Frame 230: Packet, 956 bytes on wire (7648 bits), 956 bytes captured (7648 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:22:46.518421000 UTC UTC Arrival Time: Nov 21, 2017 01:22:46.518421000 UTC Epoch Arrival Time: 1511227366.518421000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 1.000 microseconds] [Time since reference or first frame: 4.862964000 seconds] Frame Number: 230 Frame Length: 956 bytes (7648 bits) Capture Length: 956 bytes (7648 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Cisco_32:54:f9 (00:0c:30:32:54:f9), Dst: Dell_86:4d:1a (5c:f9:dd:86:4d:1a) Destination: Dell_86:4d:1a (5c:f9:dd:86:4d:1a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_32:54:f9 (00:0c:30:32:54:f9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 50.63.76.1, Dst: 172.16.123.105 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 942 Identification: 0xf314 (62228) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x9e7b [validation disabled] [Header checksum status: Unverified] Source Address: 50.63.76.1 Destination Address: 172.16.123.105 [Source GeoIP: Scottsdale, US] [Source GeoIP City: Scottsdale] [Source or Destination GeoIP City: Scottsdale] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP Latitude: 33.6013] [Source or Destination GeoIP Latitude: 33.6013] [Source GeoIP Longitude: -111.8867] [Source or Destination GeoIP Longitude: -111.8867] [Stream index: 1] Transmission Control Protocol, Src Port: 80, Dst Port: 49169, Seq: 116023, Ack: 1462, Len: 902 Source Port: 80 Destination Port: 49169 [Stream index: 0] [Stream Packet Number: 133] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 902] Sequence Number: 116023 (relative sequence number) Sequence Number (raw): 4287020388 [Next Sequence Number: 116925 (relative sequence number)] Acknowledgment Number: 1462 (relative ack number) Acknowledgment number (raw): 2029582879 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd52b [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 4.705452000 seconds] [Time since previous frame in this TCP stream: 1.000 microseconds] [SEQ/ACK analysis] [iRTT: 176.648000 milliseconds] [Bytes in flight: 3822] [Bytes sent since last PSH flag: 3822] [Client Contiguous Streams: 1] [Server Contiguous Streams: 2] TCP payload (902 bytes) Hypertext Transfer Protocol File Data: 902 bytes Data (902 bytes) 0000 48 90 9c 60 20 73 94 0c 3f ca 3a 38 60 8c 92 e8 H..` s..?.:8`... 0010 2b 34 e0 4c 14 c1 a4 1c ec 12 b2 20 4a e4 db 96 +4.L....... J... 0020 21 41 03 20 48 d3 d1 c3 8b 87 a1 98 b4 83 1b 9c !A. H........... 0030 8a d3 44 b2 89 25 90 88 2e 5a 0a 86 08 3f 8b a3 ..D..%...Z...?.. 0040 14 ec 42 b2 b3 0a 4a f5 29 16 0f d5 cd e0 62 17 ..B...J.).....b. 0050 76 1a c5 75 22 d1 f6 e1 b6 ac 49 2c 61 c1 b5 9d v..u".....I,a... 0060 dc c9 a0 54 ab 72 1d 54 a4 4b a1 f6 89 b9 b0 69 ...T.r.T.K.....i 0070 17 1a f4 20 97 93 ac 32 a1 8b d0 70 08 8c 64 8b ... ...2...p..d. 0080 04 aa 80 e5 a8 80 30 40 d5 ea f0 83 3f 90 83 25 ......0@....?..% 0090 b8 95 28 51 46 6e 24 c0 e1 9b cb 35 09 48 73 44 ..(QFn$....5.HsD 00a0 33 c2 32 03 50 64 0f a0 83 97 c5 70 9d 9a d2 83 3.2.Pd.....p.... 00b0 53 ea 9b 4c ff 14 af 41 5d 28 e1 7a a5 c3 30 1d S..L...A](.z..0. 00c0 bc 48 1d 3d c1 92 fd 80 0e e7 84 1d c6 38 94 36 .H.=.........8.6 00d0 38 53 e9 cc 2d 4e 11 ac f2 80 8a aa 4a a2 33 34 8S..-N......J.34 00e0 96 73 3a a7 f4 c1 57 c7 db d0 36 2c 37 62 81 55 .s:...W...6,7b.U 00f0 b6 da 9a 00 b4 57 ac 05 af 07 32 d7 db 4c 21 75 .....W....2..L!u 0100 ed cd 5a 95 b2 80 d5 28 3a da a3 19 59 2f 86 51 ..Z....(:...Y/.Q 0110 0a 85 5c c7 b6 e0 2a 87 8d 44 33 a0 1d 93 c0 a5 ..\...*..D3..... 0120 b9 19 25 51 8d 18 64 24 91 f6 31 91 54 02 d8 3c ..%Q..d$..1.T..< 0130 03 a5 0a 08 09 8b d8 89 6c 6b 18 e0 80 03 ea 48 ........lk.....H 0140 89 9f 75 cb a9 e5 d7 f7 e1 d4 85 a3 02 9a f0 8f ..u............. 0150 c9 74 02 0d e8 3c 85 5a 82 db 51 5c 02 0d 56 b0 .t...<.Z..Q\..V. 0160 34 24 c4 e1 8e a1 c5 9b 76 3b 08 98 d1 db 5e 89 4$......v;....^. 0170 bc 00 a4 55 75 05 d4 64 e5 43 63 29 46 af ad dd ...Uu..d.Cc)F... 0180 f5 c3 9a 0b 5d d7 ff bb 4e 44 dd 2e 8e 85 dc b6 ....]...ND...... 0190 fa a4 3e 03 9c b8 a0 ba 3d 02 9c 32 81 51 97 ab ..>.....=..2.Q.. 01a0 9f 6d a3 8a 75 ec 30 37 91 8c 05 d0 96 25 50 5c .m..u.07.....%P\ 01b0 92 78 1d bf ff ca 03 d5 5b 12 8d 30 95 25 88 98 .x......[..0.%.. 01c0 05 2b 5b 14 5d 93 80 05 9c f8 91 0b 1a 18 90 81 .+[.]........... 01d0 28 a2 d6 5b 80 77 b1 de e7 8c 53 ee 2c be 13 f1 (..[.w....S.,... 01e0 9a cc 78 d9 cc d8 97 9d d0 3a c4 11 29 22 74 18 ..x......:..)"t. 01f0 bb f9 d5 cf 0d 17 48 f3 2b d7 69 83 9a 98 c4 ee ......H.+.i..... 0200 a0 2a 5c 11 0d bc 03 11 ed 8a 54 92 0b c0 d9 7c .*\.......T....| 0210 d4 b2 45 c6 31 84 3d 6c 8c 3c 9b 44 c6 d0 a4 e0 ..E.1.=l.<.D.... 0220 79 25 af ca f3 ac d6 8d 9f 92 5a 39 aa 33 58 e1 y%........Z9.3X. 0230 bd 96 ce 5b 5e 19 61 93 66 11 8c 7a ac 3d 87 05 ...[^.a.f..z.=.. 0240 80 2e 1d 09 da 12 94 f6 44 ad a5 30 9a 00 f1 9c ........D..0.... 0250 72 f3 4b 98 33 e1 14 c5 bc b5 d8 b6 bb 94 d2 b4 r.K.3........... 0260 90 44 24 9c af 1e ea 3d 15 e4 4d cf 0a 2f bf 54 .D$....=..M../.T 0270 8b d0 41 1c 40 ec bc 0a e0 81 ec f8 d5 d8 e9 ab ..A.@........... 0280 b9 b9 d2 60 05 20 7f 81 3b a5 c8 08 82 60 99 a7 ...`. ..;....`.. 0290 2a 27 f7 13 51 d3 44 ab 79 35 4a 60 a9 bc 9d a4 *'..Q.D.y5J`.... 02a0 63 22 f5 da a2 14 c0 db d4 1a a7 9c 54 52 4c a5 c"..........TRL. 02b0 0a e5 d7 42 ff ed 46 42 66 4a e3 fd 9a 16 76 b9 ...B..FBfJ....v. 02c0 fb 49 d3 d5 2a ad c4 80 0e 2c 38 1d 1b 0e 83 5a .I..*....,8....Z 02d0 84 9b b9 41 9c 2e 82 b5 15 12 be 2d 99 b3 28 fe ...A.......-..(. 02e0 5b 3b 14 dc f7 09 18 11 39 8b 14 70 02 c5 8d 9b [;......9..p.... 02f0 42 1c 97 87 ac d4 8a e2 e4 d9 bd ac 24 19 2d 98 B...........$.-. 0300 d2 93 da f0 1f bf ba 29 48 03 56 d2 19 89 f6 1c .......)H.V..... 0310 a8 14 2b a2 a5 48 dd a6 8a 9a 22 cb 1a 5c fb d3 ..+..H...."..\.. 0320 31 54 9f 8d 45 27 dc 8d 49 73 9d c3 01 1c 43 be 1T..E'..Is....C. 0330 0b 4a cc a0 e3 e0 9a 43 e0 05 dc 81 75 ab ef f4 .J.....C....u... 0340 35 2c 13 bd cf db 18 3e 33 82 6e 29 24 3e a0 82 5,.....>3.n)$>.. 0350 8d 01 80 0a 00 92 7f d2 61 d6 c0 82 04 2d a2 06 ........a....-.. 0360 5a c0 b6 38 65 cb 18 48 04 9a cb 93 2b c0 02 fb Z..8e..H....+... 0370 1a d8 f8 48 5f c5 d2 1c 7a 37 d1 a2 5f ef 64 d2 ...H_...z7.._.d. 0380 cd 2b a9 9e 83 28 .+...( Data […]: 48909c602073940c3fca3a38608c92e82b34e04c14c1a41cec12b2204ae4db962141032048d3d1c38b87a198b4831b9c8ad344b2892590882e5a0a86083f8ba314ec42b2b30a4af529160fd5cde06217761ac57522d1f6e1b6ac492c61c1b59ddcc9a054ab721d54a44ba1f689b9b069171 [Length: 902]