Frame 383: Packet, 1328 bytes on wire (10624 bits), 1328 bytes captured (10624 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 20, 2017 23:07:57.575392000 UTC UTC Arrival Time: Nov 20, 2017 23:07:57.575392000 UTC Epoch Arrival Time: 1511219277.575392000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 5.000 microseconds] [Time since reference or first frame: 5.406017000 seconds] Frame Number: 383 Frame Length: 1328 bytes (10624 bits) Capture Length: 1328 bytes (10624 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Cisco_57:9e:ab (00:05:32:57:9e:ab), Dst: Dell_ac:63:2a (00:15:c5:ac:63:2a) Destination: Dell_ac:63:2a (00:15:c5:ac:63:2a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_57:9e:ab (00:05:32:57:9e:ab) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 188.225.38.247, Dst: 192.168.1.121 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1314 Identification: 0x8549 (34121) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x0a93 [validation disabled] [Header checksum status: Unverified] Source Address: 188.225.38.247 Destination Address: 192.168.1.121 [Source GeoIP: RU] [Source GeoIP Country: Russia] [Source or Destination GeoIP Country: Russia] [Source GeoIP ISO Two Letter Country Code: RU] [Source or Destination GeoIP ISO Two Letter Country Code: RU] [Source GeoIP Latitude: 55.7386] [Source or Destination GeoIP Latitude: 55.7386] [Source GeoIP Longitude: 37.6068] [Source or Destination GeoIP Longitude: 37.6068] [Stream index: 1] Transmission Control Protocol, Src Port: 80, Dst Port: 49163, Seq: 205394, Ack: 854, Len: 1274 Source Port: 80 Destination Port: 49163 [Stream index: 4] [Stream Packet Number: 232] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1274] Sequence Number: 205394 (relative sequence number) Sequence Number (raw): 1661118150 [Next Sequence Number: 206668 (relative sequence number)] Acknowledgment Number: 854 (relative ack number) Acknowledgment number (raw): 2973651637 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x01c0 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 1.999415000 seconds] [Time since previous frame in this TCP stream: 5.000 microseconds] [SEQ/ACK analysis] [iRTT: 281.530000 milliseconds] [Bytes in flight: 5096] [Bytes sent since last PSH flag: 1274] [Client Contiguous Streams: 1] [Server Contiguous Streams: 3] TCP payload (1274 bytes) Hypertext Transfer Protocol File Data: 1274 bytes Data (1274 bytes) 0000 5e 87 86 74 f0 90 d6 1b 5b 14 b3 65 5e 75 e2 0c ^..t....[..e^u.. 0010 be 7a e3 40 e6 63 b6 34 77 22 37 ab bd f2 2f 47 .z.@.c.4w"7.../G 0020 d6 64 1a 6d 4f 34 9d fd ec 42 13 b1 12 22 b6 26 .d.mO4...B...".& 0030 e9 95 72 9c 4f 7a 14 8e a9 cc 47 a4 13 5a 42 b2 ..r.Oz....G..ZB. 0040 00 bd 44 36 5e fb e8 da fe 75 f1 95 bb 2b c3 86 ..D6^....u...+.. 0050 bb 4a 95 5b 22 12 fd 76 81 5d d8 5c 43 c5 3d 06 .J.["..v.].\C.=. 0060 8e 41 ea 9f 1e f7 99 1f d7 c7 aa 21 eb f1 18 a5 .A.........!.... 0070 b9 48 e7 08 60 55 c7 30 cf cf c2 fc 81 e3 c5 40 .H..`U.0.......@ 0080 c1 0d 0d f7 90 3b b0 35 26 a9 1e 8d c1 0b c6 c7 .....;.5&....... 0090 fc a5 a2 26 e5 75 b7 7a a9 c5 ce 31 ff 32 1e 35 ...&.u.z...1.2.5 00a0 3c 18 ed 85 9e 0c f6 b5 87 65 ab bd 43 88 8c 15 <........e..C... 00b0 d0 6d 1c c6 2b ce b0 48 82 a0 44 80 2b 66 d3 79 .m..+..H..D.+f.y 00c0 92 37 a8 0e 36 1f 22 b1 8d f5 ee 19 7b 37 f4 ef .7..6.".....{7.. 00d0 4b 79 6b 64 05 5b e4 c3 04 39 16 a4 4d b1 1b f9 Kykd.[...9..M... 00e0 10 9e d4 9b a2 75 2f 46 90 64 d0 13 40 52 9a 67 .....u/F.d..@R.g 00f0 2c 5a 43 71 54 93 1e 61 dd 50 3e bc d3 78 f0 7c ,ZCqT..a.P>..x.| 0100 ef 48 f8 0b 3d 71 a1 c3 6c fc f9 09 15 98 a8 44 .H..=q..l......D 0110 df ad 75 c9 33 00 8e d4 9d 5a c7 e4 89 40 79 25 ..u.3....Z...@y% 0120 3e fc 32 07 88 d9 82 6c 81 f3 23 bb e7 68 e7 29 >.2....l..#..h.) 0130 e0 2a 38 b6 ca 7d b3 9e 06 d7 9e 7a 51 7c 27 8b .*8..}.....zQ|'. 0140 ca 9c a6 e0 fd ce 15 76 0b 47 4a c2 59 82 f2 46 .......v.GJ.Y..F 0150 a6 b4 01 7c 23 03 0e a4 54 76 3d ea 5f dc 66 95 ...|#...Tv=._.f. 0160 d0 e6 8f 9a be 01 48 b6 4d 68 4a 52 1f 99 c5 a9 ......H.MhJR.... 0170 d7 95 dc 86 7a 2f 11 85 58 7c 7c 9a 97 17 a8 4c ....z/..X||....L 0180 85 18 8e 62 43 b6 69 0b c7 82 e1 4d 16 7b c7 f5 ...bC.i....M.{.. 0190 39 96 87 c1 c7 a3 d4 e8 bf f6 e3 ee 6c 26 ab ae 9...........l&.. 01a0 de a6 0b 5b b0 d8 d9 de 50 1d 84 7e bf 36 f1 3b ...[....P..~.6.; 01b0 1a 9c d2 e6 e1 20 84 5c 15 ac a7 2d 28 6c 0b 50 ..... .\...-(l.P 01c0 bb af 3c 40 4c 94 ef ec 9f 48 35 7a 56 98 f6 05 ..<@L....H5zV... 01d0 b6 6a 34 2b 60 12 53 e2 5f f7 9d 25 69 6a ed 2e .j4+`.S._..%ij.. 01e0 b0 fb 35 55 21 27 d5 3c 64 36 5c f3 0f 21 fa 85 ..5U!'.M@F.Ph 0310 83 54 28 6a d3 7a 24 d6 d3 65 80 f4 b6 09 b4 c9 .T(j.z$..e...... 0320 6b 22 de 2f ce 49 18 41 98 85 f9 9c 69 67 44 a9 k"./.I.A....igD. 0330 7e 6d d0 cb a4 78 28 ea 90 8f 58 84 82 41 45 bd ~m...x(...X..AE. 0340 61 35 87 16 31 9c f0 91 60 3b 62 ad 94 4e f8 52 a5..1...`;b..N.R 0350 3d 69 9f 2a 13 53 5d c3 a1 0e 68 7a f8 bc ed 71 =i.*.S]...hz...q 0360 40 57 7d 22 20 d0 e5 09 e8 c0 9d 91 56 bc de 64 @W}" .......V..d 0370 57 64 05 12 96 39 21 16 a5 d2 21 fd 2a 8b 99 cd Wd...9!...!.*... 0380 fa 40 2d 6d fd c9 0c 4b d0 7a f3 10 78 7d 0b e0 .@-m...K.z..x}.. 0390 63 de 2a 67 9a 02 ec 57 60 3a 4b 9d 3d c0 f9 87 c.*g...W`:K.=... 03a0 1f 53 7d e9 fb af 2e 7e 67 42 88 ac 58 79 b6 ed .S}....~gB..Xy.. 03b0 8f e4 72 8b 04 a6 f4 d3 3b 01 3d e4 20 98 ea 6a ..r.....;.=. ..j 03c0 a6 df ca 10 72 3e 1e 85 e3 17 89 c3 dd 0e fe c4 ....r>.......... 03d0 52 1d 56 d8 3a a1 de 1e 79 5a 00 eb e2 e7 ee ec R.V.:...yZ...... 03e0 f4 be 72 7e cc 14 c4 6b f6 40 28 1d 5f 86 c2 73 ..r~...k.@(._..s 03f0 9a 55 be fc cb 9a 3c 73 a1 cf d8 8a 6a 30 fe 4c .U..... 0430 99 22 e2 94 b8 b1 42 3a 8c ca fe 40 75 d0 b1 fd ."....B:...@u... 0440 29 86 c2 47 bb ec 03 64 d0 61 c8 73 25 98 6f e1 )..G...d.a.s%.o. 0450 cb 2d 19 fd dd 3b 20 19 3d e7 08 59 13 1e e6 16 .-...; .=..Y.... 0460 ef 22 06 58 01 cb e2 42 d9 98 84 31 7b f7 0f dd .".X...B...1{... 0470 30 d0 c7 65 c5 5b 77 b4 f7 75 ef bb 8e 47 f8 19 0..e.[w..u...G.. 0480 1b 9a f4 09 b4 f9 90 31 f7 ea 57 6b bf d8 f4 78 .......1..Wk...x 0490 ba 35 fc 5e 41 03 a4 ba 98 59 96 94 72 6b 3d f0 .5.^A....Y..rk=. 04a0 b7 a1 be 15 31 18 a7 13 93 25 49 58 bb 11 44 99 ....1....%IX..D. 04b0 f6 56 59 84 02 97 ee 47 20 ce 0f 95 62 e5 1f e5 .VY....G ...b... 04c0 d2 e8 40 f1 47 16 45 0d b6 a2 d3 93 15 9d 95 56 ..@.G.E........V 04d0 a9 7c e3 d9 d4 4b e8 c9 60 3c c5 96 12 01 f1 51 .|...K..`<.....Q 04e0 f1 e5 e0 23 f9 31 b8 d3 4f 91 0d e0 a7 10 c6 d4 ...#.1..O....... 04f0 0a 7f 64 6d 2d 7e fd 66 a0 4f ..dm-~.f.O Data […]: 5e878674f090d61b5b14b3655e75e20cbe7ae340e663b634772237abbdf22f47d6641a6d4f349dfdec4213b11222b626e995729c4f7a148ea9cc47a4135a42b200bd44365efbe8dafe75f195bb2bc386bb4a955b2212fd76815dd85c43c53d068e41ea9f1ef7991fd7c7aa21ebf118a5b94 [Length: 1274]