Frame 565: Packet, 956 bytes on wire (7648 bits), 956 bytes captured (7648 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:22:51.266549000 UTC UTC Arrival Time: Nov 21, 2017 01:22:51.266549000 UTC Epoch Arrival Time: 1511227371.266549000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 4.000 microseconds] [Time since reference or first frame: 9.611092000 seconds] Frame Number: 565 Frame Length: 956 bytes (7648 bits) Capture Length: 956 bytes (7648 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Cisco_32:54:f9 (00:0c:30:32:54:f9), Dst: Dell_86:4d:1a (5c:f9:dd:86:4d:1a) Destination: Dell_86:4d:1a (5c:f9:dd:86:4d:1a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_32:54:f9 (00:0c:30:32:54:f9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 50.63.76.1, Dst: 172.16.123.105 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 942 Identification: 0xf401 (62465) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x9d8e [validation disabled] [Header checksum status: Unverified] Source Address: 50.63.76.1 Destination Address: 172.16.123.105 [Source GeoIP: Scottsdale, US] [Source GeoIP City: Scottsdale] [Source or Destination GeoIP City: Scottsdale] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP Latitude: 33.6013] [Source or Destination GeoIP Latitude: 33.6013] [Source GeoIP Longitude: -111.8867] [Source or Destination GeoIP Longitude: -111.8867] [Stream index: 1] Transmission Control Protocol, Src Port: 80, Dst Port: 49169, Seq: 232060, Ack: 3017, Len: 902 Source Port: 80 Destination Port: 49169 [Stream index: 0] [Stream Packet Number: 273] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 902] Sequence Number: 232060 (relative sequence number) Sequence Number (raw): 4287136425 [Next Sequence Number: 232962 (relative sequence number)] Acknowledgment Number: 3017 (relative ack number) Acknowledgment number (raw): 2029584434 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xc98b [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 9.453580000 seconds] [Time since previous frame in this TCP stream: 4.000 microseconds] [SEQ/ACK analysis] [iRTT: 176.648000 milliseconds] [Bytes in flight: 3822] [Bytes sent since last PSH flag: 3822] [Client Contiguous Streams: 1] [Server Contiguous Streams: 2] TCP payload (902 bytes) Hypertext Transfer Protocol File Data: 902 bytes Data (902 bytes) 0000 6e 6a 71 7a fc 1e d2 09 ca cf 75 a1 fa e6 3f 1b njqz......u...?. 0010 4f 1d 98 d2 8c 6b d2 9d 48 b9 3a 94 e9 4f da 7b O....k..H.:..O.{ 0020 1e 67 4b 97 9a 56 8b 7c f6 95 b4 5f 03 f9 7e b9 .gK..V.|..._..~. 0030 7f c1 60 7e 0b 78 03 e0 ff 00 c6 9d 2f c5 1f 07 ..`~.x....../... 0040 fe 31 f8 b7 e2 36 8f f1 bb c5 ba 97 8d 3c 79 e0 .1...6.......#.7. 0090 34 1d 2d b4 f4 6d 17 fe 12 54 f0 83 78 88 78 8d 4.-..m...T..x.x. 00a0 34 9b ed 5b 49 78 f7 67 c3 39 57 65 27 05 ab 13 4..[Ix.g.9We'... 00b0 fe 0b 1d f1 a7 c1 ff 00 11 ff 00 68 cf 06 5b fc ...........h..[. 00c0 38 f0 25 87 86 35 1d 03 e1 9e a3 ff 00 0b 47 c1 8.%..5........G. 00d0 be 27 f0 d6 97 a7 f8 83 4e f1 0e 9f e2 7d 47 fe .'......N....}G. 00e0 11 b3 e2 4f b1 70 3f e2 9c 1f f1 27 c6 b0 31 9f ...O.p?....'..1. 00f0 cf f4 e7 f6 39 fd a3 34 df d9 73 fe 09 cd a1 fc ....9..4..s..... 0100 43 fd a0 be 1f 69 e9 f0 e7 54 d0 75 3f 18 7c 16 C....i...T.u?.|. 0110 f0 37 89 74 fd 4a c3 54 f1 7d fd 96 a3 ff 00 09 .7.t.J.T.}...... 0120 30 f0 f2 68 be 32 be d7 16 d3 c2 da 36 af b7 c6 0..h.2......6... 0130 11 f8 8a 5c 22 89 04 de 1e 59 55 56 29 38 72 c5 ...\"....YUV)8r. 0140 ed a9 56 af 8b a1 49 51 c2 fb 28 57 ad 89 c1 ba ..V...IQ..(W.... 0150 6a 14 65 cf 0c 2d 2c 46 0b db 37 35 4e 8d 2f 65 j.e..-,F..75N./e 0160 17 f5 88 f3 38 4a 56 8f 3f 2a f9 4a b5 6b 53 c9 ....8JV.?*.J.kS. 0170 b2 ea 78 6c 3b 8b 96 2a 2a 86 12 35 23 52 b5 49 ..xl;..**..5#R.I 0180 2e 59 3f 64 9c 14 66 e0 f9 64 db 56 8e 8d a7 ba .Y?d..f..d.V.... 0190 f3 4f 80 5a 07 84 3f e0 92 1f 0a bc 7d fb 59 fc .O.Z..?.....}.Y. 01a0 5a b5 d3 b5 5f 8f ff 00 b4 41 3e 16 fd 9f 3e 10 Z..._....A>...>. 01b0 eb 5a 98 d0 45 8f 84 b4 ed d7 5a 41 d7 af 35 76 .Z..E.....ZA..5v 01c0 cf 86 9b c4 0d 63 fd b3 75 23 05 08 36 c1 18 92 .....c..u#..6... 01d0 57 99 ac ff 00 2d be 2c fc 7d fd a1 3c 6f 37 89 W....-.,.}..'.]....o.... 0230 00 0e 6a 3e 22 d5 7e db e1 cf 89 5f 18 8d ee 49 ..j>".~...._...I 0240 f0 ee 93 e1 d3 a4 b7 87 bc 23 ac 92 de 33 66 2c .........#...3f, 0250 cc 7c 22 49 30 58 fc 16 d7 3e 0b f8 8f c2 fa 87 .|"I0X...>...... 0260 8c 2e bf e1 28 fd a2 3c 65 7f a6 fc 5b f8 a1 aa ....(..