Frame 56: Packet, 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 20, 2017 23:07:53.938693000 UTC UTC Arrival Time: Nov 20, 2017 23:07:53.938693000 UTC Epoch Arrival Time: 1511219273.938693000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 33.810000 milliseconds] [Time since reference or first frame: 1.769318000 seconds] Frame Number: 56 Frame Length: 1514 bytes (12112 bits) Capture Length: 1514 bytes (12112 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Cisco_57:9e:ab (00:05:32:57:9e:ab), Dst: Dell_ac:63:2a (00:15:c5:ac:63:2a) Destination: Dell_ac:63:2a (00:15:c5:ac:63:2a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_57:9e:ab (00:05:32:57:9e:ab) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 188.225.38.247, Dst: 192.168.1.121 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0x846d (33901) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x0ab5 [validation disabled] [Header checksum status: Unverified] Source Address: 188.225.38.247 Destination Address: 192.168.1.121 [Source GeoIP: RU] [Source GeoIP Country: Russia] [Source or Destination GeoIP Country: Russia] [Source GeoIP ISO Two Letter Country Code: RU] [Source or Destination GeoIP ISO Two Letter Country Code: RU] [Source GeoIP Latitude: 55.7386] [Source or Destination GeoIP Latitude: 55.7386] [Source GeoIP Longitude: 37.6068] [Source or Destination GeoIP Longitude: 37.6068] [Stream index: 1] Transmission Control Protocol, Src Port: 80, Dst Port: 49160, Seq: 32165, Ack: 822, Len: 1460 Source Port: 80 Destination Port: 49160 [Stream index: 1] [Stream Packet Number: 49] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1460] Sequence Number: 32165 (relative sequence number) Sequence Number (raw): 383214864 [Next Sequence Number: 33625 (relative sequence number)] Acknowledgment Number: 822 (relative ack number) Acknowledgment number (raw): 888253826 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x2023 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 1.146922000 seconds] [Time since previous frame in this TCP stream: 33.810000 milliseconds] [SEQ/ACK analysis] [iRTT: 192.228000 milliseconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 1460] [Client Contiguous Streams: 1] [Server Contiguous Streams: 1] TCP payload (1460 bytes) Hypertext Transfer Protocol File Data: 1460 bytes Data (1460 bytes) 0000 40 ab 04 61 d8 7d a3 68 82 b7 64 f0 b6 79 d1 a2 @..a.}.h..d..y.. 0010 6b 8e 64 af 3f a5 10 6a d7 1e 21 16 9a a4 48 2f k.d.?..j..!...H/ 0020 fe fa 68 c0 80 97 ca 3b 72 85 28 c5 05 0e 8c 77 ..h....;r.(....w 0030 65 f5 e5 2b 4b 84 82 6a de 70 d9 e7 a8 d7 a9 65 e..+K..j.p.....e 0040 49 93 05 20 8d cb 89 bb 6a 1c a0 c7 85 61 a6 14 I.. ....j....a.. 0050 21 4b 75 dd 72 78 ad a8 4c b0 bf 93 1b 2d f0 03 !Ku.rx..L....-.. 0060 5a c8 e8 77 02 38 3c fb e2 5d cd 26 cd 01 05 f3 Z..w.8<..].&.... 0070 c4 1a 5b 59 0b 36 6d 6e 03 a8 28 7b 04 d5 96 13 ..[Y.6mn..({.... 0080 ce 17 0a 37 96 a0 8f f3 77 56 11 27 72 ea 6a 22 ...7....wV.'r.j" 0090 1c 6a 95 9a 34 03 f9 c3 0b d5 9c 47 1b 90 90 08 .j..4......G.... 00a0 8f 65 79 3a 23 d5 70 dc fb 93 81 b2 e7 59 01 f4 .ey:#.p......Y.. 00b0 c8 7b bb 52 08 ce 82 cc 7c e6 59 b5 cf 0c 9e e4 .{.R....|.Y..... 00c0 98 89 e4 1e 0f f2 5c 63 2e d6 6c 86 1c 94 1c 37 ......\c..l....7 00d0 cd a2 8c 9c 9c b9 4b e8 32 58 68 c4 c3 21 e6 30 ......K.2Xh..!.0 00e0 52 09 ae 46 b5 64 d1 6b c4 88 1f b2 93 e4 21 a9 R..F.d.k......!. 00f0 4c db b3 14 94 47 ac 64 81 45 65 7d 52 6f 0b a1 L....G.d.Ee}Ro.. 0100 55 06 84 c8 bf bf a8 0d 97 49 b2 3c cc 8a 90 3f U........I.<...? 0110 5f eb 52 7f 2e ce e6 55 95 fe fd 18 8a ba e0 21 _.R....U.......! 0120 2b 40 eb d3 59 d7 68 17 56 2c b0 35 d0 c3 81 65 +@..Y.h.V,.5...e 0130 1c 29 d6 65 23 2a af 9a 3c 26 ca 42 54 ff 80 08 .).e#*..<&.BT... 0140 0a a6 47 d2 82 3c 36 e4 32 c5 0c 98 dc bf 90 fe ..G..<6.2....... 0150 7c 1f 06 17 d3 99 66 a9 1a 3b d6 96 13 f0 83 9d |.....f..;...... 0160 64 41 85 b5 93 d8 3d 0b 05 8b 06 71 6a 8b 19 51 dA....=....qj..Q 0170 eb 1c 96 fe d7 c8 0b 8c cd 62 0d dd 74 cd 35 c5 .........b..t.5. 0180 39 93 0a 50 f8 f9 5c 53 29 79 58 8c f4 01 46 7c 9..P..\S)yX...F| 0190 d9 c4 99 cb 1f 32 57 39 38 7e 3b 91 17 69 58 ba .....2W98~;..iX. 01a0 a4 9c 55 97 cc f0 03 5b a4 24 7c 30 97 e3 5f c2 ..U....[.$|0.._. 01b0 82 03 66 66 8e 4a ca ac e4 6d 27 7b bb a5 0e 75 ..ff.J...m'{...u 01c0 80 c3 d1 d2 2f 90 c8 43 05 d2 86 bc f7 00 40 0e ..../..C......@. 01d0 94 e3 ab 4e 14 5f 74 52 db 11 df 7a 92 2b 4c f5 ...N._tR...z.+L. 01e0 a9 cd 14 06 88 f5 24 05 39 c8 b2 86 d8 ce 1a b4 ......$.9....... 01f0 ab b0 1a fd 6d 8f a3 e7 59 54 ca 01 63 c5 40 c0 ....m...YT..c.@. 0200 b3 5a 68 98 df cb 12 a8 1a 66 57 13 1e 20 50 64 .Zh......fW.. Pd 0210 a7 5c 40 dd d6 cb 49 95 9e ed 54 89 4b bb 7c eb .\@...I...T.K.|. 0220 2a 88 53 e0 61 2b 0f 4d bd d5 3d 28 3a 29 8a 65 *.S.a+.M..=(:).e 0230 0b 76 eb c9 72 27 88 27 45 b9 08 ae 2f d9 ba a9 .v..r'.'E.../... 0240 37 46 86 fb 22 1b 2c 44 e4 42 a4 1c fb b1 6d 72 7F..".,D.B....mr 0250 32 47 ee 89 93 54 9f b9 e3 11 13 ba fa f7 38 53 2G...T........8S 0260 a3 e0 c0 73 59 b7 d0 39 6d 48 c5 5e 4e ab 86 e3 ...sY..9mH.^N... 0270 48 7c d2 87 1d c9 de 43 76 31 87 9e 82 c8 60 3b H|.....Cv1....`; 0280 cc fc 0b 0f ae 3f f6 f5 fb 24 1a c5 fc 19 dc 37 .....?...$.....7 0290 95 93 ac 97 a3 37 55 70 c7 80 64 9f ca b2 7e 84 .....7Up..d...~. 02a0 29 53 7b e5 42 50 f5 cd 0d c6 26 a8 05 01 5f ce )S{.BP....&..._. 02b0 74 31 55 51 2a b5 65 09 3d 3c 0d 0a 31 30 30 30 t1UQ*.e.=<..1000 02c0 0d 0a 66 07 e0 c7 da 89 41 50 c0 72 98 d5 d5 20 ..f.....AP.r... 02d0 c9 6d 36 46 b5 6f f3 00 46 a9 7b 36 1f ea ca 7e .m6F.o..F.{6...~ 02e0 30 2f 7a e9 be 6a 3f 08 0b b8 e3 5f 2a 21 13 a0 0/z..j?...._*!.. 02f0 f4 3b a1 79 63 14 e5 bc 25 29 0c 3b 34 86 dc 41 .;.yc...%).;4..A 0300 75 cd 03 de 70 f7 a6 1d bc d8 c4 90 7a 2a 8b e5 u...p.......z*.. 0310 35 02 2c 2c 3b ac ec 4f 3c 54 5e 36 c6 eb 43 58 5.,,;..O