Frame 609: Packet, 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) on interface unknown, id 0 Section number: 1 Interface id: 0 (unknown) Interface name: unknown Encapsulation type: Ethernet (1) Arrival Time: Apr 21, 2015 00:41:56.174565000 UTC UTC Arrival Time: Apr 21, 2015 00:41:56.174565000 UTC Epoch Arrival Time: 1429576916.174565000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 3.000 microseconds] [Time since reference or first frame: 3.177958000 seconds] Frame Number: 609 Frame Length: 1514 bytes (12112 bits) Capture Length: 1514 bytes (12112 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: VMware_8d:0a:0c (00:0c:29:8d:0a:0c), Dst: VMware_8c:8b:4a (00:0c:29:8c:8b:4a) Destination: VMware_8c:8b:4a (00:0c:29:8c:8b:4a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: VMware_8d:0a:0c (00:0c:29:8d:0a:0c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 178.62.126.102, Dst: 10.0.1.4 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0x90b7 (37047) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 51 Protocol: TCP (6) Header Checksum: 0x75bc [validation disabled] [Header checksum status: Unverified] Source Address: 178.62.126.102 Destination Address: 10.0.1.4 [Source GeoIP: London, GB] [Source GeoIP City: London] [Source or Destination GeoIP City: London] [Source GeoIP Country: United Kingdom] [Source or Destination GeoIP Country: United Kingdom] [Source GeoIP ISO Two Letter Country Code: GB] [Source or Destination GeoIP ISO Two Letter Country Code: GB] [Source GeoIP Latitude: 51.5353] [Source or Destination GeoIP Latitude: 51.5353] [Source GeoIP Longitude: -0.6658] [Source or Destination GeoIP Longitude: -0.6658] [Stream index: 3] Transmission Control Protocol, Src Port: 80, Dst Port: 59700, Seq: 621569, Ack: 420, Len: 1448 Source Port: 80 Destination Port: 59700 [Stream index: 3] [Stream Packet Number: 577] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1448] Sequence Number: 621569 (relative sequence number) Sequence Number (raw): 3473808471 [Next Sequence Number: 623017 (relative sequence number)] Acknowledgment Number: 420 (relative ack number) Acknowledgment number (raw): 2263567294 1000 .... = Header Length: 32 bytes (8) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 235 [Calculated window size: 30080] [Window size scaling factor: 128] Checksum: 0xaf6b [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps TCP Option - No-Operation (NOP) Kind: No-Operation (1) TCP Option - No-Operation (NOP) Kind: No-Operation (1) TCP Option - Timestamps: TSval 1787375497, TSecr 10806212 Kind: Time Stamp Option (8) Length: 10 Timestamp value: 1787375497 Timestamp echo reply: 10806212 [Timestamps] [Time since first frame in this TCP stream: 212.815000 milliseconds] [Time since previous frame in this TCP stream: 3.000 microseconds] [SEQ/ACK analysis] [iRTT: 20.332000 milliseconds] [Bytes in flight: 17376] [Bytes sent since last PSH flag: 53576] [Client Contiguous Streams: 1] [Server Contiguous Streams: 1] TCP payload (1448 bytes) Hypertext Transfer Protocol File Data: 1448 bytes Data (1448 bytes) 0000 56 76 a4 3f 65 3a 5c 5e 43 d5 16 a1 9c b8 49 63 Vv.?e:\^C.....Ic 0010 67 30 17 47 f1 12 c5 49 88 57 a3 4a 36 bb 63 5c g0.G...I.W.J6.c\ 0020 e6 b5 9a 96 ca 59 42 3b 09 30 27 85 d9 cf 50 6b .....YB;.0'...Pk 0030 34 46 a4 49 e3 d1 97 9f d6 88 65 4e 86 e6 9b 91 4F.I......eN.... 0040 98 56 e3 99 67 62 f7 68 91 d0 b6 3b 3d 3f 69 35 .V..gb.h...;=?i5 0050 85 77 0a f6 6f ec e9 49 0c b0 ff f6 f6 c6 19 57 .w..o..I.......W 0060 40 55 07 11 12 72 29 dc 43 42 aa cb 26 51 e1 7c @U...r).CB..&Q.| 0070 65 5c e2 63 1c 20 ce f8 36 b7 91 cb e6 2a f0 d0 e\.c. ..6....*.. 0080 33 c9 51 20 69 e2 6b 67 f5 3c db 71 f9 29 f9 3e 3.Q i.kg.<.q.).> 0090 34 e4 33 13 4f 7f 5a 30 20 e8 dc 99 a1 e5 f9 c5 4.3.O.Z0 ....... 00a0 95 e4 34 c2 99 99 ab ab e7 a8 a7 2b 32 6f c2 cd ..4........+2o.. 00b0 52 dd f1 7a f7 72 a4 c7 39 5d bc 88 78 2d 49 ec R..z.r..9]..x-I. 00c0 ae 78 ac 09 fa 79 d5 e1 1d 0a b0 87 26 5e 76 cb .x...y......&^v. 00d0 b8 e4 13 02 65 54 2a 67 89 ca a4 78 01 c6 e4 91 ....eT*g...x.... 00e0 f3 64 87 06 25 a1 2b fa 1e 43 c3 8b a5 50 a6 85 .d..%.+..C...P.. 00f0 20 75 09 70 ba 87 71 91 f7 90 ea 19 fe 5b 95 58 u.p..q......[.X 0100 86 17 ec b6 3e 89 f3 e6 3d 60 6b 3b c4 cd 72 a9 ....>...=`k;..r. 0110 21 db c1 b6 98 7b 34 18 7e d8 b5 69 10 13 c9 70 !....{4.~..i...p 0120 8e 92 0d 37 17 7c aa f3 70 ff 23 b6 16 c5 cf 67 ...7.|..p.#....g 0130 9c 34 a5 5a ec a3 f6 c3 b5 05 df f3 47 52 74 03 .4.Z........GRt. 0140 87 3a 2e 8c 55 43 79 8b bc af ce 17 09 18 46 dc .:..UCy.......F. 0150 6d 40 2f 91 8d cc b2 f7 d2 aa e4 94 22 9c f4 3d m@/........."..= 0160 4a 97 f5 bc 6c 79 e9 20 36 2d 9f 2b a2 eb 5d 8a J...ly. 6-.+..]. 0170 c9 69 20 0e 34 5f e5 ac ae 0b ca dc f8 0a 8b cf .i .4_.......... 0180 e2 0b ac 82 6b dc 02 a8 30 64 6a 9f 07 87 7f c1 ....k...0dj..... 0190 e6 39 a0 2a 3a 7d a4 4e be e6 e5 21 f3 9c a7 00 .9.*:}.N...!.... 01a0 56 b5 a1 8b 51 92 15 ff 9a fc 14 99 91 5d 92 66 V...Q........].f 01b0 e0 16 69 49 45 91 a4 0f 3c b4 f9 f8 62 76 96 bc ..iIE...<...bv.. 01c0 18 88 cf 8f b3 de ec 10 21 13 98 8a d2 ba d6 71 ........!......q 01d0 d7 5d d2 89 5f f0 82 e0 30 c4 0e 27 df b6 3a 16 .].._...0..'..:. 01e0 ca 17 0a 65 5a fb 5b aa ca fb 0f f5 95 5e 0d 2b ...eZ.[......^.+ 01f0 1e d0 5b 37 f4 89 9a ee ee 78 0f 2a db 8d ce 41 ..[7.....x.*...A 0200 fa 3e 4a 8a ee 1c 66 1e c1 df ec 81 0b 61 21 e7 .>J...f......a!. 0210 c2 c8 01 1b 71 59 6d 79 e4 30 94 75 e0 b1 d8 a9 ....qYmy.0.u.... 0220 69 fd ec da b0 03 c9 c2 a6 c2 08 11 24 ad 89 23 i...........$..# 0230 25 77 bd 49 d6 18 6d ec 1e 35 5e 75 26 9f 92 f2 %w.I..m..5^u&... 0240 a3 df 9a 25 79 d2 f4 05 d5 b1 fb b3 b6 74 55 0a ...%y........tU. 0250 04 3d cd e7 6e af 0c 98 4f 52 18 83 d9 dd 3f ef .=..n...OR....?. 0260 7f 3e c6 8e 34 12 a5 cb 0e 6b 48 af dc e8 99 5c .>..4....kH....\ 0270 d3 b0 95 7a 45 1c 67 c5 2f e7 c7 a6 c8 0b aa 71 ...zE.g./......q 0280 9b ea 36 94 a6 66 5c 5d 0c 1b e7 6c 14 38 e6 e8 ..6..f\]...l.8.. 0290 5e 28 97 09 cb 1c 3d 36 6a 1b c4 cc ce cd 21 43 ^(....=6j.....!C 02a0 23 c5 f7 ac 4e 88 f2 cd e2 b5 3d bf b5 87 dd fe #...N.....=..... 02b0 91 e9 5d 09 6f e2 aa b8 5b c2 7b 65 87 00 7b 00 ..].o...[.{e..{. 02c0 f7 c0 e1 2c 18 33 d9 16 ba 77 f1 a7 e5 ce 72 7f ...,.3...w....r. 02d0 78 23 a1 55 af 8b eb c8 0a 19 a8 da 4a df 65 c4 x#.U........J.e. 02e0 b4 68 ce f8 81 b7 91 b2 bc 46 79 60 23 72 ad c4 .h.......Fy`#r.. 02f0 1f f2 06 ea ef e8 91 69 ee 85 38 35 c1 da 4d 74 .......i..85..Mt 0300 2f 37 1f 51 80 59 a8 70 a6 6c ee d7 32 50 bf 33 /7.Q.Y.p.l..2P.3 0310 bf fe 0f 59 47 f4 17 33 37 a2 ff 85 b7 4e 27 35 ...YG..37....N'5 0320 bf 86 e7 22 22 c3 04 7e c2 2d 33 d2 c4 c9 39 b8 ...""..~.-3...9. 0330 7d eb 4d 6e 75 54 4a c3 95 91 65 da 00 e2 68 29 }.MnuTJ...e...h) 0340 f0 ab 9c 04 bf 71 f9 51 17 2f bb b7 df 96 4e 67 .....q.Q./....Ng 0350 a4 cd fd fa 79 20 8a 94 10 20 dd dd 27 54 fa 71 ....y ... ..'T.q 0360 eb fc e3 bd c0 f6 6a d2 7c 79 7e 11 0f 29 f3 82 ......j.|y~..).. 0370 1d 9e ad 1c 29 42 a9 7b e1 7f fa c8 c3 67 02 59 ....)B.{.....g.Y 0380 ce 3d f0 db f5 b4 e3 4c a9 67 13 5c a6 a4 db 07 .=.....L.g.\.... 0390 14 7b e4 0d 57 e9 81 7c d0 36 61 cb 3d dd 23 1f .{..W..|.6a.=.#. 03a0 ce 0d a7 c9 11 d9 10 f3 f2 82 5e 81 0f 3e 05 5a ..........^..>.Z 03b0 34 69 01 2d c5 6d e7 ae 7d 67 66 72 4c 95 73 32 4i.-.m..}gfrL.s2 03c0 d4 4d 12 48 f7 bc 6a 86 59 3f d6 0e 2c 57 af 98 .M.H..j.Y?..,W.. 03d0 b6 0c 1e 6e 7e 0c bb 19 7d eb df 0f 7c a9 18 89 ...n~...}...|... 03e0 39 62 3c d7 c0 f2 86 b0 d5 06 a4 b6 06 ac 8c 1e 9b<............. 03f0 72 89 ed 68 d0 ac 83 7f 89 09 59 89 6d 50 a8 75 r..h......Y.mP.u 0400 23 b1 1c 2d 8d 95 6e 22 90 71 3d 6e a3 52 e1 92 #..-..n".q=n.R.. 0410 99 7a 35 58 37 58 d0 aa 2d 39 c8 84 48 d3 25 7f .z5X7X..-9..H.%. 0420 2f 53 63 13 17 ee f2 95 a0 22 87 14 5f cb 50 34 /Sc......".._.P4 0430 c9 ce 4f 60 30 9b c4 2b b0 7a 6f bc 98 8d de 00 ..O`0..+.zo..... 0440 1e 6d e4 e3 8f 41 0b 2a d3 dd 36 90 d3 cf 3d 1f .m...A.*..6...=. 0450 d8 da d8 d4 0a d6 cb e2 07 ec f9 d1 2a 2e 97 87 ............*... 0460 7e 12 78 37 de b9 04 03 49 14 0f 54 7e 7f c9 fc ~.x7....I..T~... 0470 b8 7a 6f 5d 22 92 c8 36 0a 33 0d ea 83 38 87 91 .zo]"..6.3...8.. 0480 4d 15 7c 4c 1e bc 3a 86 61 d3 55 38 36 bb d7 49 M.|L..:.a.U86..I 0490 1d d4 7b 33 45 a0 73 db 96 eb eb 5a 8d ae a5 76 ..{3E.s....Z...v 04a0 18 53 76 14 fb eb 78 01 0c 44 df b8 fc 0c 4d b9 .Sv...x..D....M. 04b0 46 b3 5a e1 12 d8 ca 04 14 8f c2 c4 3a b2 71 30 F.Z.........:.q0 04c0 2a ac ff aa 4e 64 53 c3 a0 5a 8c 3e 07 c5 67 84 *...NdS..Z.>..g. 04d0 5f f6 19 1f f3 10 d6 18 29 db 01 53 09 f4 05 55 _.......)..S...U 04e0 4c 1d 5f a1 6a 2e a2 7e c1 72 35 86 c3 e2 65 b4 L._.j..~.r5...e. 04f0 2f 86 2a 82 03 8d 42 a9 cb d8 c5 61 aa 09 43 df /.*...B....a..C. 0500 09 fb 75 c6 9d 3a c2 59 05 b9 7a 52 98 c6 8d 0b ..u..:.Y..zR.... 0510 94 3d b4 29 9f 88 92 bc 6e 0d ae 26 62 3f 71 0d .=.)....n..&b?q. 0520 49 1a bd 4b b0 f6 bf 3a e0 f6 04 a3 9a cc d9 ee I..K...:........ 0530 06 1f b4 dc e4 3c 48 41 a0 92 46 e8 ea a2 42 6f .....U..H.H 0550 5e 56 75 1a 2f 58 90 07 ee da fa c4 56 50 ec f3 ^Vu./X......VP.. 0560 4f 21 64 77 97 ba d6 03 00 cb c7 30 6d 61 ac 28 O!dw.......0ma.( 0570 bb f2 8d 19 44 13 5a c6 4b e2 fa 0c a8 b4 86 65 ....D.Z.K......e 0580 5d 74 c6 aa 33 1e c8 10 97 4d aa 1c b0 a4 bc 17 ]t..3....M...... 0590 1c 8f 1e 43 63 8e 79 e9 b3 f7 b7 94 6a ae 28 20 ...Cc.y.....j.( 05a0 53 db f9 f1 5b 5b f8 8f S...[[.. Data […]: 5676a43f653a5c5e43d516a19cb8496367301747f112c5498857a34a36bb635ce6b59a96ca59423b09302785d9cf506b3446a449e3d1979fd688654e86e69b919856e3996762f76891d0b63b3d3f693585770af66fece9490cb0fff6f6c6195740550711127229dc4342aacb2651e17c655 [Length: 1448]