Frame 136: Packet, 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) on interface unknown, id 0 Section number: 1 Interface id: 0 (unknown) Interface name: unknown Encapsulation type: Ethernet (1) Arrival Time: Apr 21, 2015 00:41:56.067869000 UTC UTC Arrival Time: Apr 21, 2015 00:41:56.067869000 UTC Epoch Arrival Time: 1429576916.067869000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 5.000 microseconds] [Time since reference or first frame: 3.071262000 seconds] Frame Number: 136 Frame Length: 1514 bytes (12112 bits) Capture Length: 1514 bytes (12112 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: VMware_8d:0a:0c (00:0c:29:8d:0a:0c), Dst: VMware_8c:8b:4a (00:0c:29:8c:8b:4a) Destination: VMware_8c:8b:4a (00:0c:29:8c:8b:4a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: VMware_8d:0a:0c (00:0c:29:8d:0a:0c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 178.62.126.102, Dst: 10.0.1.4 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0x8f49 (36681) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 51 Protocol: TCP (6) Header Checksum: 0x772a [validation disabled] [Header checksum status: Unverified] Source Address: 178.62.126.102 Destination Address: 10.0.1.4 [Source GeoIP: London, GB] [Source GeoIP City: London] [Source or Destination GeoIP City: London] [Source GeoIP Country: United Kingdom] [Source or Destination GeoIP Country: United Kingdom] [Source GeoIP ISO Two Letter Country Code: GB] [Source or Destination GeoIP ISO Two Letter Country Code: GB] [Source GeoIP Latitude: 51.5353] [Source or Destination GeoIP Latitude: 51.5353] [Source GeoIP Longitude: -0.6658] [Source or Destination GeoIP Longitude: -0.6658] [Stream index: 3] Transmission Control Protocol, Src Port: 80, Dst Port: 59700, Seq: 91601, Ack: 420, Len: 1448 Source Port: 80 Destination Port: 59700 [Stream index: 3] [Stream Packet Number: 104] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1448] Sequence Number: 91601 (relative sequence number) Sequence Number (raw): 3473278503 [Next Sequence Number: 93049 (relative sequence number)] Acknowledgment Number: 420 (relative ack number) Acknowledgment number (raw): 2263567294 1000 .... = Header Length: 32 bytes (8) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 235 [Calculated window size: 30080] [Window size scaling factor: 128] Checksum: 0x152b [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps TCP Option - No-Operation (NOP) Kind: No-Operation (1) TCP Option - No-Operation (NOP) Kind: No-Operation (1) TCP Option - Timestamps: TSval 1787375471, TSecr 10806108 Kind: Time Stamp Option (8) Length: 10 Timestamp value: 1787375471 Timestamp echo reply: 10806108 [Timestamps] [Time since first frame in this TCP stream: 106.119000 milliseconds] [Time since previous frame in this TCP stream: 5.000 microseconds] [SEQ/ACK analysis] [iRTT: 20.332000 milliseconds] [Bytes in flight: 4344] [Bytes sent since last PSH flag: 9064] [Client Contiguous Streams: 1] [Server Contiguous Streams: 1] TCP payload (1448 bytes) Hypertext Transfer Protocol File Data: 1448 bytes Data (1448 bytes) 0000 59 c4 57 56 33 db fc 09 43 32 51 a8 1a 92 8a c6 Y.WV3...C2Q..... 0010 5f fa cf 23 5b 9a 13 87 6d b0 5d e2 8a bc 3a 56 _..#[...m.]...:V 0020 52 00 ac 80 ed 66 32 a7 76 86 1d ea 73 5a 3c 12 R....f2.v...sZ<. 0030 8c 86 c5 c7 2a 22 8f 10 7a 3f 41 96 21 88 38 59 ....*"..z?A.!.8Y 0040 3e b8 04 c7 a1 bc ca 79 03 05 56 e7 12 34 d6 95 >......y..V..4.. 0050 39 b4 f1 22 4e 77 8f 33 44 00 5b d9 90 98 e4 b5 9.."Nw.3D.[..... 0060 a3 42 6d 36 31 f3 00 99 6d 61 0e 26 18 48 0f 15 .Bm61...ma.&.H.. 0070 57 e4 73 fa ab 3d ff ba 80 98 35 08 57 76 ed 38 W.s..=....5.Wv.8 0080 06 d5 ab fb 42 83 3d 8c 06 c2 f1 72 6b d6 ec bc ....B.=....rk... 0090 2b 5a ed 11 0c db af 34 d5 01 c2 82 ef e8 dd 84 +Z.....4........ 00a0 99 59 1b 71 ad 1f f8 e5 26 9b 34 2b 9a 39 2a a9 .Y.q....&.4+.9*. 00b0 c0 f1 bf c3 b1 9f 81 21 27 98 e7 97 01 48 ee 6a .......!'....H.j 00c0 f3 9a d6 ef d5 94 e5 a2 b1 f5 3e 76 11 98 c7 1b ..........>v.... 00d0 0f 79 31 a0 d9 e5 7d 38 7f bc c3 67 c7 60 01 a7 .y1...}8...g.`.. 00e0 cf e1 65 b2 33 f7 0c 7f 2a 3d d4 e5 68 d8 01 f9 ..e.3...*=..h... 00f0 32 f1 b2 8b 60 84 15 42 66 9b fd 63 d8 2d de 78 2...`..Bf..c.-.x 0100 31 a8 88 78 87 a1 df 01 ee 77 e5 ad d7 9c d0 03 1..x.....w...... 0110 eb 24 b2 47 45 22 b5 4d 3a 3d f4 28 da 48 16 39 .$.GE".M:=.(.H.9 0120 cb 3d cc 12 70 81 72 91 db e6 86 81 8f 4d cf 09 .=..p.r......M.. 0130 24 6a c2 38 86 9a 84 3b f7 f3 09 1d 4f a5 2f 69 $j.8...;....O./i 0140 96 05 f4 65 55 bb a2 04 30 c6 81 c4 26 cb 18 7c ...eU...0...&..| 0150 a5 48 91 f3 c9 ab 53 58 89 b7 41 ea fc 2f 7d 9e .H....SX..A../}. 0160 d1 c3 80 14 6c 25 4c 00 56 c0 7f fa 51 fd 7d b2 ....l%L.V...Q.}. 0170 d1 5f 35 df 8d c1 4c 5f cc db a4 d1 54 ec 78 d6 ._5...L_....T.x. 0180 ed 60 b5 e8 18 9b fa fe c2 ba d3 35 88 35 52 bd .`.........5.5R. 0190 41 41 f6 51 6c 92 94 ea 30 36 55 07 2d 81 8a 72 AA.Ql...06U.-..r 01a0 8c e6 fa f6 60 64 59 14 cb 5a d4 21 0d c2 c2 92 ....`dY..Z.!.... 01b0 48 6e c6 2c bd 65 91 fa f4 e9 be 70 57 b1 93 ff Hn.,.e.....pW... 01c0 bd a6 e2 ff 39 1c a6 cf ad 7f 6b 6f b8 91 46 47 ....9.....ko..FG 01d0 2b 80 d0 ed 32 fa 32 59 24 ec 1c 64 c8 93 91 c4 +...2.2Y$..d.... 01e0 c5 d1 73 3f bf 44 fb 71 25 e7 2e c3 0b b0 45 a6 ..s?.D.q%.....E. 01f0 4e ae 9c 40 44 8e cd 54 d8 04 fd ba cd 86 b6 e0 N..@D..T........ 0200 ab 7f a4 ee d4 57 a9 7a 3d e7 de ae 34 4f 7e 16 .....W.z=...4O~. 0210 47 6e 44 75 57 d2 ce cc 09 c8 ff 77 84 59 03 e6 GnDuW......w.Y.. 0220 8c d8 dd da 51 d4 1c f0 1b 95 a9 8c 57 f7 be ff ....Q.......W... 0230 19 fd 0f 59 76 36 92 a1 18 85 23 a7 1d e5 ed 0f ...Yv6....#..... 0240 a9 95 cd 09 f1 9d 11 88 7b ab b9 83 48 14 9d b5 ........{...H... 0250 ca 2a 8e 0c d1 c1 7c b6 78 21 96 a7 ea 87 4e 8d .*....|.x!....N. 0260 42 f3 c0 b2 10 30 44 96 65 25 6f 59 3e 9b 3c 6c B....0D.e%oY>.