Frame 5315: Packet, 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits)
    Encapsulation type: Ethernet (1)
    Arrival Time: Mar 19, 2019 02:11:09.415184000 UTC
    UTC Arrival Time: Mar 19, 2019 02:11:09.415184000 UTC
    Epoch Arrival Time: 1552961469.415184000
    [Time shift for this packet: 0.000000000 seconds]
    [Time delta from previous captured frame: 637.000 microseconds]
    [Time since reference or first frame: 26 minutes, 13.778418000 seconds]
    Frame Number: 5315
    Frame Length: 1514 bytes (12112 bits)
    Capture Length: 1514 bytes (12112 bits)
    [Frame is marked: False]
    [Frame is ignored: False]
    [Protocols in frame: eth:ethertype:ip:tcp:dcerpc]
    Character encoding: ASCII (0)
Ethernet II, Src: Intel_57:2b:42 (64:32:a8:57:2b:42), Dst: Dell_c2:09:6a (a4:1f:72:c2:09:6a)
    Destination: Dell_c2:09:6a (a4:1f:72:c2:09:6a)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: Intel_57:2b:42 (64:32:a8:57:2b:42)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IPv4 (0x0800)
    [Stream index: 1]
Internet Protocol Version 4, Src: 10.0.90.215, Dst: 10.0.90.9
    0100 .... = Version: 4
    .... 0101 = Header Length: 20 bytes (5)
    Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
        0000 00.. = Differentiated Services Codepoint: Default (0)
        .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
    Total Length: 1500
    Identification: 0x07e4 (2020)
    010. .... = Flags: 0x2, Don't fragment
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    ...0 0000 0000 0000 = Fragment Offset: 0
    Time to Live: 128
    Protocol: TCP (6)
    Header Checksum: 0xb0a8 [validation disabled]
    [Header checksum status: Unverified]
    Source Address: 10.0.90.215
    Destination Address: 10.0.90.9
    [Stream index: 1]
Transmission Control Protocol, Src Port: 49231, Dst Port: 49155, Seq: 1, Ack: 1, Len: 1460
    Source Port: 49231
    Destination Port: 49155
    [Stream index: 75]
    [Stream Packet Number: 4]
    [Conversation completeness: Incomplete, ESTABLISHED (7)]
        ..0. .... = RST: Absent
        ...0 .... = FIN: Absent
        .... 0... = Data: Absent
        .... .1.. = ACK: Present
        .... ..1. = SYN-ACK: Present
        .... ...1 = SYN: Present
        [Completeness Flags: ···ASS]
    [TCP Segment Len: 1460]
    Sequence Number: 1    (relative sequence number)
    Sequence Number (raw): 3543314537
    [Next Sequence Number: 1461    (relative sequence number)]
    Acknowledgment Number: 1    (relative ack number)
    Acknowledgment number (raw): 1634378054
    0101 .... = Header Length: 20 bytes (5)
    Flags: 0x010 (ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Accurate ECN: Not set
        .... 0... .... = Congestion Window Reduced: Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 0... = Push: Not set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
        [TCP Flags: ·······A····]
    Window: 256
    [Calculated window size: 65536]
    [Window size scaling factor: 256]
    Checksum: 0xcaa0 [unverified]
    [Checksum Status: Unverified]
    Urgent Pointer: 0
    [Timestamps]
        [Time since first frame in this TCP stream: 988.000 microseconds]
        [Time since previous frame in this TCP stream: 637.000 microseconds]
    [SEQ/ACK analysis]
        [iRTT: 351.000 microseconds]
        [Bytes in flight: 1460]
        [Bytes sent since last PSH flag: 1460]
    [Client Contiguous Streams: 1]
    [Server Contiguous Streams: 1]
    TCP payload (1460 bytes)
    [PDU Size: 1899]
Distributed Computing Environment / Remote Procedure Call (DCE/RPC) Bind, Fragment: Single, FragLen: 1899, Call: 2
    Version: 5
    Version (minor): 0
    Packet type: Bind (11)
    Packet Flags: 0x07
        0... .... = Object: Not set
        .0.. .... = Maybe: Not set
        ..0. .... = Did Not Execute: Not set
        ...0 .... = Multiplex: Not set
        .... 0... = Reserved: Not set
        .... .1.. = Cancel Pending: Set
        .... ..1. = Last Frag: Set
        .... ...1 = First Frag: Set
    Data Representation: 10000000 (Order: Little-endian, Char: ASCII, Float: IEEE)
        Byte order: Little-endian (1)
        Character: ASCII (0)
        Floating-point: IEEE (0)
    Frag Length: 1899
    Auth Length: 1731
    Call ID: 2
[BoundError Unreassembled Packet: DCERPC]
    [Expert Info (Note/Reassemble): Unreassembled fragment (change preferences to enable reassembly)]
        [Unreassembled fragment (change preferences to enable reassembly)]
        [Severity level: Note]
        [Group: Reassemble]