Frame 861: Packet, 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) on interface unknown, id 0 Section number: 1 Interface id: 0 (unknown) Interface name: unknown Encapsulation type: Ethernet (1) Arrival Time: Apr 21, 2015 00:41:56.202528000 UTC UTC Arrival Time: Apr 21, 2015 00:41:56.202528000 UTC Epoch Arrival Time: 1429576916.202528000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 2.000 microseconds] [Time since reference or first frame: 3.205921000 seconds] Frame Number: 861 Frame Length: 1514 bytes (12112 bits) Capture Length: 1514 bytes (12112 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: VMware_8d:0a:0c (00:0c:29:8d:0a:0c), Dst: VMware_8c:8b:4a (00:0c:29:8c:8b:4a) Destination: VMware_8c:8b:4a (00:0c:29:8c:8b:4a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: VMware_8d:0a:0c (00:0c:29:8d:0a:0c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 178.62.126.102, Dst: 10.0.1.4 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0x9191 (37265) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 51 Protocol: TCP (6) Header Checksum: 0x74e2 [validation disabled] [Header checksum status: Unverified] Source Address: 178.62.126.102 Destination Address: 10.0.1.4 [Source GeoIP: London, GB] [Source GeoIP City: London] [Source or Destination GeoIP City: London] [Source GeoIP Country: United Kingdom] [Source or Destination GeoIP Country: United Kingdom] [Source GeoIP ISO Two Letter Country Code: GB] [Source or Destination GeoIP ISO Two Letter Country Code: GB] [Source GeoIP Latitude: 51.5353] [Source or Destination GeoIP Latitude: 51.5353] [Source GeoIP Longitude: -0.6658] [Source or Destination GeoIP Longitude: -0.6658] [Stream index: 3] Transmission Control Protocol, Src Port: 80, Dst Port: 59700, Seq: 937233, Ack: 420, Len: 1448 Source Port: 80 Destination Port: 59700 [Stream index: 3] [Stream Packet Number: 829] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1448] Sequence Number: 937233 (relative sequence number) Sequence Number (raw): 3474124135 [Next Sequence Number: 938681 (relative sequence number)] Acknowledgment Number: 420 (relative ack number) Acknowledgment number (raw): 2263567294 1000 .... = Header Length: 32 bytes (8) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 235 [Calculated window size: 30080] [Window size scaling factor: 128] Checksum: 0x7744 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps TCP Option - No-Operation (NOP) Kind: No-Operation (1) TCP Option - No-Operation (NOP) Kind: No-Operation (1) TCP Option - Timestamps: TSval 1787375504, TSecr 10806235 Kind: Time Stamp Option (8) Length: 10 Timestamp value: 1787375504 Timestamp echo reply: 10806235 [Timestamps] [Time since first frame in this TCP stream: 240.778000 milliseconds] [Time since previous frame in this TCP stream: 2.000 microseconds] [SEQ/ACK analysis] [iRTT: 20.332000 milliseconds] [Bytes in flight: 10136] [Bytes sent since last PSH flag: 36200] [Client Contiguous Streams: 1] [Server Contiguous Streams: 1] TCP payload (1448 bytes) Hypertext Transfer Protocol File Data: 1448 bytes Data (1448 bytes) 0000 3b ca 51 2a 5a 1b 95 d7 fa c1 73 eb 86 38 97 94 ;.Q*Z.....s..8.. 0010 5e 67 39 a3 24 5e b3 9a 4d fc 69 5b ad bb fd be ^g9.$^..M.i[.... 0020 3c 9c 61 5f e0 67 3d 07 89 2e 34 f5 b9 15 34 b1 <.a_.g=...4...4. 0030 6b f7 7b 1f 3f 4a e6 01 52 a3 2c d9 cf 7b 1b 39 k.{.?J..R.,..{.9 0040 82 f7 14 f8 46 14 d9 aa 8d 9a 00 93 c0 c1 88 19 ....F........... 0050 b6 d3 ea 39 2d ec 56 e3 23 47 2e 0d e6 8e e8 16 ...9-.V.#G...... 0060 c0 70 3b 22 46 fc 4e 8e 38 18 db fb 43 b9 21 22 .p;"F.N.8...C.!" 0070 24 ef e8 99 ab c8 cd eb b5 bb 74 0b f1 0d 2a ad $.........t...*. 0080 24 67 f5 86 f8 13 e1 8a 25 30 1e 7d b4 4c ec 24 $g......%0.}.L.$ 0090 c8 29 e7 7c ee 24 ce 36 f1 9f f0 0c bf b0 26 2a .).|.$.6......&* 00a0 e4 62 63 70 1d 4e 1f a6 99 f9 5d 8d 76 c7 07 07 .bcp.N....].v... 00b0 b9 df 8a 31 1f 9d 11 56 e0 2d 93 c6 a1 1e e2 78 ...1...V.-.....x 00c0 28 dc 05 6e ef fc 9e bb cd 19 f5 59 51 e0 28 b9 (..n.......YQ.(. 00d0 8d 99 14 f4 66 7c 7c b9 29 50 7f 3d 86 98 4c 9a ....f||.)P.=..L. 00e0 83 b5 9c 29 48 59 9f e7 23 ab 72 79 e3 df 52 28 ...)HY..#.ry..R( 00f0 0c 5f 73 1f ec 72 57 47 c0 db ee 40 bf 5b 4b 90 ._s..rWG...@.[K. 0100 6e 57 94 d2 0d 6f 57 51 d2 63 db 38 1c e5 45 4f nW...oWQ.c.8..EO 0110 7f 90 71 ea b4 44 fc 84 22 d9 97 31 9a 97 5c 6a ..q..D.."..1..\j 0120 6f 7e 37 1a 4d 87 eb 82 53 a3 57 f9 40 c1 a4 34 o~7.M...S.W.@..4 0130 fb 07 c8 46 92 d1 c3 04 5f 38 38 47 ac ad 00 db ...F...._88G.... 0140 e2 5c 26 b6 fc 7e 35 ca 3b 9c ea 2f b0 40 f9 5d .\&..~5.;../.@.] 0150 e1 2d db 1c f0 86 76 c2 39 80 75 b3 9a 8f 8c 91 .-....v.9.u..... 0160 7e 1d 76 bf c7 54 ef 73 af 08 86 0e 65 5f 0c 69 ~.v..T.s....e_.i 0170 78 62 b4 3b 4f 84 98 16 72 4a ff bc db 19 86 24 xb.;O...rJ.....$ 0180 87 3c 1a bb 97 b7 52 38 21 35 d4 19 85 e4 be f6 .<....R8!5...... 0190 42 1b e6 b3 73 35 98 ec 09 3d 5b 21 a0 26 b9 74 B...s5...=[!.&.t 01a0 12 e3 6a 3d df 89 33 90 13 c9 59 aa 5d 56 af 1f ..j=..3...Y.]V.. 01b0 52 08 49 46 ad 25 11 de 17 be f2 af 39 65 b5 80 R.IF.%......9e.. 01c0 c2 b1 b1 63 8e b9 0b cf 33 c8 d6 42 e4 71 49 c2 ...c....3..B.qI. 01d0 41 64 74 72 4a 95 f3 f1 bd 53 d1 b5 a8 73 67 40 AdtrJ....S...sg@ 01e0 6f ac d3 5a 39 c7 d7 c5 09 2b ed d5 35 91 7e 06 o..Z9....+..5.~. 01f0 53 a2 9d 84 a9 f1 22 36 b6 f7 e4 f2 25 41 98 05 S....."6....%A.. 0200 55 a5 26 57 a8 ec d0 68 2b 47 74 48 23 ef 25 cd U.&W...h+GtH#.%. 0210 7e bf 19 b9 49 35 d0 e9 e0 c0 8a f1 40 c0 42 bd ~...I5......@.B. 0220 81 98 32 8b ee 3b 01 b6 44 b6 db 43 6f e3 65 01 ..2..;..D..Co.e. 0230 aa be a9 0e 3c f1 09 c4 5a 38 ee c1 ec c0 6b 76 ....<...Z8....kv 0240 9b 8b 7c e6 b0 fe 41 fb 64 b3 41 cc 1c 67 7f e1 ..|...A.d.A..g.. 0250 52 4e 7d 4b e1 05 ce a6 14 99 02 e8 8b bd 6f 73 RN}K..........os 0260 ef ce b9 22 61 32 21 cf 64 7b 39 ae 35 4a 1f fc ..."a2!.d{9.5J.. 0270 23 0c ce 8f 8f f3 d6 ae 8b 2d fe bf 1e 23 59 dc #........-...#Y. 0280 e7 24 1c ef 82 40 96 1b d2 d9 a2 3e c6 1d 37 6e .$...@.....>..7n 0290 0e 05 0a 96 5d f8 f5 e1 fd f0 09 74 65 04 a2 2f ....]......te../ 02a0 a9 4e a5 92 b1 10 7f 5e c2 23 94 bc b8 99 b0 09 .N.....^.#...... 02b0 ac d5 8d 40 03 92 81 24 33 10 fe cb 7d fe b8 b9 ...@...$3...}... 02c0 33 a0 90 3b fb ec c3 e6 a5 c0 8d 7b 24 99 1d 97 3..;.......{$... 02d0 01 44 c4 6e 8f 69 28 dd a1 96 b9 bd 4d d8 ad c3 .D.n.i(.....M... 02e0 61 df 20 d4 a5 d1 b1 5e 00 64 8a 56 d6 36 a2 a4 a. ....^.d.V.6.. 02f0 f0 e7 a6 d9 15 5b cd db 76 a4 29 73 b3 ae ba 82 .....[..v.)s.... 0300 50 f4 84 f2 4a 68 a7 e2 8e 83 53 17 97 3d 16 8b P...Jh....S..=.. 0310 ee ec 62 1d 3e a9 bf 0c 20 3a 91 3a 75 40 67 e4 ..b.>... :.:u@g. 0320 09 df 61 eb 19 a0 51 54 eb 3d db ae fb 86 db c1 ..a...QT.=...... 0330 90 be 1f 98 16 70 0e 18 e4 18 92 bc fd ac b0 ad .....p.......... 0340 5f 2c 82 67 fa 31 08 03 d4 9c 5f e7 07 cd 76 d7 _,.g.1...._...v. 0350 86 5a a6 7f 4b 2f 6e 89 bb c2 62 b3 38 81 1c 6d .Z..K/n...b.8..m 0360 7d 25 7a bf 40 23 cc 51 b6 72 05 65 b6 30 1d 04 }%z.@#.Q.r.e.0.. 0370 53 9f 8b c4 a4 f7 b2 31 38 e1 e8 20 6a d1 e4 31 S......18.. j..1 0380 16 3c 1c 34 c8 f3 45 e8 ae 9e 64 d6 e2 db d1 68 .<.4..E...d....h 0390 33 23 a3 6d 74 06 ae df 03 4b b4 08 94 f2 f3 80 3#.mt....K...... 03a0 51 a4 ba bf e8 d9 3f 98 6a 71 0f 16 24 ba 9c f3 Q.....?.jq..$... 03b0 52 87 15 7d 42 a0 3b d0 f7 4f 7c 23 e6 87 d6 b3 R..}B.;..O|#.... 03c0 f1 37 c5 a7 73 ce 60 eb ff 99 90 f4 58 24 2c 27 .7..s.`.....X$,' 03d0 4e 65 f1 22 dc 02 12 9d 2c 2c d2 4a 90 77 a1 be Ne."....,,.J.w.. 03e0 43 86 ef 41 a9 b5 69 83 d7 81 67 61 7e 01 04 0c C..A..i...ga~... 03f0 0f 76 fc d8 4a 05 04 cc 14 a7 17 36 ef 8e e1 b4 .v..J......6.... 0400 73 ce ad e0 95 10 9d bb 1d eb cb 3b bb 07 97 85 s..........;.... 0410 1a c0 1b f9 2b 15 73 21 63 a6 3a c1 1a d2 a5 5d ....+.s!c.:....] 0420 8a f5 15 6f 7b cf 81 7c d8 e5 f1 0f f6 e7 04 8e ...o{..|........ 0430 fa d4 71 b4 9f ea 5b 7c cf cd 61 e3 5e 28 6d fe ..q...[|..a.^(m. 0440 04 3a e6 23 52 57 15 9d 71 3e 9d 48 20 c2 7f a5 .:.#RW..q>.H ... 0450 bb 7d ff 6a e9 44 5e 87 c6 31 f8 fe ea 23 05 0b .}.j.D^..1...#.. 0460 85 38 fb cf 6a 9f 90 74 30 69 45 be 22 52 0e 25 .8..j..t0iE."R.% 0470 69 f0 86 84 7e 4b 81 0a df f2 b3 f6 8e 32 22 74 i...~K.......2"t 0480 a8 8b d9 07 ca e9 70 b6 5b 7b 54 b0 dd e8 c3 e2 ......p.[{T..... 0490 fc a9 db e5 e7 90 21 c5 67 90 61 3a 00 c4 64 91 ......!.g.a:..d. 04a0 b9 c4 ea a1 51 7f 98 f9 00 a7 73 e9 1b 03 c1 15 ....Q.....s..... 04b0 9d a1 b7 d3 74 99 b7 f1 89 13 86 29 39 6b 9e 97 ....t......)9k.. 04c0 59 e9 a4 38 4e f5 81 81 10 4f 1a 77 a8 db bd d2 Y..8N....O.w.... 04d0 e7 69 ca 07 c6 66 76 4e 40 4b 93 05 e8 59 4d 29 .i...fvN@K...YM) 04e0 57 2a 0e 94 23 51 70 b7 92 f5 cb 2a 6e 19 bf 45 W*..#Qp....*n..E 04f0 63 6b 81 ea 1f a6 a9 0b d4 99 a6 f0 66 23 3b 10 ck..........f#;. 0500 21 ed 49 c3 15 d4 99 10 52 a7 22 20 23 6f b9 cc !.I.....R." #o.. 0510 15 f4 f7 59 05 5b 71 30 48 d6 d3 a1 c5 79 8c 30 ...Y.[q0H....y.0 0520 92 68 0e af b5 d0 34 c8 23 02 4d a5 56 41 81 63 .h....4.#.M.VA.c 0530 61 1a 32 0d aa 7e cc 14 d0 ae f5 ab 16 50 e6 53 a.2..~.......P.S 0540 e9 25 82 e5 11 b8 9e c9 1d 3b f3 d1 05 78 ca d3 .%.......;...x.. 0550 07 9c 54 45 ab 52 fa a8 34 fe 20 25 6f 86 ee aa ..TE.R..4. %o... 0560 b8 28 bf 32 aa 29 db a2 1c a6 e9 b3 83 e6 08 3a .(.2.).........: 0570 c6 25 e1 cb 89 ec 53 e4 7b 62 2a fb 6a b2 40 2a .%....S.{b*.j.@* 0580 8e c8 e3 c3 a7 4e 81 da 83 99 12 d4 ea b5 f8 ff .....N.......... 0590 16 4e b4 2c 1f a0 3c 56 bc 24 61 f5 8e f9 03 33 .N.,..