Frame 1327: Packet, 1328 bytes on wire (10624 bits), 1328 bytes captured (10624 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:22:55.072879000 UTC UTC Arrival Time: Nov 21, 2017 01:22:55.072879000 UTC Epoch Arrival Time: 1511227375.072879000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 82.000 microseconds] [Time since reference or first frame: 13.417422000 seconds] Frame Number: 1327 Frame Length: 1328 bytes (10624 bits) Capture Length: 1328 bytes (10624 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Cisco_32:54:f9 (00:0c:30:32:54:f9), Dst: Dell_86:4d:1a (5c:f9:dd:86:4d:1a) Destination: Dell_86:4d:1a (5c:f9:dd:86:4d:1a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_32:54:f9 (00:0c:30:32:54:f9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 172.217.129.7, Dst: 172.16.123.105 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1314 Identification: 0xf63e (63038) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0xea3c [validation disabled] [Header checksum status: Unverified] Source Address: 172.217.129.7 Destination Address: 172.16.123.105 [Source GeoIP: US] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP Latitude: 37.751] [Source or Destination GeoIP Latitude: 37.751] [Source GeoIP Longitude: -97.822] [Source or Destination GeoIP Longitude: -97.822] [Stream index: 6] Transmission Control Protocol, Src Port: 80, Dst Port: 49185, Seq: 225499, Ack: 679, Len: 1274 Source Port: 80 Destination Port: 49185 [Stream index: 16] [Stream Packet Number: 261] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1274] Sequence Number: 225499 (relative sequence number) Sequence Number (raw): 4239936949 [Next Sequence Number: 226773 (relative sequence number)] Acknowledgment Number: 679 (relative ack number) Acknowledgment number (raw): 2087014736 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x489d [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 496.876000 milliseconds] [Time since previous frame in this TCP stream: 82.000 microseconds] [SEQ/ACK analysis] [iRTT: 97.113000 milliseconds] [Bytes in flight: 6370] [Bytes sent since last PSH flag: 1274] [Client Contiguous Streams: 1] [Server Contiguous Streams: 1] TCP payload (1274 bytes) Hypertext Transfer Protocol File Data: 1274 bytes Data (1274 bytes) 0000 5f fc e1 45 39 3d 49 97 47 b0 fd f5 66 5d d5 1f _..E9=I.G...f].. 0010 6f 6f b6 f5 dd 7d 34 da 7d 1b ff 53 dd 7e 79 a8 oo...}4.}..S.~y. 0020 bf 3c d0 13 5e c8 38 97 27 4b d9 0d d8 92 ef 03 .<..^.8.'K...... 0030 d3 5d 7d fd 78 38 e3 3f be ba ff ba fe f2 a7 eb .]}.x8.?........ 0040 47 a4 80 f8 23 5d 8f aa 9b f5 fd fd cf d7 47 77 G...#]........Gw 0050 f5 df 1f 3f dd d5 db 1f db db af 8f 46 5f 3e fc ...?........F_>. 0060 78 ff f1 f6 1f f8 f2 5f 1e 6e bf be bc c7 b2 3e x......_.n.....> 0070 55 9f f0 e4 d3 ba de 6e d6 d5 df ae 8f fe d4 fa U......n........ 0080 0a 19 84 8d 32 c2 7b a5 83 92 92 89 37 44 ba a5 ....2.{.....7D.. 0090 0d f2 be 1d 13 34 32 0e fb 81 98 70 5e 84 42 73 .....42....p^.Bs 00a0 c9 2b 10 7f 01 91 47 b1 a4 da 91 2a 60 9c 08 48 .+....G....*`..H 00b0 12 63 95 c2 c8 2c ed bf 5d c2 61 93 e3 09 3c b6 .c...,..].a...<. 00c0 5c fc f0 f5 e6 f1 6e 7d f3 c3 6d d3 dc d7 0f 3f \.....n}..m....? 00d0 c9 d1 cf e2 1b a5 dc 9a b2 5a e8 f5 f7 9f e5 b7 .........Z...... 00e0 f8 a8 fa db 6c 7e 36 9e 4e fe 5a ce bf c7 fc a0 ....l~6.N.Z..... 00f0 50 f2 ba da bf 59 71 37 27 94 31 45 b5 a6 bf 75 P....Yq7'.1E...u 0100 0c 07 69 47 72 44 5f 6d d6 83 d6 10 bd f5 dd 3f ..iGrD_m.......? 0110 61 f0 5f 7f cd e0 f7 e4 22 ad 91 9d c8 99 02 ce a._....."....... 0120 02 a8 0a 0e 85 94 6d c8 aa db 8e 7e 1c 9d bc 3b ......m....~...; 0130 49 03 11 44 42 02 bc 02 3c 1b 0a 5b 28 66 57 ac I..DB...<..[(fW. 0140 a7 48 77 1b 57 47 18 35 af e8 23 9a 47 40 92 e1 .Hw.WG.5..#.G@.. 0150 5a 05 9a 7a e3 24 21 6e 95 80 a5 dd 3a 8c f4 42 Z..z.$!n....:..B 0160 b8 a2 70 b0 ae 8a a2 50 cc c4 80 c9 ed dd 52 68 ..p....P......Rh 0170 e4 bd 04 0e 68 2c 06 50 c3 4c 46 af 11 22 16 3e ....h,.P.LF..".> 0180 8a 63 0a c4 95 b7 56 61 42 52 14 82 10 84 19 b3 .c....VaBR...... 0190 b1 05 a1 bb f2 1d 00 23 c4 64 74 37 85 5b f0 f8 .......#.dt7.[.. 01a0 5c 09 65 5b 8b 45 40 a0 39 6f 08 85 e0 1f cd c1 \.e[.E@.9o...... 01b0 5d 8f 17 8c 25 60 75 1b a3 db f1 46 03 80 0b e2 ]...%`u....F.... 01c0 2a 03 5e 08 96 01 1f 57 6d 9b f8 77 07 c0 b4 31 *.^....Wm..w...1 01d0 f8 2b 88 7b 8c 6c d6 89 24 68 f7 3d a5 11 3c 49 .+.{.l..$h.=..i..;)... 0420 a6 08 d7 8d a1 f8 af 9a 4d 8c b8 26 bf f3 38 81 ........M..&..8. 0430 71 1f f0 93 01 b0 62 d5 11 1d 55 30 bb 30 89 66 q.....b...U0.0.f 0440 fc 66 2d f7 a7 de 57 46 08 c0 f5 ee db 5a c5 0d .f-...WF.....Z.. 0450 31 14 d0 1b fa d6 9a 24 0d e2 fd cd d6 3d d1 63 1......$.....=.c 0460 6b 61 47 f6 69 f1 29 91 e0 ee 7a df 42 9f 60 4d kaG.i.)...z.B.`M 0470 ed 22 e8 a8 3a 26 49 88 d2 23 ec e4 58 b3 0d 1d ."..:&I..#..X... 0480 c4 18 15 76 21 9f 9e 9b 1c 0a 18 af bb c0 db 73 ...v!..........s 0490 77 4c 3c cc 96 36 4c 8a b8 52 b5 dd bf 27 6d 2a wL<..6L..R...'m* 04a0 c2 6d 13 5d 1e 0b 5b b5 ee 92 ac ef a5 90 0a db .m.]..[......... 04b0 76 53 69 fb 9d b4 2e 3e 45 46 1f 56 9d b5 80 5a vSi....>EF.V...Z 04c0 13 d7 81 84 1a 0a b4 22 ae a8 89 02 c6 46 79 e4 .......".....Fy. 04d0 ba 34 d5 cd 96 e6 a3 68 26 ed 8a 7a 73 63 bc 5a .4.....h&..zsc.Z 04e0 44 70 f1 04 6c 2e 10 64 b7 41 ac 23 e0 62 8d a3 Dp..l..d.A.#.b.. 04f0 b3 db db 0f 37 14 58 7d 28 6b ....7.X}(k Data […]: 5ffce145393d499747b0fdf5665dd51f6f6fb6f5dd7d34da7d1bff53dd7e79a8bf3cd0135ec83897274bd90dd892ef03d35d7dfd7838e33fbebaffbafef2a7eb47a480f8235d8faa9bf5fdfdcfd74777f5df1f3fddd5db1fdbdbaf8f465f3efc78fff1f61ff8f25f1e6ebfbebcc7b23e559 [Length: 1274]