Frame 625: Packet, 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) on interface unknown, id 0 Section number: 1 Interface id: 0 (unknown) Interface name: unknown Encapsulation type: Ethernet (1) Arrival Time: Apr 21, 2015 00:41:56.177725000 UTC UTC Arrival Time: Apr 21, 2015 00:41:56.177725000 UTC Epoch Arrival Time: 1429576916.177725000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 3.000 microseconds] [Time since reference or first frame: 3.181118000 seconds] Frame Number: 625 Frame Length: 1514 bytes (12112 bits) Capture Length: 1514 bytes (12112 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: VMware_8d:0a:0c (00:0c:29:8d:0a:0c), Dst: VMware_8c:8b:4a (00:0c:29:8c:8b:4a) Destination: VMware_8c:8b:4a (00:0c:29:8c:8b:4a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: VMware_8d:0a:0c (00:0c:29:8d:0a:0c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 178.62.126.102, Dst: 10.0.1.4 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0x90c3 (37059) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 51 Protocol: TCP (6) Header Checksum: 0x75b0 [validation disabled] [Header checksum status: Unverified] Source Address: 178.62.126.102 Destination Address: 10.0.1.4 [Source GeoIP: London, GB] [Source GeoIP City: London] [Source or Destination GeoIP City: London] [Source GeoIP Country: United Kingdom] [Source or Destination GeoIP Country: United Kingdom] [Source GeoIP ISO Two Letter Country Code: GB] [Source or Destination GeoIP ISO Two Letter Country Code: GB] [Source GeoIP Latitude: 51.5353] [Source or Destination GeoIP Latitude: 51.5353] [Source GeoIP Longitude: -0.6658] [Source or Destination GeoIP Longitude: -0.6658] [Stream index: 3] Transmission Control Protocol, Src Port: 80, Dst Port: 59700, Seq: 638945, Ack: 420, Len: 1448 Source Port: 80 Destination Port: 59700 [Stream index: 3] [Stream Packet Number: 593] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1448] Sequence Number: 638945 (relative sequence number) Sequence Number (raw): 3473825847 [Next Sequence Number: 640393 (relative sequence number)] Acknowledgment Number: 420 (relative ack number) Acknowledgment number (raw): 2263567294 1000 .... = Header Length: 32 bytes (8) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 235 [Calculated window size: 30080] [Window size scaling factor: 128] Checksum: 0xdb11 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps TCP Option - No-Operation (NOP) Kind: No-Operation (1) TCP Option - No-Operation (NOP) Kind: No-Operation (1) TCP Option - Timestamps: TSval 1787375498, TSecr 10806217 Kind: Time Stamp Option (8) Length: 10 Timestamp value: 1787375498 Timestamp echo reply: 10806217 [Timestamps] [Time since first frame in this TCP stream: 215.975000 milliseconds] [Time since previous frame in this TCP stream: 3.000 microseconds] [SEQ/ACK analysis] [iRTT: 20.332000 milliseconds] [Bytes in flight: 4344] [Bytes sent since last PSH flag: 5792] [Client Contiguous Streams: 1] [Server Contiguous Streams: 1] TCP payload (1448 bytes) Hypertext Transfer Protocol File Data: 1448 bytes Data (1448 bytes) 0000 6e 64 f6 f7 fc 9e 06 56 c4 21 f3 06 64 e1 5e 9f nd.....V.!..d.^. 0010 28 9b 55 ee 2e c8 38 c5 2d 8b 7a d2 32 b8 90 0c (.U...8.-.z.2... 0020 fa 6f 68 3e 10 eb 35 cc 85 63 15 17 e0 a0 68 64 .oh>..5..c....hd 0030 d3 8f 47 23 dc 61 41 fa e6 f2 12 3a d7 ca 9c 8b ..G#.aA....:.... 0040 43 1a c5 21 d8 b5 9e ba 62 80 c4 3c 92 a4 5b 7e C..!....b..<..[~ 0050 5b 3d c6 fc e0 3f f6 5d 1f c7 bf 16 98 59 9c 89 [=...?.].....Y.. 0060 1e 1f 68 47 e8 3a 11 d7 fc bc c5 c1 b6 a8 c8 6c ..hG.:.........l 0070 8b 52 04 1b e0 b8 af 46 b4 01 b9 73 39 a0 98 21 .R.....F...s9..! 0080 99 96 1e a1 5b d1 06 01 6e f4 94 65 f4 d5 63 52 ....[...n..e..cR 0090 ed 93 65 fc f5 32 d3 f7 0a aa be d1 87 64 a9 08 ..e..2.......d.. 00a0 a5 86 28 64 d6 57 29 87 57 82 b0 08 f7 1d d9 b5 ..(d.W).W....... 00b0 9c 34 37 44 ce cb a8 b5 9f 0c 3f 91 a9 23 e3 6d .47D......?..#.m 00c0 64 56 03 d8 02 b4 42 ff c1 8a 4c 6b e3 54 b5 91 dV....B...Lk.T.. 00d0 75 6d 7b a4 62 0e 29 78 3a 5b 14 09 4c 51 58 c0 um{.b.)x:[..LQX. 00e0 5b 1c dc 9b b6 b5 61 93 be 44 fb 3f b7 7a 9e 9f [.....a..D.?.z.. 00f0 53 ed 04 99 63 05 01 9a 25 98 e7 2b 79 0e aa 49 S...c...%..+y..I 0100 3c b4 31 00 2e 03 d1 9b 31 6a af cf 0c da 1f 72 <.1.....1j.....r 0110 91 20 c5 f1 e3 19 bc 21 28 2e be 8d 61 ca e2 d7 . .....!(...a... 0120 d5 11 1c c1 5e 2b 4a 94 ca 8d e5 2f b1 b1 fd ba ....^+J..../.... 0130 b8 90 78 2d d3 3a ee 80 08 d1 ca 6f dd f8 70 ef ..x-.:.....o..p. 0140 c1 60 ca ad 42 aa 54 00 e7 60 89 40 0b 3d 16 d9 .`..B.T..`.@.=.. 0150 f1 8d 9f 59 3b c3 d0 4b a7 67 68 93 ab dd d9 3c ...Y;..K.gh....< 0160 69 45 68 b7 70 b6 df 8d 5e 21 3e 50 eb 8e b4 a6 iEh.p...^!>P.... 0170 0a ce 72 89 02 73 83 01 99 35 d1 af 0e e7 c4 d8 ..r..s...5...... 0180 90 8e 66 30 41 ff 97 4a d7 d1 60 aa e1 21 f7 78 ..f0A..J..`..!.x 0190 94 b3 1b 0c 3b d3 4c 95 93 ac 61 68 25 5d 1d 6c ....;.L...ah%].l 01a0 73 60 bd 8b 8e df 76 13 d7 af 06 f1 e0 52 cb 9d s`....v......R.. 01b0 4d 7b 9b 32 fe df 51 b5 20 fd 0e 9e c8 bc 57 ae M{.2..Q. .....W. 01c0 a7 d4 59 af d4 b4 10 a7 11 1c 37 5f 4d 0d b1 f8 ..Y.......7_M... 01d0 ba 58 58 30 0b 1f 03 ee dc 5f c2 08 52 07 d8 5e .XX0....._..R..^ 01e0 3f b9 4b a4 f8 91 ef 9b ee 26 45 88 e7 97 a8 a0 ?.K......&E..... 01f0 c9 bb d0 c0 90 92 c1 aa d5 ce d3 29 36 ab c5 47 ...........)6..G 0200 ba 1d ee 31 5c 85 29 a7 9e 35 84 15 ee b7 ea 8a ...1\.)..5...... 0210 66 79 29 79 5e 59 54 ce 27 c4 7b 3a 45 65 68 69 fy)y^YT.'.{:Eehi 0220 ba 9c 6b da c5 4a 2d 84 5f 7d 12 08 5f f9 ab e7 ..k..J-._}.._... 0230 60 e2 fc 24 5d 12 d5 0f cc 73 74 fc 59 cc 66 33 `..$]....st.Y.f3 0240 32 78 d9 71 8e 86 92 14 9b 97 5b b4 af 6b 13 ce 2x.q......[..k.. 0250 3c 6f 99 f2 b6 71 cc 9b 08 7b 67 f0 8a 37 59 a9 ........;..S. 02b0 4f 29 55 f3 c7 90 f1 27 3f 70 5a 6e e3 0a 48 9d O)U....'?pZn..H. 02c0 7d 6f d8 f8 82 bc 50 81 d0 a0 7d a6 58 bb 8c 4b }o....P...}.X..K 02d0 a3 5b 03 19 bc 46 52 2f 1e d2 ff 39 55 a7 a6 dc .[...FR/...9U... 02e0 1f e8 99 3f 9b 62 d9 be ca ce e7 5d 51 34 ce a2 ...?.b.....]Q4.. 02f0 37 4b 53 c8 0b d7 b1 61 01 47 f3 d7 a6 1a 88 a4 7KS....a.G...... 0300 b7 37 dd 90 60 5c c7 cf bd 8d b7 fd e8 c0 3d 32 .7..`\........=2 0310 3e c6 a7 f0 34 fe fc b6 f4 42 56 af 18 6d 64 64 >...4....BV..mdd 0320 68 10 a2 e7 5f 7a 07 95 ce 21 cd fc 7e c6 ad 2c h..._z...!..~.., 0330 62 9e c6 37 5d 72 74 f3 ac bf dd 7f 8c 8c f9 8b b..7]rt......... 0340 b0 da cf d4 70 16 d1 fa 51 c7 9b 98 ea 97 f5 1b ....p...Q....... 0350 78 36 11 08 fc a6 09 4a 2a 83 13 33 83 db f7 36 x6.....J*..3...6 0360 22 de 67 a9 cc 6f 81 38 5a 0d d0 2f 59 23 e9 8a ".g..o.8Z../Y#.. 0370 5d 65 bb a1 58 ae f2 93 27 68 57 a9 5b ee c0 d1 ]e..X...'hW.[... 0380 8f 4a bb 8c 8d b9 e6 63 97 3e 35 17 21 63 7e 82 .J.....c.>5.!c~. 0390 a9 16 bd e5 bf 9e 56 a0 d1 ad d3 79 3f 17 f1 51 ......V....y?..Q 03a0 44 ec d8 56 d4 aa e7 5e 65 5b 40 70 66 3e f8 4d D..V...^e[@pf>.M 03b0 fd 34 f4 83 72 e7 f9 c0 ea 06 45 f0 51 4e df 02 .4..r.....E.QN.. 03c0 9e 3e 60 f5 60 70 b6 62 e0 1e d4 85 61 a8 9f 56 .>`.`p.b....a..V 03d0 cf 38 2b e0 76 d8 d3 85 28 bb 9a 23 08 d3 30 f1 .8+.v...(..#..0. 03e0 84 24 f8 64 a0 f2 7d 63 43 9c 9b a9 d2 32 6a 6d .$.d..}cC....2jm 03f0 5b d3 34 21 75 49 82 b9 7b d5 ec b8 4c c5 7e d9 [.4!uI..{...L.~. 0400 0c f9 9a 10 34 f9 e3 77 00 69 3d 7c 0a af 40 5c ....4..w.i=|..@\ 0410 5c be b1 1d 77 6e 17 07 30 c8 26 0d f5 80 e0 14 \...wn..0.&..... 0420 9a 34 e1 fb db 76 66 74 d4 2f f0 92 df 16 38 ae .4...vft./....8. 0430 b0 56 f2 d6 dd 84 4e f9 6f 49 08 5d 45 56 b3 6f .V....N.oI.]EV.o 0440 31 b9 4f df a1 43 12 11 ac 48 e4 31 a1 ed 64 ad 1.O..C...H.1..d. 0450 ed 54 1c a5 65 03 11 a6 ad 52 bf 77 3b 91 18 d1 .T..e....R.w;... 0460 9e 3c 53 17 aa a0 4c 2e d1 5d 42 78 48 6b 6c 5d ............S. 04e0 75 e2 18 2d f3 d1 97 3b b5 7b ad 72 d5 9c 8a a1 u..-...;.{.r.... 04f0 4d 8a a7 fc 01 e7 06 68 76 c1 1e 94 cb 59 fa f6 M......hv....Y.. 0500 98 31 33 dd 1c 0e d5 47 41 3f 26 5e f5 18 7c 47 .13....GA?&^..|G 0510 8b 6e ea 9f 4f c9 4f fe 76 88 51 3d 87 dc cf 7b .n..O.O.v.Q=...{ 0520 0c 80 b3 0b 5f da 1e b5 8a 6d 0b d3 3f 0b 86 2d ...._....m..?..- 0530 19 37 98 81 3d 8a 38 56 74 37 38 d7 fb 0a a6 8a .7..=.8Vt78..... 0540 c8 8c 76 e2 a4 fe 1e ee ac b6 85 ac a8 41 e0 20 ..v..........A. 0550 3c 2c b1 4c 44 1b c0 40 d9 fb eb dd be 2c 54 f4 <,.LD..@.....,T. 0560 0f b5 f3 2c 70 fb 5b 98 1b 29 6b d7 82 b7 4a 20 ...,p.[..)k...J 0570 66 c6 71 f9 df 49 60 d6 bf 2b 93 54 b0 b2 23 62 f.q..I`..+.T..#b 0580 ba 98 20 ca ad 27 97 08 49 27 fd 20 92 14 54 b1 .. ..'..I'. ..T. 0590 91 3d 03 62 dd a2 fa 7b e2 c9 b7 0b 80 0c 7c 08 .=.b...{......|. 05a0 2f e9 40 a3 da ba 72 43 /.@...rC Data […]: 6e64f6f7fc9e0656c421f30664e15e9f289b55ee2ec838c52d8b7ad232b8900cfa6f683e10eb35cc85631517e0a06864d38f4723dc6141fae6f2123ad7ca9c8b431ac521d8b59eba6280c43c92a45b7e5b3dc6fce03ff65d1fc7bf1698599c891e1f6847e83a11d7fcbcc5c1b6a8c86c8b5 [Length: 1448]