Frame 70: Packet, 1328 bytes on wire (10624 bits), 1328 bytes captured (10624 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:22:44.447088000 UTC UTC Arrival Time: Nov 21, 2017 01:22:44.447088000 UTC Epoch Arrival Time: 1511227364.447088000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 5.000 microseconds] [Time since reference or first frame: 2.791631000 seconds] Frame Number: 70 Frame Length: 1328 bytes (10624 bits) Capture Length: 1328 bytes (10624 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Cisco_32:54:f9 (00:0c:30:32:54:f9), Dst: Dell_86:4d:1a (5c:f9:dd:86:4d:1a) Destination: Dell_86:4d:1a (5c:f9:dd:86:4d:1a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_32:54:f9 (00:0c:30:32:54:f9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 50.63.76.1, Dst: 172.16.123.105 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1314 Identification: 0xf2a6 (62118) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x9d75 [validation disabled] [Header checksum status: Unverified] Source Address: 50.63.76.1 Destination Address: 172.16.123.105 [Source GeoIP: Scottsdale, US] [Source GeoIP City: Scottsdale] [Source or Destination GeoIP City: Scottsdale] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP Latitude: 33.6013] [Source or Destination GeoIP Latitude: 33.6013] [Source GeoIP Longitude: -111.8867] [Source or Destination GeoIP Longitude: -111.8867] [Stream index: 1] Transmission Control Protocol, Src Port: 80, Dst Port: 49169, Seq: 54783, Ack: 406, Len: 1274 Source Port: 80 Destination Port: 49169 [Stream index: 0] [Stream Packet Number: 59] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1274] Sequence Number: 54783 (relative sequence number) Sequence Number (raw): 4286959148 [Next Sequence Number: 56057 (relative sequence number)] Acknowledgment Number: 406 (relative ack number) Acknowledgment number (raw): 2029581823 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xa39c [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 2.634119000 seconds] [Time since previous frame in this TCP stream: 5.000 microseconds] [SEQ/ACK analysis] [iRTT: 176.648000 milliseconds] [Bytes in flight: 3822] [Bytes sent since last PSH flag: 1274] [Client Contiguous Streams: 1] [Server Contiguous Streams: 2] TCP payload (1274 bytes) Hypertext Transfer Protocol File Data: 1274 bytes Data (1274 bytes) 0000 49 69 41 49 69 49 41 69 49 67 43 49 69 41 49 69 IiAIiIAiIgCIiAIi 0010 49 41 69 49 67 43 2b 45 41 6a 42 43 49 67 4d 45 IAiIgC+EAjBCIgME 0020 31 62 33 4c 64 4c 36 6d 6b 6b 6e 71 61 4c 76 61 1b3LdL6mkknqaLva 0030 73 66 75 4e 52 53 6e 6b 33 45 39 5a 48 74 53 66 sfuNRSnk3E9ZHtSf 0040 4b 51 56 72 4b 34 39 77 69 34 57 36 55 79 32 54 KQVrK49wi4W6Uy2T 0050 55 65 77 30 48 4c 65 55 59 35 6a 68 38 37 54 76 Uew0HLeUY5jh87Tv 0060 2f 55 69 4c 7a 56 61 63 58 76 59 32 75 6e 39 53 /UiLzVacXvY2un9S 0070 78 55 47 71 61 6d 37 65 48 76 2f 41 4a 4c 45 39 xUGqam7eHv/AJLE9 0080 7a 37 75 67 73 4f 77 33 56 70 44 44 2f 38 41 33 z7ugsOw3VpDD/8A3 0090 31 48 38 73 4b 35 70 4f 34 66 66 4c 73 39 73 6c 1H8sK5pO4ffLs9sl 00a0 35 31 4b 78 77 50 45 6a 6c 4a 6a 2f 45 51 69 4c 51KxwPEjlJj/EQiL 00b0 6d 71 55 5a 62 4d 31 36 2b 4f 72 55 59 5a 71 62 mqUZbM16+OrUYZqb 00c0 53 66 32 58 2b 6a 59 57 6c 75 34 35 70 61 77 76 Sf2X+jYWlu45pawv 00d0 6a 6d 6d 70 33 33 4b 71 5a 34 51 6b 71 79 48 4e jmmp33KqZ4QkqyHN 00e0 7a 35 47 44 77 66 33 4c 5a 44 49 32 78 73 44 47 z5GDwf3LZDI2xsDG 00f0 4e 44 57 6a 67 41 4d 59 52 46 36 59 52 55 56 73 NDWjgAMYRF6YRUVs 0100 66 4b 34 6a 46 56 73 52 4c 4e 56 6b 32 56 45 52 fK4jFVsRLNVk2VER 0110 46 30 4f 41 52 45 51 42 45 52 41 45 52 45 41 52 F0OAREQBERAEREAR 0120 45 51 42 45 52 41 45 52 45 41 52 45 51 42 45 52 EQBERAEREAREQBER 0130 41 45 52 45 41 52 45 51 42 45 52 41 45 52 45 41 AEREAREQBERAEREA 0140 52 45 51 42 45 52 41 45 52 45 41 52 45 51 42 45 REQBERAEREAREQBE 0150 52 41 45 52 45 41 52 45 51 42 45 52 41 45 52 45 RAEREAREQBERAERE 0160 41 52 45 51 42 45 52 41 66 2f 5a 22 29 3b 74 65 AREQBERAf/Z");te 0170 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 66 6f xt-align:left;fo 0180 6e 74 3a 6e 6f 72 6d 61 6c 20 6e 6f 72 6d 61 6c nt:normal normal 0190 20 6e 6f 72 6d 61 6c 20 6e 6f 72 6d 61 6c 20 31 normal normal 1 01a0 36 70 78 20 2f 20 31 36 70 78 20 22 53 65 67 6f 6px / 16px "Sego 01b0 65 20 55 49 22 2c 54 61 68 6f 6d 61 2c 73 61 6e e UI",Tahoma,san 01c0 73 2d 73 65 72 69 66 7d 23 75 70 65 30 7b 62 6f s-serif}#upe0{bo 01d0 74 74 6f 6d 3a 30 3b 68 65 69 67 68 74 3a 61 75 ttom:0;height:au 01e0 74 6f 3b 6c 65 66 74 3a 61 75 74 6f 3b 70 6f 73 to;left:auto;pos 01f0 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 ition:absolute;r 0200 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 ight:0;text-alig 0210 6e 3a 6c 65 66 74 3b 74 6f 70 3a 61 75 74 6f 3b n:left;top:auto; 0220 77 69 64 74 68 3a 61 75 74 6f 3b 66 6f 6e 74 3a width:auto;font: 0230 6e 6f 72 6d 61 6c 20 6e 6f 72 6d 61 6c 20 6e 6f normal normal no 0240 72 6d 61 6c 20 6e 6f 72 6d 61 6c 20 31 36 70 78 rmal normal 16px 0250 20 2f 20 6e 6f 72 6d 61 6c 20 22 53 65 67 6f 65 / normal "Segoe 0260 20 55 49 22 2c 54 61 68 6f 6d 61 2c 73 61 6e 73 UI",Tahoma,sans 0270 2d 73 65 72 69 66 7d 23 62 30 30 74 6e 7b 62 6f -serif}#b00tn{bo 0280 78 2d 73 69 7a 69 6e 67 3a 69 6e 69 74 69 61 6c x-sizing:initial 0290 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 64 69 73 70 ;color:#fff;disp 02a0 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b lay:inline-block 02b0 3b 68 65 69 67 68 74 3a 31 36 70 78 3b 74 65 78 ;height:16px;tex 02c0 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 74 t-align:center;t 02d0 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e ext-decoration:n 02e0 6f 6e 65 3b 74 65 78 74 2d 73 68 61 64 6f 77 3a one;text-shadow: 02f0 23 30 37 36 62 64 32 20 31 70 78 20 31 70 78 20 #076bd2 1px 1px 0300 31 70 78 3b 77 69 64 74 68 3a 34 34 2e 36 30 39 1px;width:44.609 0310 34 70 78 3b 63 6f 6c 75 6d 6e 2d 72 75 6c 65 2d 4px;column-rule- 0320 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 color:#fff;backg 0330 72 6f 75 6e 64 3a 72 67 62 61 28 30 2c 30 2c 30 round:rgba(0,0,0 0340 2c 30 29 20 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 ,0) -webkit-line 0350 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c ar-gradient(top, 0360 23 30 30 38 64 66 64 20 30 70 78 2c 23 30 33 37 #008dfd 0px,#037 0370 30 65 61 20 31 30 30 25 29 20 72 65 70 65 61 74 0ea 100%) repeat 0380 20 73 63 72 6f 6c 6c 20 30 20 30 20 2f 20 61 75 scroll 0 0 / au 0390 74 6f 20 70 61 64 64 69 6e 67 2d 62 6f 78 20 62 to padding-box b 03a0 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 72 64 65 72 order-box;border 03b0 3a 31 70 78 20 73 6f 6c 69 64 20 23 30 37 36 62 :1px solid #076b 03c0 64 32 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 d2;border-radius 03d0 3a 33 70 78 20 33 70 78 20 33 70 78 20 33 70 78 :3px 3px 3px 3px 03e0 3b 66 6f 6e 74 3a 6e 6f 72 6d 61 6c 20 6e 6f 72 ;font:normal nor 03f0 6d 61 6c 20 62 6f 6c 64 20 6e 6f 72 6d 61 6c 20 mal bold normal 0400 31 33 70 78 20 2f 20 31 36 2e 39 70 78 20 22 53 13px / 16.9px "S 0410 65 67 6f 65 20 55 49 22 2c 54 61 68 6f 6d 61 2c egoe UI",Tahoma, 0420 73 61 6e 73 2d 73 65 72 69 66 3b 6f 75 74 6c 69 sans-serif;outli 0430 6e 65 3a 23 66 66 66 20 6e 6f 6e 65 20 30 3b 70 ne:#fff none 0;p 0440 61 64 64 69 6e 67 3a 38 70 78 20 32 35 70 78 7d adding:8px 25px} 0450 2e 62 69 67 61 72 72 6f 77 7b 77 69 64 74 68 3a .bigarrow{width: 0460 31 32 38 70 78 3b 68 65 69 67 68 74 3a 32 30 38 128px;height:208 0470 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 px;position:fixe 0480 64 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c d;background:url 0490 28 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b (data:image/png; 04a0 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 base64,iVBORw0KG 04b0 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 goAAAANSUhEUgAAA 04c0 49 41 41 41 41 44 51 43 41 59 41 41 41 44 50 73 IAAAADQCAYAAADPs 04d0 47 6b 38 41 41 41 41 47 58 52 46 57 48 52 54 62 Gk8AAAAGXRFWHRTb 04e0 32 5a 30 64 32 46 79 5a 51 42 42 5a 47 39 69 5a 2Z0d2FyZQBBZG9iZ 04f0 53 42 4a 62 57 46 6e 5a 56 4a SBJbWFnZVJ Data […]: 496941496949416949674349694149694941694967432b45416a424349674d453162334c644c366d6b6b6e71614c76617366754e52536e6b3345395a487453664b5156724b343977693457365579325455657730484c655559356a68383754762f55694c7a56616358765932756e3953785 [Length: 1274]