Frame 891: Packet, 1340 bytes on wire (10720 bits), 1340 bytes captured (10720 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:22:52.386327000 UTC UTC Arrival Time: Nov 21, 2017 01:22:52.386327000 UTC Epoch Arrival Time: 1511227372.386327000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 185.000 microseconds] [Time since reference or first frame: 10.730870000 seconds] Frame Number: 891 Frame Length: 1340 bytes (10720 bits) Capture Length: 1340 bytes (10720 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Cisco_32:54:f9 (00:0c:30:32:54:f9), Dst: Dell_86:4d:1a (5c:f9:dd:86:4d:1a) Destination: Dell_86:4d:1a (5c:f9:dd:86:4d:1a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_32:54:f9 (00:0c:30:32:54:f9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 212.1.208.53, Dst: 172.16.123.105 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1326 Identification: 0xf4e4 (62692) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x7534 [validation disabled] [Header checksum status: Unverified] Source Address: 212.1.208.53 Destination Address: 172.16.123.105 [Source GeoIP: US] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP Latitude: 37.751] [Source or Destination GeoIP Latitude: 37.751] [Source GeoIP Longitude: -97.822] [Source or Destination GeoIP Longitude: -97.822] [Stream index: 3] Transmission Control Protocol, Src Port: 80, Dst Port: 49180, Seq: 109311, Ack: 424, Len: 1286 Source Port: 80 Destination Port: 49180 [Stream index: 11] [Stream Packet Number: 119] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1286] Sequence Number: 109311 (relative sequence number) Sequence Number (raw): 3992286229 [Next Sequence Number: 110597 (relative sequence number)] Acknowledgment Number: 424 (relative ack number) Acknowledgment number (raw): 3298377319 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdf5b [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 1.565708000 seconds] [Time since previous frame in this TCP stream: 185.000 microseconds] [SEQ/ACK analysis] [iRTT: 67.864000 milliseconds] [Bytes in flight: 2572] [Bytes sent since last PSH flag: 1286] [Client Contiguous Streams: 1] [Server Contiguous Streams: 2] TCP payload (1286 bytes) Hypertext Transfer Protocol File Data: 1286 bytes Data (1286 bytes) 0000 65 fc 00 8b 35 a8 b0 42 00 8b ce 83 e1 1f 33 35 e...5..B......35 0010 40 83 45 00 d3 ce 89 75 e4 c7 45 fc fe ff ff ff @.E....u..E..... 0020 e8 0d 00 00 00 8b c6 e8 0d 4b ff ff c2 0c 00 8b .........K...... 0030 75 e4 8b 4d 10 ff 31 e8 95 eb ff ff 59 c3 8b ff u..M..1.....Y... 0040 55 8b ec 83 ec 0c 8b 45 08 8d 4d ff 89 45 f8 89 U......E..M..E.. 0050 45 f4 8d 45 f8 50 ff 75 0c 8d 45 f4 50 e8 82 ff E..E.P.u..E.P... 0060 ff ff 8b e5 5d c3 8b ff 55 8b ec 8b 45 08 48 83 ....]...U...E.H. 0070 e8 01 74 2d 83 e8 04 74 13 83 e8 09 74 1c 83 e8 ..t-...t....t... 0080 06 74 10 83 e8 01 74 04 33 c0 5d c3 b8 40 83 45 .t....t.3.]..@.E 0090 00 5d c3 b8 3c 83 45 00 5d c3 b8 44 83 45 00 5d .]..<.E.]..D.E.] 00a0 c3 b8 38 83 45 00 5d c3 8b ff 55 8b ec 6b 0d b8 ..8.E.]...U..k.. 00b0 40 42 00 0c 8b 45 0c 03 c8 3b c1 74 0f 8b 55 08 @B...E...;.t..U. 00c0 39 50 04 74 09 83 c0 0c 3b c1 75 f4 33 c0 5d c3 9P.t....;.u.3.]. 00d0 8b ff 55 8b ec 51 8d 45 ff 50 6a 03 e8 5d ff ff ..U..Q.E.Pj..].. 00e0 ff 59 59 8b e5 5d c3 8b ff 55 8b ec ff 75 08 b9 .YY..]...U...u.. 00f0 38 83 45 00 e8 bd c8 ff ff ff 75 08 b9 3c 83 45 8.E.......u..<.E 0100 00 e8 b0 c8 ff ff ff 75 08 b9 40 83 45 00 e8 a3 .......u..@.E... 0110 c8 ff ff ff 75 08 b9 44 83 45 00 e8 96 c8 ff ff ....u..D.E...... 0120 5d c3 e8 42 d6 ff ff 83 c0 08 c3 6a 2c 68 50 9a ]..B.......j,hP. 0130 42 00 e8 2c 64 00 00 33 db 89 5d d4 21 5d cc b1 B..,d..3..].!].. 0140 01 88 4d e3 8b 75 08 6a 08 5f 3b f7 7f 18 74 35 ..M..u.j._;...t5 0150 8d 46 ff 83 e8 01 74 22 48 83 e8 01 74 27 48 83 .F....t"H...t'H. 0160 e8 01 75 4c eb 14 83 fe 0b 74 1a 83 fe 0f 74 0a ..uL.....t....t. 0170 83 fe 14 7e 3b 83 fe 16 7f 36 56 e8 e6 fe ff ff ...~;....6V..... 0180 83 c4 04 eb 45 e8 63 d6 ff ff 8b d8 89 5d d4 85 ....E.c......].. 0190 db 75 08 83 c8 ff e9 92 01 00 00 ff 33 56 e8 05 .u..........3V.. 01a0 ff ff ff 59 59 33 c9 85 c0 0f 95 c1 85 c9 75 12 ...YY3........u. 01b0 e8 d4 d0 ff ff c7 00 16 00 00 00 e8 a8 cf ff ff ................ 01c0 eb d1 83 c0 08 32 c9 88 4d e3 89 45 d8 83 65 d0 .....2..M..E..e. 01d0 00 84 c9 74 0b 6a 03 e8 ad e9 ff ff 59 8a 4d e3 ...t.j......Y.M. 01e0 83 65 dc 00 c6 45 e2 00 83 65 fc 00 8b 45 d8 84 .e...E...e...E.. 01f0 c9 74 14 8b 15 a8 b0 42 00 8b ca 83 e1 1f 33 10 .t.....B......3. 0200 d3 ca 8a 4d e3 eb 02 8b 10 8b c2 89 45 dc 33 d2 ...M........E.3. 0210 83 f8 01 0f 94 c2 89 55 c8 88 55 e2 84 d2 0f 85 .......U..U..... 0220 8a 00 00 00 85 c0 75 13 84 c9 74 08 6a 03 e8 9e ......u...t.j... 0230 e9 ff ff 59 6a 03 e8 19 bd ff ff 3b f7 74 0a 83 ...Yj......;.t.. 0240 fe 0b 74 05 83 fe 04 75 23 8b 43 04 89 45 d0 83 ..t....u#.C..E.. 0250 63 04 00 3b f7 75 3b e8 c6 fe ff ff 8b 00 89 45 c..;.u;........E 0260 cc e8 bc fe ff ff c7 00 8c 00 00 00 3b f7 75 22 ............;.u" 0270 6b 05 bc 40 42 00 0c 03 03 6b 0d c0 40 42 00 0c k..@B....k..@B.. 0280 03 c8 89 45 c4 3b c1 74 25 83 60 08 00 83 c0 0c ...E.;.t%.`..... 0290 eb f0 a1 a8 b0 42 00 83 e0 1f 6a 20 59 2b c8 33 .....B....j Y+.3 02a0 c0 d3 c8 33 05 a8 b0 42 00 8b 4d d8 89 01 c7 45 ...3...B..M....E 02b0 fc fe ff ff ff e8 31 00 00 00 80 7d c8 00 75 6b ......1....}..uk 02c0 3b f7 75 36 e8 a0 d4 ff ff ff 70 08 57 8b 4d dc ;.u6......p.W.M. 02d0 ff 15 d8 21 42 00 ff 55 dc 59 eb 2b 6a 08 5f 8b ...!B..U.Y.+j._. 02e0 75 08 8b 5d d4 8a 45 e2 89 45 c8 80 7d e3 00 74 u..]..E..E..}..t 02f0 08 6a 03 e8 d9 e8 ff ff 59 c3 56 8b 4d dc ff 15 .j......Y.V.M... 0300 d8 21 42 00 ff 55 dc 59 3b f7 74 0a 83 fe 0b 74 .!B..U.Y;.t....t 0310 05 83 fe 04 75 15 8b 45 d0 89 43 04 3b f7 75 0b ....u..E..C.;.u. 0320 e8 44 d4 ff ff 8b 4d cc 89 48 08 33 c0 e8 7a 62 .D....M..H.3..zb 0330 00 00 c3 8b ff 55 8b ec 51 51 53 57 6a 30 6a 40 .....U..QQSWj0j@ 0340 e8 fc cb ff ff 8b f8 33 db 89 7d f8 59 59 85 ff .......3..}.YY.. 0350 75 04 8b fb eb 48 8d 87 00 0c 00 00 3b f8 74 3e u....H......;.t> 0360 56 8d 77 20 8b f8 53 68 a0 0f 00 00 8d 46 e0 50 V.w ..Sh.....F.P 0370 e8 e5 ea ff ff 83 4e f8 ff 89 1e 8d 76 30 89 5e ......N.....v0.^ 0380 d4 8d 46 e0 c7 46 d8 00 00 0a 0a c6 46 dc 0a 80 ..F..F......F... 0390 66 dd f8 88 5e de 3b c7 75 cc 8b 7d f8 5e 53 e8 f...^.;.u..}.^S. 03a0 d2 ca ff ff 59 8b c7 5f 5b 8b e5 5d c3 8b ff 55 ....Y.._[..]...U 03b0 8b ec 56 8b 75 08 85 f6 74 25 53 8d 9e 00 0c 00 ..V.u...t%S..... 03c0 00 57 8b fe 3b f3 74 0e 57 ff 15 5c 21 42 00 83 .W..;.t.W..\!B.. 03d0 c7 30 3b fb 75 f2 56 e8 9a ca ff ff 59 5f 5b 5e .0;.u.V.....Y_[^ 03e0 5d c3 6a 14 68 90 9a 42 00 e8 05 47 ff ff 81 7d ].j.h..B...G...} 03f0 08 00 20 00 00 1b c0 f7 d8 75 17 e8 89 ce ff ff .. ......u...... 0400 6a 09 5e 89 30 e8 5e cd ff ff 8b c6 e8 28 47 ff j.^.0.^......(G. 0410 ff c3 33 f6 89 75 e4 6a 07 e8 6b e7 ff ff 59 89 ..3..u.j..k...Y. 0420 75 fc 8b fe a1 e0 80 45 00 89 7d e0 39 45 08 7c u......E..}.9E.| 0430 1f 39 34 bd e0 7e 45 00 75 31 e8 f4 fe ff ff 89 .94..~E.u1...... 0440 04 bd e0 7e 45 00 85 c0 75 14 6a 0c 5e 89 75 e4 ...~E...u.j.^.u. 0450 c7 45 fc fe ff ff ff e8 15 00 00 00 eb ac a1 e0 .E.............. 0460 80 45 00 83 c0 40 a3 e0 80 45 00 47 eb bb 8b 75 .E...@...E.G...u 0470 e4 6a 07 e8 59 e7 ff ff 59 c3 8b ff 55 8b ec 8b .j..Y...Y...U... 0480 45 08 8b c8 83 e0 3f c1 f9 06 6b c0 30 03 04 8d E.....?...k.0... 0490 e0 7e 45 00 50 ff 15 54 21 42 00 5d c3 8b ff 55 .~E.P..T!B.]...U 04a0 8b ec 8b 45 08 8b c8 83 e0 3f c1 f9 06 6b c0 30 ...E.....?...k.0 04b0 03 04 8d e0 7e 45 00 50 ff 15 58 21 42 00 5d c3 ....~E.P..X!B.]. 04c0 8b ff 55 8b ec 53 56 8b 75 08 57 85 f6 78 67 3b ..U..SV.u.W..xg; 04d0 35 e0 80 45 00 73 5f 8b c6 8b fe 83 e0 3f c1 ff 5..E.s_......?.. 04e0 06 6b d8 30 8b 04 bd e0 7e 45 00 f6 44 03 28 01 .k.0....~E..D.(. 04f0 74 44 83 7c 03 18 ff 74 3d e8 b8 c5 ff ff 83 f8 tD.|...t=....... 0500 01 75 23 33 c0 2b .u#3.+ Data […]: 65fc008b35a8b042008bce83e11f333540834500d3ce8975e4c745fcfeffffffe80d0000008bc6e80d4bffffc20c008b75e48b4d10ff31e895ebffff59c38bff558bec83ec0c8b45088d4dff8945f88945f48d45f850ff750c8d45f450e882ffffff8be55dc38bff558bec8b45084883e80 [Length: 1286]