Frame 242: Packet, 956 bytes on wire (7648 bits), 956 bytes captured (7648 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:22:46.529917000 UTC UTC Arrival Time: Nov 21, 2017 01:22:46.529917000 UTC Epoch Arrival Time: 1511227366.529917000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 1.000 microseconds] [Time since reference or first frame: 4.874460000 seconds] Frame Number: 242 Frame Length: 956 bytes (7648 bits) Capture Length: 956 bytes (7648 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Cisco_32:54:f9 (00:0c:30:32:54:f9), Dst: Dell_86:4d:1a (5c:f9:dd:86:4d:1a) Destination: Dell_86:4d:1a (5c:f9:dd:86:4d:1a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_32:54:f9 (00:0c:30:32:54:f9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 50.63.76.1, Dst: 172.16.123.105 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 942 Identification: 0xf31d (62237) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x9e72 [validation disabled] [Header checksum status: Unverified] Source Address: 50.63.76.1 Destination Address: 172.16.123.105 [Source GeoIP: Scottsdale, US] [Source GeoIP City: Scottsdale] [Source or Destination GeoIP City: Scottsdale] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP Latitude: 33.6013] [Source or Destination GeoIP Latitude: 33.6013] [Source GeoIP Longitude: -111.8867] [Source or Destination GeoIP Longitude: -111.8867] [Stream index: 1] Transmission Control Protocol, Src Port: 80, Dst Port: 49169, Seq: 127489, Ack: 1462, Len: 902 Source Port: 80 Destination Port: 49169 [Stream index: 0] [Stream Packet Number: 145] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 902] Sequence Number: 127489 (relative sequence number) Sequence Number (raw): 4287031854 [Next Sequence Number: 128391 (relative sequence number)] Acknowledgment Number: 1462 (relative ack number) Acknowledgment number (raw): 2029582879 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x16db [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 4.716948000 seconds] [Time since previous frame in this TCP stream: 1.000 microseconds] [SEQ/ACK analysis] [iRTT: 176.648000 milliseconds] [Bytes in flight: 3822] [Bytes sent since last PSH flag: 3822] [Client Contiguous Streams: 1] [Server Contiguous Streams: 2] TCP payload (902 bytes) Hypertext Transfer Protocol File Data: 902 bytes Data (902 bytes) 0000 60 18 7b 34 38 dc 08 7c 44 70 c3 7a 42 75 d0 40 `.{48..|Dp.zBu.@ 0010 53 a2 83 2d 18 6f 34 26 46 92 9c 46 36 34 c5 b2 S..-.o4&F..F64.. 0020 ae 29 e7 f8 07 77 0c 97 62 23 22 71 0f 04 fa 1a .)...w..b#"q.... 0030 64 63 21 ac 93 44 f6 55 7f f3 3a 88 8b 6f 97 86 dc!..D.U..:..o.. 0040 8e 89 e9 22 8f 67 ae 68 c0 e0 94 c2 cf dc 03 55 ...".g.h.......U 0050 f8 23 47 6a 71 4e 5e 23 36 ea 45 22 d4 c6 7c 8c .#GjqN^#6.E"..|. 0060 a6 6b 4a 65 22 72 2b a2 d4 a4 63 4a 25 b8 24 23 .kJe"r+...cJ%.$# 0070 5a ba 2b 35 76 e3 78 ae 68 2c c1 e4 2e 8d 53 2f Z.+5v.x.h,....S/ 0080 ad 48 e3 06 b2 4d d1 b5 5c e3 94 62 1f 91 94 83 .H...M..\..b.... 0090 24 3a 64 c6 4d ca 03 40 75 69 b2 64 d1 82 e0 51 $:d.M..@ui.d...Q 00a0 59 1d 35 54 48 55 6d c8 45 50 1e 60 61 99 ee 67 Y.5THUm.EP.`a..g 00b0 98 31 34 53 80 1c c5 02 7e 9e 95 67 6a c3 7b 18 .14S....~..gj.{. 00c0 03 2a e0 53 9d 82 f0 7e 22 36 6c 5c 85 8c f1 6a .*.S...~"6l\...j 00d0 de 7e d1 92 16 24 ee 72 09 e8 c4 87 0a 67 0a 29 .~...$.r.....g.) 00e0 af 03 29 88 72 d4 64 95 50 27 ff 88 d7 76 e3 6d ..).r.d.P'...v.m 00f0 7f a6 88 32 a4 88 22 03 98 ec 87 3d d5 2a ea e2 ...2.."....=.*.. 0100 8d cb 6c d5 39 94 d8 50 4a 99 22 c9 c5 36 46 c6 ..l.9..PJ."..6F. 0110 7e a8 95 c4 18 06 61 1a 33 7e ba c6 cc d2 49 85 ~.....a.3~....I. 0120 f1 92 78 24 d0 64 f0 58 9d 0c c5 7b 78 c3 6a 39 ..x$.d.X...{x.j9 0130 6f de 30 ed d2 9e 0e 71 25 f3 a8 b0 20 6e f1 e3 o.0....q%... n.. 0140 9f 15 93 6d 42 35 8e e2 85 50 92 a4 dd 8e 89 85 ...mB5...P...... 0150 6c e6 6c 9f 03 91 f8 0c 6e 4c 30 0b db b6 cd 08 l.l.....nL0..... 0160 54 8f 2b 00 2b f6 30 29 a0 c3 42 e1 d3 d0 f8 67 T.+.+.0)..B....g 0170 35 a7 f9 20 cf 26 57 94 2a a5 d2 50 c3 36 09 ce 5.. .&W.*..P.6.. 0180 3e 89 da 2e e4 9b eb 18 ec b0 70 96 db 23 4a d9 >.........p..#J. 0190 e9 76 a9 64 7b 8a c2 8d a5 f5 9a 64 16 37 c2 02 .v.d{......d.7.. 01a0 26 f2 79 80 e8 a8 ab e1 8f 21 c3 15 91 c8 c3 3c &.y......!.....< 01b0 fa ec 64 11 a6 4e 79 a7 40 97 76 64 c0 af 35 56 ..d..Ny.@.vd..5V 01c0 83 90 e9 c5 7b 26 b0 86 37 ae 4d 9b c3 25 f6 ca ....{&..7.M..%.. 01d0 c0 56 06 80 34 fa b6 b8 e0 30 37 c6 4c f6 ac 52 .V..4....07.L..R 01e0 50 7a 60 09 75 50 61 7a 38 33 ff b7 a6 6f d0 22 Pz`.uPaz83...o." 01f0 ee 67 2d 4a a0 71 fb c2 ff fc a8 26 62 02 68 38 .g-J.q.....&b.h8 0200 eb 20 2b 05 98 68 c5 47 03 d7 55 20 16 24 c0 a5 . +..h.G..U .$.. 0210 78 0e 4c 22 80 11 ef 52 0a 6f 8d 11 0d 5d 72 28 x.L"...R.o...]r( 0220 bd d9 73 ad 50 7a 8d b2 64 9f ec 86 22 ea 64 da ..s.Pz..d...".d. 0230 e4 0b ac 86 92 6b 54 32 32 97 55 32 62 33 2a 66 .....kT22.U2b3*f 0240 40 b0 32 b7 98 07 88 d4 c4 31 37 23 5c 82 af 49 @.2......17#\..I 0250 2c 82 0a d2 a4 62 dc c4 62 56 31 61 80 47 64 5c ,....b..bV1a.Gd\ 0260 78 91 3b a2 e3 ec 88 79 22 31 a8 6f d8 b6 48 8a x.;....y"1.o..H. 0270 25 24 73 fe cc d8 25 f0 e8 62 64 2d 6e 91 bb 52 %$s...%..bd-n..R 0280 9e d0 05 96 40 98 94 a3 c2 fe 62 60 13 c8 26 f0 ....@.....b`..&. 0290 2c 51 6c da 3d 1c 64 4b 54 c4 c5 ae ca 51 4e 0d ,Ql.=.dKT....QN. 02a0 33 0f fc 47 4c 91 22 4a 80 35 e0 43 8b 90 2f f9 3..GL."J.5.C../. 02b0 48 82 0f dc 68 2f 2b 50 32 db 6c 71 d3 a6 7e 91 H...h/+P2.lq..~. 02c0 c3 c8 1c 84 a1 ba 59 59 bc ce b6 69 54 c9 72 9b ......YY...iT.r. 02d0 82 9a cc 8f 0b f3 90 8c 4a 8f c9 d3 46 b9 ae b2 ........J...F... 02e0 e0 b3 87 29 0f 78 26 4e 69 5b ff 23 4d 10 49 24 ...).x&Ni[.#M.I$ 02f0 b2 26 8f f2 6e 56 79 59 aa 62 88 bf 3e 26 35 84 .&..nVyY.b..>&5. 0300 c7 36 3c 79 6a 63 63 2f f5 13 af 20 51 53 24 33 .6