Frame 979: Packet, 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) on interface unknown, id 0 Section number: 1 Interface id: 0 (unknown) Interface name: unknown Encapsulation type: Ethernet (1) Arrival Time: Apr 21, 2015 00:41:56.214465000 UTC UTC Arrival Time: Apr 21, 2015 00:41:56.214465000 UTC Epoch Arrival Time: 1429576916.214465000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 3.000 microseconds] [Time since reference or first frame: 3.217858000 seconds] Frame Number: 979 Frame Length: 1514 bytes (12112 bits) Capture Length: 1514 bytes (12112 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: VMware_8d:0a:0c (00:0c:29:8d:0a:0c), Dst: VMware_8c:8b:4a (00:0c:29:8c:8b:4a) Destination: VMware_8c:8b:4a (00:0c:29:8c:8b:4a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: VMware_8d:0a:0c (00:0c:29:8d:0a:0c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 178.62.126.102, Dst: 10.0.1.4 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0x91f9 (37369) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 51 Protocol: TCP (6) Header Checksum: 0x747a [validation disabled] [Header checksum status: Unverified] Source Address: 178.62.126.102 Destination Address: 10.0.1.4 [Source GeoIP: London, GB] [Source GeoIP City: London] [Source or Destination GeoIP City: London] [Source GeoIP Country: United Kingdom] [Source or Destination GeoIP Country: United Kingdom] [Source GeoIP ISO Two Letter Country Code: GB] [Source or Destination GeoIP ISO Two Letter Country Code: GB] [Source GeoIP Latitude: 51.5353] [Source or Destination GeoIP Latitude: 51.5353] [Source GeoIP Longitude: -0.6658] [Source or Destination GeoIP Longitude: -0.6658] [Stream index: 3] Transmission Control Protocol, Src Port: 80, Dst Port: 59700, Seq: 1087825, Ack: 420, Len: 1448 Source Port: 80 Destination Port: 59700 [Stream index: 3] [Stream Packet Number: 947] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1448] Sequence Number: 1087825 (relative sequence number) Sequence Number (raw): 3474274727 [Next Sequence Number: 1089273 (relative sequence number)] Acknowledgment Number: 420 (relative ack number) Acknowledgment number (raw): 2263567294 1000 .... = Header Length: 32 bytes (8) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 235 [Calculated window size: 30080] [Window size scaling factor: 128] Checksum: 0xd802 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps TCP Option - No-Operation (NOP) Kind: No-Operation (1) TCP Option - No-Operation (NOP) Kind: No-Operation (1) TCP Option - Timestamps: TSval 1787375507, TSecr 10806247 Kind: Time Stamp Option (8) Length: 10 Timestamp value: 1787375507 Timestamp echo reply: 10806247 [Timestamps] [Time since first frame in this TCP stream: 252.715000 milliseconds] [Time since previous frame in this TCP stream: 3.000 microseconds] [SEQ/ACK analysis] [iRTT: 20.332000 milliseconds] [Bytes in flight: 39096] [Bytes sent since last PSH flag: 56472] [Client Contiguous Streams: 1] [Server Contiguous Streams: 1] TCP payload (1448 bytes) Hypertext Transfer Protocol File Data: 1448 bytes Data (1448 bytes) 0000 45 93 15 ad 10 8e eb 79 a7 9e b3 bc 26 b6 e4 9f E......y....&... 0010 b5 4d 28 ed 3d 74 9a 2f c5 17 e3 12 72 5e fc 99 .M(.=t./....r^.. 0020 50 e7 75 16 40 5c 57 8c 94 5f 6e e4 61 b1 35 41 P.u.@\W.._n.a.5A 0030 53 0c 04 b5 91 56 31 f6 1d 2e ad 8e 1a ab e7 bd S....V1......... 0040 a5 30 7a 1f d7 ce 7a 9f f5 94 e0 2f 85 ee cf 4b .0z...z..../...K 0050 28 6c 29 a4 51 50 5e ed 72 c8 18 18 43 4b 0a 08 (l).QP^.r...CK.. 0060 9e da 11 76 2c 5b e3 2c fe 22 7f c2 7c 88 a3 37 ...v,[.,."..|..7 0070 96 6e 95 4c 83 a8 b1 08 0f 4c 83 8b 87 3e c0 2b .n.L.....L...>.+ 0080 62 59 91 e1 aa 9c d7 40 d3 3c a6 84 92 8e 9f 2d bY.....@.<.....- 0090 42 0e 35 63 23 ab dd e6 1d 1d d5 88 96 66 dc c7 B.5c#........f.. 00a0 88 66 4b a6 bb 0b a1 13 b7 8e eb 6b 12 3c 50 88 .fK........k.J. 0340 a4 0e c4 50 79 af d9 33 46 58 dd 68 c2 34 4e 1e ...Py..3FX.h.4N. 0350 da c6 81 c5 eb 00 8a 7d 88 ac 23 b0 68 16 45 18 .......}..#.h.E. 0360 08 09 84 b1 8e 3e ab 0f 46 7d 09 96 a0 ff ef 7d .....>..F}.....} 0370 fc 44 fa 34 d4 51 ae 8a 89 88 96 e0 b9 71 3f 59 .D.4.Q.......q?Y 0380 b5 e5 f8 16 44 da 8f cb 67 ab 04 33 1e d8 87 da ....D...g..3.... 0390 82 86 4d fc 81 c0 94 8f fa 89 8c d7 dd 1e 8b 0f ..M............. 03a0 61 1f 85 40 78 df 8c d1 54 b1 e2 6c f8 b8 84 a3 a..@x...T..l.... 03b0 1e f3 ae d0 37 dc 3b 10 27 7a 6c db 00 a6 95 fc ....7.;.'zl..... 03c0 a7 ae 1c 18 bf e4 af 4d 0b 19 7e 23 81 4f 5d 58 .......M..~#.O]X 03d0 4f c2 ba 16 1f 87 c6 ab f1 d6 2f f6 c9 4b 56 ed O........./..KV. 03e0 f3 65 8d 03 6b cc 0f be d5 6a 2c f8 73 be 1a 5a .e..k....j,.s..Z 03f0 31 e1 04 3a 36 89 f1 02 a3 84 79 34 ff 33 00 7b 1..:6.....y4.3.{ 0400 1d 2f 66 c7 a9 94 e6 a5 1e 82 ac 5a b8 9e 41 5b ./f........Z..A[ 0410 07 ee 92 2e 65 56 52 db e5 d2 22 36 8a 2e 87 0d ....eVR..."6.... 0420 08 d5 37 1d 73 c9 64 6e 11 2e da 5e 00 db b8 57 ..7.s.dn...^...W 0430 8b 2f 8b 3f 9c 8b 51 46 af 66 18 2c a8 8c 9b b7 ./.?..QF.f.,.... 0440 dd 4b da ee 4f c7 7d bf 34 e6 75 dd 51 2c 0d 68 .K..O.}.4.u.Q,.h 0450 8a 0a d1 a1 7c 74 be 4f d8 54 a8 4b cf 1e fb 86 ....|t.O.T.K.... 0460 ca 86 09 70 ae 49 73 a3 9f 58 39 88 20 bc 7f 73 ...p.Is..X9. ..s 0470 ae c4 00 fc 50 68 7e 1a 0d 9f a1 0a 37 77 51 b8 ....Ph~.....7wQ. 0480 98 3c 3a 08 15 c0 5f 6e 2a bc 25 df 97 43 66 5e .<:..._n*.%..Cf^ 0490 b0 b2 21 79 b5 22 c2 6d 3e e5 39 87 45 6e d1 59 ..!y.".m>.9.En.Y 04a0 7a df e6 b7 17 f7 08 50 4e cc 79 89 a3 39 ee 0c z......PN.y..9.. 04b0 6c 5c 61 98 a1 d2 e0 90 49 c6 bd c4 5a db 9d 24 l\a.....I...Z..$ 04c0 ba f4 1b d1 6a d3 05 c0 16 9f 49 7e 36 cf 70 02 ....j.....I~6.p. 04d0 f3 6c dc 22 a1 02 4c 1e f8 c6 9e ce 39 46 98 7a .l."..L.....9F.z 04e0 52 f4 5a 5d e1 31 a1 ed 74 77 f7 02 c9 3c 21 eb R.Z].1..tw....'..@... 0520 65 a2 7f a0 b4 4d 09 51 2f 21 58 4c e9 a8 62 1f e....M.Q/!XL..b. 0530 9a 9b 5c ac ff d0 1a a2 46 2b 8b 87 0e fa 91 36 ..\.....F+.....6 0540 23 71 8e 65 2b 18 c8 0e d5 1d 57 4d 02 e1 18 07 #q.e+.....WM.... 0550 91 68 6b 5c b9 ae 44 19 2b a3 99 ed a2 7b 4b 1f .hk\..D.+....{K. 0560 e4 dd 5d 7d 79 da 13 e4 ca 98 e1 75 e0 d8 25 94 ..]}y......u..%. 0570 f3 03 3f 54 72 e8 c5 06 c2 b1 db 1a 62 a3 e6 2e ..?Tr.......b... 0580 16 3a d2 22 a6 68 d1 ec d5 f8 fa a3 b1 8c bd b2 .:.".h.......... 0590 d9 9c ac e9 93 a9 68 a0 75 bd d5 9d 3d 31 7d 4f ......h.u...=1}O 05a0 b0 41 67 39 4d 81 25 cf .Ag9M.%. Data […]: 459315ad108eeb79a79eb3bc26b6e49fb54d28ed3d749a2fc517e312725efc9950e77516405c578c945f6ee461b13541530c04b5915631f61d2ead8e1aabe7bda5307a1fd7ce7a9ff594e02f85eecf4b286c29a451505eed72c81818434b0a089eda11762c5be32cfe227fc27c88a337966 [Length: 1448]