8f ac 06 3f 40 57 &..&..X.I....?@W 04e0 9d fe fb de c7 83 ac 27 33 c3 6b cd 25 f8 5b 5c .......'3.k.%.[\ 04f0 39 13 a9 05 b4 8b f1 63 aa d0 9......c.. Data […]: 23f9a5d6adc7f616b04f122944eab2a0a97f4c4452e31428a64c0c2bd4be90179363b4e2d60893429d623ab5c01c49b9a398c3cbf83165b150018f33728c7a59919e190b0eef16e9f5c6f55c7724c71f5098561bf08615111e65c6c216707af3b94d6a4578de71d9e0f88ffa9e66c83897a [Length: 1274]