Frame 1391: Packet, 1142 bytes on wire (9136 bits), 1142 bytes captured (9136 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:22:55.114699000 UTC UTC Arrival Time: Nov 21, 2017 01:22:55.114699000 UTC Epoch Arrival Time: 1511227375.114699000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 75.000 microseconds] [Time since reference or first frame: 13.459242000 seconds] Frame Number: 1391 Frame Length: 1142 bytes (9136 bits) Capture Length: 1142 bytes (9136 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Cisco_32:54:f9 (00:0c:30:32:54:f9), Dst: Dell_86:4d:1a (5c:f9:dd:86:4d:1a) Destination: Dell_86:4d:1a (5c:f9:dd:86:4d:1a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_32:54:f9 (00:0c:30:32:54:f9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 172.217.129.7, Dst: 172.16.123.105 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1128 Identification: 0xf66c (63084) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0xeac8 [validation disabled] [Header checksum status: Unverified] Source Address: 172.217.129.7 Destination Address: 172.16.123.105 [Source GeoIP: US] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP Latitude: 37.751] [Source or Destination GeoIP Latitude: 37.751] [Source GeoIP Longitude: -97.822] [Source or Destination GeoIP Longitude: -97.822] [Stream index: 6] Transmission Control Protocol, Src Port: 80, Dst Port: 49185, Seq: 284289, Ack: 679, Len: 1088 Source Port: 80 Destination Port: 49185 [Stream index: 16] [Stream Packet Number: 325] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1088] Sequence Number: 284289 (relative sequence number) Sequence Number (raw): 4239995739 [Next Sequence Number: 285377 (relative sequence number)] Acknowledgment Number: 679 (relative ack number) Acknowledgment number (raw): 2087014736 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xa8d2 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 538.696000 milliseconds] [Time since previous frame in this TCP stream: 75.000 microseconds] [SEQ/ACK analysis] [iRTT: 97.113000 milliseconds] [Bytes in flight: 2548] [Bytes sent since last PSH flag: 2548] [Client Contiguous Streams: 1] [Server Contiguous Streams: 1] TCP payload (1088 bytes) Hypertext Transfer Protocol File Data: 1088 bytes Data (1088 bytes) 0000 52 a8 72 b0 5f 34 dd cc f5 b4 b8 1b 83 0d 87 6b R.r._4.........k 0010 da b1 5a 65 12 a3 41 44 58 34 17 c5 ed 44 df 88 ..Ze..ADX4...D.. 0020 39 1f a4 15 2c 25 ed 7d 20 6a 28 e7 1e 9c cf 58 9...,%.} j(....X 0030 c8 e0 4b 66 4f 94 da dc a0 c1 6c 05 52 b6 12 e2 ..KfO.....l.R... 0040 48 08 c4 ea 4a f7 7e aa 24 65 78 73 3d 7d 9e c1 H...J.~.$exs=}.. 0050 49 bd a3 d4 cd ce e6 4c 1d 39 bb bd fb 42 0d 4c I......L.9...B.L 0060 83 6a 65 e2 ca 3c f5 7a cb f2 b3 b6 2d 97 50 0e .je..<.z....-.P. 0070 2e 6d 71 99 9c f4 be 73 bf 8f 23 43 0a 61 a0 5b .mq....s..#C.a.[ 0080 f1 d1 2f be 72 85 41 90 2a fe 45 c5 b7 d1 2e 83 ../.r.A.*.E..... 0090 dc 6c 34 27 57 28 5a dc 8a 95 24 1c 29 4d a7 e1 .l4'W(Z...$.)M.. 00a0 ef 90 33 86 f0 e4 97 3b 64 87 63 e1 58 94 c1 2a ..3....;d.c.X..* 00b0 27 b4 cc e5 5e e0 3b 17 94 52 70 49 28 60 2b 7c '...^.;..RpI(`+| 00c0 2c 3b 22 44 ba ab bc d8 67 30 50 27 ca 16 16 31 ,;"D....g0P'...1 00d0 16 05 9a b5 77 9b a1 ff f7 60 67 05 d4 2a 78 3a ....w....`g..*x: 00e0 5d 5a fa 1a a8 ad d5 e5 10 d3 e4 91 82 0b 9b 19 ]Z.............. 00f0 51 fb 3e 83 ff 20 be 35 70 e8 0a a2 fb 26 43 88 Q.>.. .5p....&C. 0100 d2 72 38 71 ee 1b 39 65 26 e9 e4 bc c4 ea 02 cc .r8q..9e&....... 0110 be a8 c1 5f b8 cd 53 f6 80 19 f1 85 35 67 d1 7b ..._..S.....5g.{ 0120 2d e4 69 63 c0 af 1a cc 81 95 f9 66 02 92 78 f2 -.ic.......f..x. 0130 b5 78 42 1c 01 14 4a a9 cb 78 38 52 7f 6f b7 7e .xB...J..x8R.o.~ 0140 b1 49 cb f7 25 f4 76 57 d4 69 48 d9 2d 98 6c 97 .I..%.vW.iH.-.l. 0150 d1 86 a7 8c 9a 54 d6 8a fb f8 40 7d da a4 94 68 .....T....@}...h 0160 57 8a 5b 9b 88 62 e1 9e cc ba 9d e2 c0 d4 15 c8 W.[..b.......... 0170 18 c2 d3 ec 97 42 73 48 6c a6 6e 1b a3 db 91 b5 .....BsHl.n..... 0180 35 14 d6 ee 90 37 1b ca d7 39 4d 90 76 83 95 45 5....7...9M.v..E 0190 b5 66 2b 3b 56 80 2b 3e 4e b9 c3 22 3c 13 c0 5f .f+;V.+>N.."<.._ 01a0 65 e4 7c ed 64 5d 0c 85 64 eb 2a 1a a2 e5 c3 8e e.|.d]..d.*..... 01b0 c3 d7 55 c7 8e 32 33 72 90 f7 06 fd 6f 0c 67 80 ..U..23r....o.g. 01c0 a7 83 a0 65 b3 00 ff e4 8c 69 55 9d 61 51 dc ca ...e.....iU.aQ.. 01d0 ab a0 61 4f aa e5 13 24 d9 72 82 54 1f 5b f1 ed ..aO...$.r.T.[.. 01e0 eb c4 11 ae d2 76 f6 9d 06 a3 ac 1d eb b3 ec 6f .....v.........o 01f0 40 c2 f6 24 9b 5f 2a 68 91 82 25 72 c6 59 d4 36 @..$._*h..%r.Y.6 0200 26 cb 98 c7 54 5c c4 38 e7 f2 72 fe e9 26 a6 35 &...T\.8..r..&.5 0210 9c b2 48 26 31 4d 95 79 5c 9f fd 1f b3 6d 93 24 ..H&1M.y\....m.$ 0220 dc 2a d0 81 0a 50 eb 12 42 71 6b eb 54 cb 8d fa .*...P..Bqk.T... 0230 6a aa ac 0c bc c0 ec ee 4c 21 07 d3 88 9c 0a 8e j.......L!...... 0240 a4 b2 f5 eb 16 17 bb 95 4d eb 2a e0 34 9f f8 4f ........M.*.4..O 0250 28 5b b5 93 08 bf 21 bf 53 06 09 53 17 eb 1e 5f ([....!.S..S..._ 0260 ac 94 bf 89 df 2c 0f d3 cd e3 a4 5d 9d 2d 72 eb .....,.....].-r. 0270 74 ec 25 aa 4c 08 e1 8b bb 66 2f 82 06 5f c2 98 t.%.L....f/.._.. 0280 5b 0e f9 69 a3 5c e8 16 d9 30 11 a9 6c 0b 83 8e [..i.\...0..l... 0290 3b a8 f9 30 93 2b 54 8e 62 15 03 aa 86 ba 34 f0 ;..0.+T.b.....4. 02a0 ea 6e 01 12 3c 56 21 b4 cc 96 ce 37 cd 96 82 1b .n...@.D 03a0 1d c4 d1 b9 7f b3 86 25 eb 95 73 11 0b b1 1c 2e .......%..s..... 03b0 22 06 39 ed 0b 10 6a 59 db bb 8f df 94 b0 2a 28 ".9...jY......*( 03c0 ef 18 ae 0f 4a 2d a6 5d 51 0c 6f c4 47 24 0d 45 ....J-.]Q.o.G$.E 03d0 e9 50 28 15 2a 7f 86 c5 fb 97 eb 40 98 11 00 00 .P(.*......@.... 03e0 35 64 ed 1f ff ad a3 21 51 51 46 fb 54 f2 76 3c 5d.....!QQF.T.v< 03f0 22 a6 8d 61 2f db 38 68 14 44 9d ec 8a 24 2f c8 "..a/.8h.D...$/. 0400 06 05 26 f4 5d 90 fa 22 b5 d2 6c 93 86 d3 54 22 ..&.].."..l...T" 0410 42 8c ec 8b 34 52 49 37 1a 88 d0 f3 44 09 20 5c B...4RI7....D. \ 0420 35 d6 f4 92 0b 9b c2 16 f2 c2 97 aa 4d 37 e1 1d 5...........M7.. 0430 07 c9 67 5c d7 82 9b 51 78 f2 97 5b 94 c1 0a d3 ..g\...Qx..[.... Data […]: 52a872b05f34ddccf5b4b81b830d876bdab15a6512a34144583417c5ed44df88391fa4152c25ed7d206a28e71e9ccf58c8e04b664f94dadca0c16c0552b612e24808c4ea4af77eaa246578733d7d9ec149bda3d4cdcee64c1d39bbbdfb420d4c836a65e2ca3cf57acbf2b3b62d97500e2e6 [Length: 1088]