Frame 1002: Packet, 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) on interface unknown, id 0 Section number: 1 Interface id: 0 (unknown) Interface name: unknown Encapsulation type: Ethernet (1) Arrival Time: Apr 21, 2015 00:41:56.214543000 UTC UTC Arrival Time: Apr 21, 2015 00:41:56.214543000 UTC Epoch Arrival Time: 1429576916.214543000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 3.000 microseconds] [Time since reference or first frame: 3.217936000 seconds] Frame Number: 1002 Frame Length: 1514 bytes (12112 bits) Capture Length: 1514 bytes (12112 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: VMware_8d:0a:0c (00:0c:29:8d:0a:0c), Dst: VMware_8c:8b:4a (00:0c:29:8c:8b:4a) Destination: VMware_8c:8b:4a (00:0c:29:8c:8b:4a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: VMware_8d:0a:0c (00:0c:29:8d:0a:0c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 178.62.126.102, Dst: 10.0.1.4 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0x9210 (37392) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 51 Protocol: TCP (6) Header Checksum: 0x7463 [validation disabled] [Header checksum status: Unverified] Source Address: 178.62.126.102 Destination Address: 10.0.1.4 [Source GeoIP: London, GB] [Source GeoIP City: London] [Source or Destination GeoIP City: London] [Source GeoIP Country: United Kingdom] [Source or Destination GeoIP Country: United Kingdom] [Source GeoIP ISO Two Letter Country Code: GB] [Source or Destination GeoIP ISO Two Letter Country Code: GB] [Source GeoIP Latitude: 51.5353] [Source or Destination GeoIP Latitude: 51.5353] [Source GeoIP Longitude: -0.6658] [Source or Destination GeoIP Longitude: -0.6658] [Stream index: 3] Transmission Control Protocol, Src Port: 80, Dst Port: 59700, Seq: 1121129, Ack: 420, Len: 1448 Source Port: 80 Destination Port: 59700 [Stream index: 3] [Stream Packet Number: 970] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1448] Sequence Number: 1121129 (relative sequence number) Sequence Number (raw): 3474308031 [Next Sequence Number: 1122577 (relative sequence number)] Acknowledgment Number: 420 (relative ack number) Acknowledgment number (raw): 2263567294 1000 .... = Header Length: 32 bytes (8) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 235 [Calculated window size: 30080] [Window size scaling factor: 128] Checksum: 0x79cc [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps TCP Option - No-Operation (NOP) Kind: No-Operation (1) TCP Option - No-Operation (NOP) Kind: No-Operation (1) TCP Option - Timestamps: TSval 1787375507, TSecr 10806247 Kind: Time Stamp Option (8) Length: 10 Timestamp value: 1787375507 Timestamp echo reply: 10806247 [Timestamps] [Time since first frame in this TCP stream: 252.793000 milliseconds] [Time since previous frame in this TCP stream: 3.000 microseconds] [SEQ/ACK analysis] [iRTT: 20.332000 milliseconds] [Bytes in flight: 72400] [Bytes sent since last PSH flag: 5792] [Client Contiguous Streams: 1] [Server Contiguous Streams: 1] TCP payload (1448 bytes) Hypertext Transfer Protocol File Data: 1448 bytes Data (1448 bytes) 0000 75 18 ff ee 17 d0 20 34 58 4d ca 3b 18 56 70 3c u..... 4XM.;.Vp< 0010 b0 a8 81 70 cb ab 77 18 fb 04 cf f9 38 4b 77 c3 ...p..w.....8Kw. 0020 48 53 6c 3b 58 15 be 04 67 9d d5 8f 3c ec 6c cf HSl;X...g...<.l. 0030 5c 2f 97 54 15 a7 f0 cb 2e d1 70 56 43 98 56 ed \/.T......pVC.V. 0040 b3 f0 73 3f d4 5b a4 c0 d9 29 f4 14 9d 8a 07 8a ..s?.[...)...... 0050 4a 93 31 7e 6d 70 0f 3c ae bd ec 76 67 34 f7 f5 J.1~mp.<...vg4.. 0060 63 be 5b 23 3e ca 90 f5 06 d0 53 91 52 2f 6f 29 c.[#>.....S.R/o) 0070 6b c3 07 cc 96 e0 e4 38 6d 59 93 59 c5 df 7c 0f k......8mY.Y..|. 0080 fd a3 cc ea 8b d8 26 b3 4e f9 db a5 e4 3c 09 20 ......&.N....<. 0090 ea 9d 90 da 54 9c 48 b8 31 a1 48 51 b0 77 f4 db ....T.H.1.HQ.w.. 00a0 ca 43 65 92 d0 b7 e8 8e b7 9b dd 50 6b bb 62 3d .Ce........Pk.b= 00b0 5d a4 3b 43 75 6d 50 04 b3 54 49 93 e8 05 23 bb ].;CumP..TI...#. 00c0 0f 20 04 53 74 e3 0f 30 c5 57 6e 04 5c e1 50 90 . .St..0.Wn.\.P. 00d0 73 0b d6 59 ca ee 08 81 59 50 b9 48 20 a9 0f 41 s..Y....YP.H ..A 00e0 59 36 f5 d2 2d 0d ef 63 8d fd 70 fd 2c f2 c0 b9 Y6..-..c..p.,... 00f0 f0 bb b7 a9 13 63 d2 d8 4a 8d 31 1f d1 2e a0 e2 .....c..J.1..... 0100 a9 ef 44 5f a7 ac 08 3b 5b a5 54 5a f5 b2 b7 27 ..D_...;[.TZ...' 0110 74 fc 5c 36 99 18 25 49 9e c3 70 08 77 bb 14 99 t.\6..%I..p.w... 0120 b1 c4 31 4e f9 ff 2e fa fe 4e 9b 3c 73 b0 11 d5 ..1N.....N.......3.<. 03b0 4e d7 7b 1b e8 67 78 dd 31 9b 93 d9 65 28 ba e6 N.{..gx.1...e(.. 03c0 28 74 3b 4c 29 d0 f2 71 e5 1b 7c c5 7c 7a 18 a4 (t;L)..q..|.|z.. 03d0 a7 9c af 5f cb fc f6 83 5b 82 8f 0a ec f5 d7 39 ..._....[......9 03e0 53 02 c2 3b 7a 13 94 ed 7a 6c fe dd 82 94 b0 12 S..;z...zl...... 03f0 13 dd ed 65 77 9c 88 a8 7f eb 9c 7d b0 21 57 41 ...ew......}.!WA 0400 b1 e4 f1 bf 80 be 65 c2 87 6d 39 5c 25 4b d4 22 ......e..m9\%K." 0410 57 4b 4b 95 b8 53 da 63 5c 14 11 79 b2 25 f4 f6 WKK..S.c\..y.%.. 0420 2b a2 82 f4 5a 0e f3 bc 37 19 8a 2c 66 62 20 81 +...Z...7..,fb . 0430 92 b2 c4 17 03 b0 bd 94 f2 d1 eb 53 12 bb 0a f5 ...........S.... 0440 59 46 84 ad 7d ec 11 6f 18 b3 a7 c1 ad cd 70 70 YF..}..o......pp 0450 23 c5 07 22 aa 46 d2 ae 39 12 05 49 82 50 06 3d #..".F..9..I.P.= 0460 c6 b5 a0 47 66 69 34 5e a4 bb bc 59 cd c8 82 8c ...Gfi4^...Y.... 0470 5a 20 6f ac 51 d7 6c 73 b6 d9 67 12 d9 9a 02 94 Z o.Q.ls..g..... 0480 1c f8 aa 2f 3f 16 1c e8 56 e7 f2 05 fd 2d 51 a7 .../?...V....-Q. 0490 db 5a d8 cf ff b2 62 04 ff dc 35 d2 f4 51 d7 8d .Z....b...5..Q.. 04a0 07 4b 92 3d fc d7 50 f8 98 d6 27 53 dd 2d af c0 .K.=..P...'S.-.. 04b0 64 ca 27 27 4c 37 24 67 5a 68 5c 2c 7e 3d 19 e5 d.''L7$gZh\,~=.. 04c0 b3 77 59 65 a0 e2 06 ea 31 3a 3e 63 81 6d 7c c6 .wYe....1:>c.m|. 04d0 b1 6d 16 c2 21 89 c8 a3 1a 3f 2d 24 f6 93 9e 36 .m..!....?-$...6 04e0 1b be fc 8a 5e c2 a3 ed d0 7f b1 0b 04 24 b4 48 ....^........$.H 04f0 21 fc 95 14 50 b2 c2 ba f4 74 70 03 58 fa ec 33 !...P....tp.X..3 0500 3a a5 f0 23 1d 43 30 8d f6 ba 88 3e 03 86 c8 45 :..#.C0....>...E 0510 08 3e 14 3e e2 57 c6 ed 84 b6 46 96 b5 22 61 ed .>.>.W....F.."a. 0520 37 fe 19 99 65 13 9b a6 e5 5a f5 3c cd 6b d6 fe 7...e....Z.<.k.. 0530 d9 bf bc 1c 4d f9 48 6d bd 11 cb 74 14 d3 ef 20 ....M.Hm...t... 0540 35 40 66 0d a7 50 6d c2 3b 1c b1 af 93 ed b0 49 5@f..Pm.;......I 0550 d2 32 5c 0c 40 53 fb e4 81 91 51 53 fa 11 04 e7 .2\.@S....QS.... 0560 bb e4 83 8e 46 fa ef 30 41 05 80 84 5b 25 95 56 ....F..0A...[%.V 0570 33 28 1e 1e 4b 30 d6 50 a8 e7 af d9 6a 41 80 a2 3(..K0.P....jA.. 0580 42 f2 a9 7c ec 1f 48 fa a3 e5 7f 5c 3e 51 70 86 B..|..H....\>Qp. 0590 9e 81 12 79 f4 03 da 1b ba a9 a5 99 af f3 3f 2c ...y..........?, 05a0 f1 cc 4e 61 e8 56 69 4a ..Na.ViJ Data […]: 7518ffee17d02034584dca3b1856703cb0a88170cbab7718fb04cff9384b77c348536c3b5815be04679dd58f3cec6ccf5c2f975415a7f0cb2ed17056439856edb3f0733fd45ba4c0d929f4149d8a078a4a93317e6d700f3caebdec766734f7f563be5b233eca90f506d05391522f6f296bc [Length: 1448]