Frame 221: 495 bytes on wire (3960 bits), 495 bytes captured (3960 bits) on interface 0
Ethernet II, Src: IntelCor_ae:3e:31 (7c:7a:91:ae:3e:31), Dst: c2:c9:76:be:3a:cf (c2:c9:76:be:3a:cf)
Internet Protocol Version 4, Src: 192.168.43.188, Dst: 210.71.181.65
Transmission Control Protocol, Src Port: 7502, Dst Port: 80, Seq: 7875, Ack: 165812, Len: 441
Source Port: 7502
Destination Port: 80
[Stream index: 1]
[TCP Segment Len: 441]
Sequence number: 7875 (relative sequence number)
[Next sequence number: 8316 (relative sequence number)]
Acknowledgment number: 165812 (relative ack number)
0101 .... = Header Length: 20 bytes (5)
Flags: 0x018 (PSH, ACK)
Window size value: 65280
[Calculated window size: 65280]
[Window size scaling factor: -1 (unknown)]
Checksum: 0xaf66 [unverified]
[Checksum Status: Unverified]
Urgent pointer: 0
[SEQ/ACK analysis]
[Bytes in flight: 1801]
[Bytes sent since last PSH flag: 1801]
TCP payload (441 bytes)
TCP segment data (441 bytes)
[2 Reassembled TCP Segments (1801 bytes): #220(1360), #221(441)]
Hypertext Transfer Protocol
POST /ctno11.jsp?y7bRbp=qpH4ovn25DemhZVQbaohSZmMUj4pKKeHVTkm.jtuq.lhe2Jp7Cqss.aBeBvWZVDIj36PtKnhk0552ERt7ZKIpczGjk3OP9J3pSMZVP_M9eDV.YUWlgDKe6DpZqI0.dUMN_7wZPDKkGCyx4rR HTTP/1.1\r\n
Host: railway.hinet.net\r\n
Connection: keep-alive\r\n
Content-Length: 379\r\n
Cache-Control: max-age=0\r\n
Origin: http://railway.hinet.net\r\n
Upgrade-Insecure-Requests: 1\r\n
Content-Type: application/x-www-form-urlencoded\r\n
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.94 Safari/537.36\r\n
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8\r\n
Referer: http://railway.hinet.net/check_ctno1.jsp\r\n
Accept-Encoding: gzip, deflate\r\n
Accept-Language: en-US,en;q=0.9,zh-TW;q=0.8,zh;q=0.7\r\n
[truncated]Cookie: FSSBBIl1UgzbN7N80S=S2E38uJ3Ctw62kIWWoWCCmkrN1IURteK4kNp5_2oAex88dtF7eGhl7nN5vJrqZ_8; JSESSIONID=cygJ+3652604395-7W2KnaNBzjmWMJxMJ5r2qw0pLp8R3eEo.Zw65TIO3aDSVh0ubT7aAzCHT73qXdfZQq58cDSxQb4cfZbsN6yLq1tpboHab6Y.oQ96pPbKqg4
\r\n
[Full request URI: http://railway.hinet.net/ctno11.jsp?y7bRbp=qpH4ovn25DemhZVQbaohSZmMUj4pKKeHVTkm.jtuq.lhe2Jp7Cqss.aBeBvWZVDIj36PtKnhk0552ERt7ZKIpczGjk3OP9J3pSMZVP_M9eDV.YUWlgDKe6DpZqI0.dUMN_7wZPDKkGCyx4rR]
[HTTP request 6/6]
[Prev request in frame: 139]
[Response in frame: 234]
File Data: 379 bytes
HTML Form URL Encoded: application/x-www-form-urlencoded
Form item: "c1K5tw0w6_" = "Big5-g2ZkpaMbW2YeAhO4gmbaM0L6hjwSOVlkiNIdRBpoSen2azci5XbmOVYDYT_CAq9YsqdV97ClGzHTWLdZMPSBefVdH.Pqb6Ph0N74TydsyoTB6X3xaiBh7pekYJfrAnPc127K1GZnet5ibHkRNaVFPr1da9u5RGTGyE49uzXX5A9L.KdvmZuVn.lzriWox8Nzp25fPlvZBJZCHZX
1 人回報・1 則回應・8 年前