Frame 410: Packet, 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) on interface unknown, id 0 Section number: 1 Interface id: 0 (unknown) Interface name: unknown Encapsulation type: Ethernet (1) Arrival Time: Apr 21, 2015 00:41:56.141302000 UTC UTC Arrival Time: Apr 21, 2015 00:41:56.141302000 UTC Epoch Arrival Time: 1429576916.141302000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 8.000 microseconds] [Time since reference or first frame: 3.144695000 seconds] Frame Number: 410 Frame Length: 1514 bytes (12112 bits) Capture Length: 1514 bytes (12112 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: VMware_8d:0a:0c (00:0c:29:8d:0a:0c), Dst: VMware_8c:8b:4a (00:0c:29:8c:8b:4a) Destination: VMware_8c:8b:4a (00:0c:29:8c:8b:4a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: VMware_8d:0a:0c (00:0c:29:8d:0a:0c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 178.62.126.102, Dst: 10.0.1.4 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0x9025 (36901) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 51 Protocol: TCP (6) Header Checksum: 0x764e [validation disabled] [Header checksum status: Unverified] Source Address: 178.62.126.102 Destination Address: 10.0.1.4 [Source GeoIP: London, GB] [Source GeoIP City: London] [Source or Destination GeoIP City: London] [Source GeoIP Country: United Kingdom] [Source or Destination GeoIP Country: United Kingdom] [Source GeoIP ISO Two Letter Country Code: GB] [Source or Destination GeoIP ISO Two Letter Country Code: GB] [Source GeoIP Latitude: 51.5353] [Source or Destination GeoIP Latitude: 51.5353] [Source GeoIP Longitude: -0.6658] [Source or Destination GeoIP Longitude: -0.6658] [Stream index: 3] Transmission Control Protocol, Src Port: 80, Dst Port: 59700, Seq: 410161, Ack: 420, Len: 1448 Source Port: 80 Destination Port: 59700 [Stream index: 3] [Stream Packet Number: 378] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1448] Sequence Number: 410161 (relative sequence number) Sequence Number (raw): 3473597063 [Next Sequence Number: 411609 (relative sequence number)] Acknowledgment Number: 420 (relative ack number) Acknowledgment number (raw): 2263567294 1000 .... = Header Length: 32 bytes (8) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 235 [Calculated window size: 30080] [Window size scaling factor: 128] Checksum: 0xc360 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps TCP Option - No-Operation (NOP) Kind: No-Operation (1) TCP Option - No-Operation (NOP) Kind: No-Operation (1) TCP Option - Timestamps: TSval 1787375489, TSecr 10806174 Kind: Time Stamp Option (8) Length: 10 Timestamp value: 1787375489 Timestamp echo reply: 10806174 [Timestamps] [Time since first frame in this TCP stream: 179.552000 milliseconds] [Time since previous frame in this TCP stream: 8.000 microseconds] [SEQ/ACK analysis] [iRTT: 20.332000 milliseconds] [Bytes in flight: 44888] [Bytes sent since last PSH flag: 18824] [Client Contiguous Streams: 1] [Server Contiguous Streams: 1] TCP payload (1448 bytes) Hypertext Transfer Protocol File Data: 1448 bytes Data (1448 bytes) 0000 4e 22 39 2e 9e be 40 cf 79 db af ba 89 f8 35 da N"9...@.y.....5. 0010 5c 68 80 ef 96 28 ee 10 ba 42 ea bc 90 49 e2 5e \h...(...B...I.^ 0020 eb f1 30 1b 36 4d a5 c3 02 e6 8d b4 55 57 ce c5 ..0.6M......UW.. 0030 22 f4 0d d1 66 44 9b ec 68 99 15 1a ad b5 f7 e5 "...fD..h....... 0040 58 8e 2a 3b d9 8e fc 2b c3 5e ab 3f fe 43 a1 d3 X.*;...+.^.?.C.. 0050 3b 27 33 3a 20 87 2f 6a f5 a3 8b 87 4c 69 87 89 ;'3: ./j....Li.. 0060 b3 ca 65 21 96 d5 45 57 b5 97 44 e2 a3 bd 6c 5c ..e!..EW..D...l\ 0070 17 e7 3e 59 54 61 d4 75 12 50 b0 27 71 5e e9 44 ..>YTa.u.P.'q^.D 0080 d0 46 f1 d1 72 c6 33 35 d5 bb 07 94 76 b0 55 c5 .F..r.35....v.U. 0090 e8 b9 95 0f 48 b1 1a 6b df c8 1d c3 a8 cd b2 e7 ....H..k........ 00a0 a9 21 58 2e 67 45 0d 14 e1 82 a6 0d 51 ed 82 6a .!X.gE......Q..j 00b0 08 0b 84 46 f3 d2 ad fc 68 4b 0a f9 a6 76 e1 02 ...F....hK...v.. 00c0 ca fa 57 a9 68 c4 4e 7f 30 22 92 1d eb 2b 24 ae ..W.h.N.0"...+$. 00d0 45 2b cd 41 b6 00 ec 71 12 ed ce 3c 22 73 a1 c7 E+.A...q...<"s.. 00e0 e6 6e 8a 17 bf 2c 20 28 70 65 8f 47 50 c9 46 28 .n..., (pe.GP.F( 00f0 22 d4 80 f1 3a e0 ba 0d 86 3d bb 04 28 99 a9 b8 "...:....=..(... 0100 cf d5 b4 cf b9 46 72 1b 6f 55 c9 5b 8d 5c 41 2d .....Fr.oU.[.\A- 0110 70 b5 20 b0 87 16 c7 f9 06 f9 f5 97 7b fa 29 d1 p. .........{.). 0120 2f 88 e4 a5 ff 16 2d 95 ce c9 d7 18 36 21 5e ce /.....-.....6!^. 0130 6f 2b 26 b9 41 1e 7e 0b 89 df 18 b9 ec 3c 66 9d o+&.A.~......?.....e..Y 0150 94 33 e0 42 62 fa b0 5c 5c a5 3b aa bc 2d fb 37 .3.Bb..\\.;..-.7 0160 20 6f 9d a2 46 30 a2 39 ef 86 02 41 ac d6 9c 96 o..F0.9...A.... 0170 e5 e1 a4 9d b0 33 70 9a 0a b7 45 8a da 36 b6 12 .....3p...E..6.. 0180 76 5a 59 80 c0 0b c3 97 72 f5 9b 2f 35 02 f4 c6 vZY.....r../5... 0190 72 ba 08 61 80 9e f7 6d 02 9e 76 96 b4 fb 1e 32 r..a...m..v....2 01a0 de d8 a1 f9 b4 e7 35 f1 f8 8e 60 a3 85 d0 bf f6 ......5...`..... 01b0 82 77 35 54 0f b9 f9 ec 83 14 29 2a a5 9b 18 d9 .w5T......)*.... 01c0 6d 6e 8c 09 a5 37 01 73 56 7b e6 fd a2 3a 97 62 mn...7.sV{...:.b 01d0 d9 26 d4 97 38 28 4e 09 55 ed 31 1b 95 08 d4 5a .&..8(N.U.1....Z 01e0 cd 50 05 d0 ff b0 56 e0 d0 3d 27 af c5 8d 22 c8 .P....V..='...". 01f0 d8 94 a5 9a 62 8e 09 0c d4 59 b7 f4 5b 7d 95 1a ....b....Y..[}.. 0200 dd f0 17 a7 f2 b9 3b 17 62 34 d1 05 af 47 13 0c ......;.b4...G.. 0210 a9 93 e5 cc 33 16 c7 f1 f9 25 d5 a1 0b ca 87 87 ....3....%...... 0220 1f d5 60 34 c4 42 d1 ed c3 2b ff e0 00 a9 b8 38 ..`4.B...+.....8 0230 92 11 01 1c 6f f3 5a d2 d7 fd f1 46 5c bf b4 df ....o.Z....F\... 0240 88 dd cb 97 d9 b4 2d 69 d8 4e d7 55 3b 7e 82 96 ......-i.N.U;~.. 0250 7d 4d 31 dd f0 ad 76 25 75 c8 a5 77 d0 f0 30 90 }M1...v%u..w..0. 0260 e9 45 f8 c2 9d af 19 08 dc 7b fd 39 a3 3c 46 55 .E.......{.9.< 02f0 08 4c 97 41 8b 30 6a 25 dc db 4c cd 05 e6 62 a3 .L.A.0j%..L...b. 0300 56 80 f3 c4 45 ff c1 b4 2a 86 69 7e e1 a3 85 69 V...E...*.i~...i 0310 c5 b6 60 cf af 3d 1e d9 fe fe 7d 27 d2 ad 75 dd ..`..=....}'..u. 0320 cd cc 40 a1 3b 28 39 e8 a4 31 6d ce 40 42 0f 92 ..@.;(9..1m.@B.. 0330 0c 82 91 af c4 68 53 d1 c9 5e 1f 53 d7 4f 82 f7 .....hS..^.S.O.. 0340 aa 2a 27 20 52 79 24 4b 94 36 70 6c 34 9d 83 24 .*' Ry$K.6pl4..$ 0350 41 73 d3 3f 39 2e f0 52 4a fa 04 33 e2 9e d1 ca As.?9..RJ..3.... 0360 06 f4 91 d5 ba 2f 0d 4e 6d da 72 58 a4 84 7a 84 ...../.Nm.rX..z. 0370 5f 4e 67 e9 96 1c cd 2e 13 74 1d a0 e8 e5 47 97 _Ng......t....G. 0380 ae d9 f9 3e 81 40 18 fc e4 34 56 1d 75 fc bf 76 ...>.@...4V.u..v 0390 ce 8f 57 74 f5 20 11 bc 56 96 7a 8a 9b ab ee 37 ..Wt. ..V.z....7 03a0 0b a5 e7 30 53 f6 2f 67 30 48 6b ee a1 59 90 b0 ...0S./g0Hk..Y.. 03b0 62 d0 c3 c4 b4 d0 c8 d4 01 fb 8b 3f 07 39 e7 14 b..........?.9.. 03c0 08 bd ad 61 8a ed b1 93 19 0c 8c 2d 76 93 c3 aa ...a.......-v... 03d0 01 70 87 0d 10 ae 01 53 13 ce 40 5b c0 b8 f8 8b .p.....S..@[.... 03e0 40 58 80 02 5d da d0 08 35 e5 1c a3 b9 2b 2a 7c @X..]...5....+*| 03f0 6a 54 52 8b 16 aa 9f 27 17 79 bf 16 31 45 bb c7 jTR....'.y..1E.. 0400 4b 61 20 41 4d a6 3e bd df 06 b9 6b 4c f2 79 53 Ka AM.>....kL.yS 0410 90 f9 2e bf e6 5d d6 d8 94 65 81 47 8b 0a 23 6d .....]...e.G..#m 0420 d5 2b f1 ed 12 1a 52 db 87 dc 7c 15 57 11 d9 9f .+....R...|.W... 0430 94 e8 36 cd d1 59 e9 3e 3b 95 fe a5 bb 2b 0f 11 ..6..Y.>;....+.. 0440 b5 3d b9 0d ed 5e d2 1d a1 3a 9d 09 36 7a 49 1b .=...^...:..6zI. 0450 e5 e4 97 c7 cc eb cd 77 e2 a8 f7 52 0c 49 a6 ac .......w...R.I.. 0460 23 27 19 cb 3d 32 48 56 2b ff 6e c6 e1 56 25 a9 #'..=2HV+.n..V%. 0470 30 45 3f 3d ea 80 e5 88 09 e0 58 de f9 0c ad f3 0E?=......X..... 0480 7f 03 9e 12 18 aa c4 fc 06 65 4c b6 e3 6b d0 74 .........eL..k.t 0490 00 88 08 fa f8 9c f5 a1 f6 01 e6 25 00 14 a2 d8 ...........%.... 04a0 f2 db 1d d1 9b 4b d9 c0 97 61 f9 6a 3c 1f 2d a5 .....K...a.j<.-. 04b0 c1 a2 26 33 79 8b a7 ef e4 ae d1 b1 df 6e 1d cf ..&3y........n.. 04c0 2e a6 82 ec 20 37 92 af 1a 8f ce de d1 72 b2 0e .... 7.......r.. 04d0 55 40 98 53 37 10 d0 6d 32 11 aa 2c 26 66 05 97 U@.S7..m2..,&f.. 04e0 4d bd 7d 6f 1b 7f 44 69 eb 34 f8 42 76 c3 59 d1 M.}o..Di.4.Bv.Y. 04f0 75 8a 31 c8 f0 04 34 c4 b1 12 c9 08 c4 c3 eb 99 u.1...4......... 0500 83 79 a3 d5 37 57 8d 2f f9 06 28 32 4f 9b cf d8 .y..7W./..(2O... 0510 25 87 b9 20 29 06 ae 4c 17 fe f3 06 53 93 a6 76 %.. )..L....S..v 0520 93 27 e9 84 b6 8e 45 c5 9e a4 c9 1f 66 a5 51 40 .'....E.....f.Q@ 0530 10 61 f6 75 9e 14 08 f8 7b d8 ce d7 b2 67 e6 e7 .a.u....{....g.. 0540 68 33 85 14 c3 e9 fb a5 93 87 5b 5d 73 8c ab ac h3........[]s... 0550 c2 cd 7e 90 45 92 f7 0a 6d 11 ea 7b 20 d3 a1 f7 ..~.E...m..{ ... 0560 11 82 7a c1 12 17 15 29 99 b0 6c 0f 32 9d 62 1e ..z....)..l.2.b. 0570 21 71 a1 17 54 3e 7b 14 0c 64 d1 1b dc 87 46 af !q..T>{..d....F. 0580 a6 0e 94 e0 e5 88 57 63 b3 5c 6c 9f 75 f3 8d 7f ......Wc.\l.u... 0590 83 84 ab d3 db ee 57 e2 5d 9c c8 af 34 ac b9 23 ......W.]...4..# 05a0 80 0a 47 95 da 96 80 43 ..G....C Data […]: 4e22392e9ebe40cf79dbafba89f835da5c6880ef9628ee10ba42eabc9049e25eebf1301b364da5c302e68db45557cec522f40dd166449bec6899151aadb5f7e5588e2a3bd98efc2bc35eab3ffe43a1d33b27333a20872f6af5a38b874c698789b3ca652196d54557b59744e2a3bd6c5c17e [Length: 1448]