Frame 394: Packet, 1328 bytes on wire (10624 bits), 1328 bytes captured (10624 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 20, 2017 23:07:57.583805000 UTC UTC Arrival Time: Nov 20, 2017 23:07:57.583805000 UTC Epoch Arrival Time: 1511219277.583805000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 5.000 microseconds] [Time since reference or first frame: 5.414430000 seconds] Frame Number: 394 Frame Length: 1328 bytes (10624 bits) Capture Length: 1328 bytes (10624 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Cisco_57:9e:ab (00:05:32:57:9e:ab), Dst: Dell_ac:63:2a (00:15:c5:ac:63:2a) Destination: Dell_ac:63:2a (00:15:c5:ac:63:2a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_57:9e:ab (00:05:32:57:9e:ab) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 188.225.38.247, Dst: 192.168.1.121 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1314 Identification: 0x8551 (34129) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x0a8b [validation disabled] [Header checksum status: Unverified] Source Address: 188.225.38.247 Destination Address: 192.168.1.121 [Source GeoIP: RU] [Source GeoIP Country: Russia] [Source or Destination GeoIP Country: Russia] [Source GeoIP ISO Two Letter Country Code: RU] [Source or Destination GeoIP ISO Two Letter Country Code: RU] [Source GeoIP Latitude: 55.7386] [Source or Destination GeoIP Latitude: 55.7386] [Source GeoIP Longitude: 37.6068] [Source or Destination GeoIP Longitude: 37.6068] [Stream index: 1] Transmission Control Protocol, Src Port: 80, Dst Port: 49163, Seq: 215586, Ack: 854, Len: 1274 Source Port: 80 Destination Port: 49163 [Stream index: 4] [Stream Packet Number: 243] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1274] Sequence Number: 215586 (relative sequence number) Sequence Number (raw): 1661128342 [Next Sequence Number: 216860 (relative sequence number)] Acknowledgment Number: 854 (relative ack number) Acknowledgment number (raw): 2973651637 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x8ab1 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 2.007828000 seconds] [Time since previous frame in this TCP stream: 5.000 microseconds] [SEQ/ACK analysis] [iRTT: 281.530000 milliseconds] [Bytes in flight: 2548] [Bytes sent since last PSH flag: 1274] [Client Contiguous Streams: 1] [Server Contiguous Streams: 3] TCP payload (1274 bytes) Hypertext Transfer Protocol File Data: 1274 bytes Data (1274 bytes) 0000 22 e4 82 82 50 99 38 e6 70 76 06 10 aa 23 f6 a1 "...P.8.pv...#.. 0010 69 50 5f be fd 80 32 f7 5e 24 e5 9e 0c d6 cd 98 iP_...2.^$...... 0020 1b c0 3b ad 96 c9 3a e2 2f dc 6e 3e 86 89 4e 03 ..;...:./.n>..N. 0030 59 7b f4 b2 d6 0f 13 4b 84 a2 3a 93 58 76 26 31 Y{.....K..:.Xv&1 0040 76 a4 ef c5 81 c6 c4 b0 b6 7d 45 78 69 af ca 2e v........}Exi... 0050 3d 90 77 2d 38 85 10 16 90 75 05 12 d7 fb 01 f0 =.w-8....u...... 0060 9c 1b 3b b7 6b 24 6d 1b b0 d9 11 aa 60 02 13 52 ..;.k$m.....`..R 0070 45 6d 8b 78 c6 11 67 57 e6 2d 81 e3 d7 e5 8b c1 Em.x..gW.-...... 0080 2e cf 3a 47 eb 3b 17 6d b4 7c 19 3b 4b 06 0e ad ..:G.;.m.|.;K... 0090 3d 52 bb 69 d1 ea b7 97 46 b8 e8 2f 32 47 a0 13 =R.i....F../2G.. 00a0 73 42 61 81 51 12 f4 96 dc e6 48 ba 4a d3 54 77 sBa.Q.....H.J.Tw 00b0 0a de af db 64 b3 2d d8 9c 71 d3 93 f4 ec 68 5d ....d.-..q....h] 00c0 6b 34 80 b5 5f 61 b0 38 86 8c 7b 7e 62 90 6d 8f k4.._a.8..{~b.m. 00d0 de 85 d6 e8 3e 9b 62 1e 7f 6c 91 06 16 cb a6 d3 ....>.b..l...... 00e0 a2 76 44 71 fa b0 a1 9c f7 8e dc 2d a9 31 07 c8 .vDq.......-.1.. 00f0 df 82 de bb 23 c9 a7 65 05 a8 a0 00 a4 f7 d7 c4 ....#..e........ 0100 65 07 c9 85 08 df b3 78 8a 7d 23 f2 ab 5e 19 f4 e......x.}#..^.. 0110 07 44 32 31 ca bd 40 c4 73 a1 83 66 91 6c 07 85 .D21..@.s..f.l.. 0120 8e 36 2c 94 3d dd 01 0e 99 91 27 cb 13 a3 12 16 .6,.=.....'..... 0130 88 95 64 29 0b 47 5f 08 51 d7 58 23 98 7a 01 e4 ..d).G_.Q.X#.z.. 0140 cc 17 7e 23 5e 29 aa d7 7b 01 e7 28 ba fe d6 35 ..~#^)..{..(...5 0150 66 eb c8 29 e6 ba c2 e6 24 ac 24 e2 6e 67 9a 3d f..)....$.$.ng.= 0160 d4 e7 ab 51 0c 0d 1f a3 ec 61 15 f4 73 06 20 c3 ...Q.....a..s. . 0170 11 4b 0c df 30 88 ef dd c7 79 23 3c 7a 04 ee 0f .K..0....y#