Frame 65: Packet, 1328 bytes on wire (10624 bits), 1328 bytes captured (10624 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 20, 2017 23:07:54.011795000 UTC UTC Arrival Time: Nov 20, 2017 23:07:54.011795000 UTC Epoch Arrival Time: 1511219274.011795000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 153.000 microseconds] [Time since reference or first frame: 1.842420000 seconds] Frame Number: 65 Frame Length: 1328 bytes (10624 bits) Capture Length: 1328 bytes (10624 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Cisco_57:9e:ab (00:05:32:57:9e:ab), Dst: Dell_ac:63:2a (00:15:c5:ac:63:2a) Destination: Dell_ac:63:2a (00:15:c5:ac:63:2a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_57:9e:ab (00:05:32:57:9e:ab) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 188.225.38.247, Dst: 192.168.1.121 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1314 Identification: 0x8472 (33906) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x0b6a [validation disabled] [Header checksum status: Unverified] Source Address: 188.225.38.247 Destination Address: 192.168.1.121 [Source GeoIP: RU] [Source GeoIP Country: Russia] [Source or Destination GeoIP Country: Russia] [Source GeoIP ISO Two Letter Country Code: RU] [Source or Destination GeoIP ISO Two Letter Country Code: RU] [Source GeoIP Latitude: 55.7386] [Source or Destination GeoIP Latitude: 55.7386] [Source GeoIP Longitude: 37.6068] [Source or Destination GeoIP Longitude: 37.6068] [Stream index: 1] Transmission Control Protocol, Src Port: 80, Dst Port: 49160, Seq: 38535, Ack: 822, Len: 1274 Source Port: 80 Destination Port: 49160 [Stream index: 1] [Stream Packet Number: 58] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1274] Sequence Number: 38535 (relative sequence number) Sequence Number (raw): 383221234 [Next Sequence Number: 39809 (relative sequence number)] Acknowledgment Number: 822 (relative ack number) Acknowledgment number (raw): 888253826 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xac4b [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 1.220024000 seconds] [Time since previous frame in this TCP stream: 153.000 microseconds] [SEQ/ACK analysis] [iRTT: 192.228000 milliseconds] [Bytes in flight: 1274] [Bytes sent since last PSH flag: 1274] [Client Contiguous Streams: 1] [Server Contiguous Streams: 1] TCP payload (1274 bytes) Hypertext Transfer Protocol File Data: 1274 bytes Data (1274 bytes) 0000 3d 8e cf 17 99 c9 92 7b 7a 03 8e a5 59 3f a6 d7 =......{z...Y?.. 0010 b7 cc ae 36 6c f0 d6 c2 73 5f a0 73 6b 5a 5e 4c ...6l...s_.skZ^L 0020 42 2a d2 41 66 48 8a ae 37 2a 2c a5 59 0c 68 f5 B*.AfH..7*,.Y.h. 0030 4c d0 84 d7 c8 79 b0 2a 9d 65 75 95 c4 83 6c 6e L....y.*.eu...ln 0040 2f 90 c0 e2 db 23 38 e3 61 69 cc 4b c8 8c 65 e5 /....#8.ai.K..e. 0050 52 8e 96 e3 aa 22 ab 60 31 21 59 78 d3 26 2f 78 R....".`1!Yx.&/x 0060 27 8e e8 23 44 9c c2 fa 7c 59 89 73 2f e2 3b a0 '..#D...|Y.s/.;. 0070 d8 72 61 19 20 da 00 ee b1 96 59 10 7a 21 45 91 .ra. .....Y.z!E. 0080 c1 51 36 92 1b 0a 12 2d b4 86 5d fd 1a b8 9e fe .Q6....-..]..... 0090 ab 26 f5 97 4c 66 d7 f5 9a dd 42 3c 0d 56 e6 34 .&..Lf....B<.V.4 00a0 d6 36 03 54 f1 52 02 6d cb f3 44 65 9e 13 06 24 .6.T.R.m..De...$ 00b0 09 54 13 03 5b 71 49 be 7c d1 c5 c5 73 ae 50 d3 .T..[qI.|...s.P. 00c0 ad 44 98 24 2f f1 62 f1 94 c4 29 f2 88 bc a7 af .D.$/.b...)..... 00d0 c8 f2 10 04 db 14 3e 7d 16 95 26 08 e9 f4 bc 60 ......>}..&....` 00e0 ee 41 8a 29 84 c7 40 5d 10 fd 85 55 61 f9 33 57 .A.)..@]...Ua.3W 00f0 82 ad 85 28 5c bd 54 b6 99 75 2e aa a7 53 4e 50 ...(\.T..u...SNP 0100 60 3e 4c 95 15 9c 15 f8 f4 55 2e ae db 72 e6 10 `>L......U...r.. 0110 c7 84 36 5e a8 70 12 ba 15 cb 67 3d 98 95 1c 63 ..6^.p....g=...c 0120 26 83 6f 8f da 5b 98 fc a5 04 7b 2f 17 dd 04 5d &.o..[....{/...] 0130 26 98 76 a9 79 62 c5 0e d7 ce 0f 30 cb 4b 62 fa &.v.yb.....0.Kb. 0140 33 17 09 58 9e f4 ac 8f cc 92 77 e9 f1 1c 9c b3 3..X......w..... 0150 c6 9f 1c 6b 10 4b 78 7e 7d a6 6e 6b 53 5a d6 25 ...k.Kx~}.nkSZ.% 0160 71 52 42 f0 c6 50 4d af b9 33 07 24 47 1b 53 05 qRB..PM..3.$G.S. 0170 fa 27 16 4f f0 60 ea ee 50 a0 b9 21 91 6d e0 9c .'.O.`..P..!.m.. 0180 52 43 27 69 96 a6 4a 5d 85 7e e7 4c 85 8b b0 6b RC'i..J].~.L...k 0190 1d 0d e8 e1 34 a9 e6 2f 92 cc d6 5e 0e 33 c4 75 ....4../...^.3.u 01a0 7e d6 4e 3f 17 cf 79 28 f9 a4 c8 57 15 ea 51 ad ~.N?..y(...W..Q. 01b0 48 7a fb 45 4a 0d eb e2 1d f1 b0 cf 84 92 b7 1c Hz.EJ........... 01c0 ef 78 ea d6 0a 1d 1d e5 a5 d3 25 c9 5d 40 74 74 .x........%.]@tt 01d0 44 a7 ac 54 f9 2e 7d f6 5e 97 97 60 62 ee a9 bd D..T..}.^..`b... 01e0 ad 1b 15 35 cf 69 43 cf 82 a8 62 59 d8 cf 95 c8 ...5.iC...bY.... 01f0 02 5f af 37 42 74 2d 4b de b8 63 45 c7 92 d5 6a ._.7Bt-K..cE...j 0200 5b be c9 56 d6 43 f7 50 4a dc d2 08 2a 4e 74 3e [..V.C.PJ...*Nt> 0210 60 45 fa f0 6d 86 75 5a a8 e0 9c f8 3c c3 24 50 `E..m.uZ....<.$P 0220 12 33 95 35 63 d1 63 29 eb da 6b ef 92 af 05 e7 .3.5c.c)..k..... 0230 83 34 a0 4f 89 e0 e0 03 56 5f 34 59 ba c0 43 0d .4.O....V_4Y..C. 0240 5a d4 70 21 a3 9c e2 fc 12 94 07 08 aa 8b 36 da Z.p!..........6. 0250 cf c4 25 49 9d 02 1b e4 45 ae 81 2b 9b b0 75 8e ..%I....E..+..u. 0260 97 b9 3a d1 00 59 df b5 08 18 d6 50 6a ca 01 34 ..:..Y.....Pj..4 0270 4d fd d6 11 34 29 85 b0 dc 4e c4 f8 2c 3a b0 29 M...4)...N..,:.) 0280 44 6f 29 8a e2 d9 09 4c f7 9c 46 9a e8 d0 c3 9e Do)....L..F..... 0290 ac 5c f0 4c 64 79 bb cd 05 b7 96 31 24 f0 e5 91 .\.Ldy.....1$... 02a0 d1 43 59 9f a7 2e 55 12 fa d5 0b 0d bd cc 53 8b .CY...U.......S. 02b0 de af 7d c9 ce 9f f5 51 f2 52 31 2e 67 13 70 cd ..}....Q.R1.g.p. 02c0 a2 28 7d 0f 53 b5 99 64 f8 4d 09 f8 60 3f 16 75 .(}.S..d.M..`?.u 02d0 9d a1 b2 9b fa 88 ea 84 3e 8d 89 b5 84 3c 50 8b ........>....I....%9R...C... 0490 09 7d 4e 1e eb 9d a9 ef b2 b5 20 f9 cc cd 47 83 .}N....... ...G. 04a0 f0 00 d1 f6 9a 27 40 81 63 3c 23 9b 3c 73 f4 c2 .....'@.c<#.