Frame 997: Packet, 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) on interface unknown, id 0 Section number: 1 Interface id: 0 (unknown) Interface name: unknown Encapsulation type: Ethernet (1) Arrival Time: Apr 21, 2015 00:41:56.214529000 UTC UTC Arrival Time: Apr 21, 2015 00:41:56.214529000 UTC Epoch Arrival Time: 1429576916.214529000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 4.000 microseconds] [Time since reference or first frame: 3.217922000 seconds] Frame Number: 997 Frame Length: 1514 bytes (12112 bits) Capture Length: 1514 bytes (12112 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: VMware_8d:0a:0c (00:0c:29:8d:0a:0c), Dst: VMware_8c:8b:4a (00:0c:29:8c:8b:4a) Destination: VMware_8c:8b:4a (00:0c:29:8c:8b:4a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: VMware_8d:0a:0c (00:0c:29:8d:0a:0c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 178.62.126.102, Dst: 10.0.1.4 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0x920b (37387) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 51 Protocol: TCP (6) Header Checksum: 0x7468 [validation disabled] [Header checksum status: Unverified] Source Address: 178.62.126.102 Destination Address: 10.0.1.4 [Source GeoIP: London, GB] [Source GeoIP City: London] [Source or Destination GeoIP City: London] [Source GeoIP Country: United Kingdom] [Source or Destination GeoIP Country: United Kingdom] [Source GeoIP ISO Two Letter Country Code: GB] [Source or Destination GeoIP ISO Two Letter Country Code: GB] [Source GeoIP Latitude: 51.5353] [Source or Destination GeoIP Latitude: 51.5353] [Source GeoIP Longitude: -0.6658] [Source or Destination GeoIP Longitude: -0.6658] [Stream index: 3] Transmission Control Protocol, Src Port: 80, Dst Port: 59700, Seq: 1113889, Ack: 420, Len: 1448 Source Port: 80 Destination Port: 59700 [Stream index: 3] [Stream Packet Number: 965] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1448] Sequence Number: 1113889 (relative sequence number) Sequence Number (raw): 3474300791 [Next Sequence Number: 1115337 (relative sequence number)] Acknowledgment Number: 420 (relative ack number) Acknowledgment number (raw): 2263567294 1000 .... = Header Length: 32 bytes (8) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 235 [Calculated window size: 30080] [Window size scaling factor: 128] Checksum: 0xb696 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps TCP Option - No-Operation (NOP) Kind: No-Operation (1) TCP Option - No-Operation (NOP) Kind: No-Operation (1) TCP Option - Timestamps: TSval 1787375507, TSecr 10806247 Kind: Time Stamp Option (8) Length: 10 Timestamp value: 1787375507 Timestamp echo reply: 10806247 [Timestamps] [Time since first frame in this TCP stream: 252.779000 milliseconds] [Time since previous frame in this TCP stream: 4.000 microseconds] [SEQ/ACK analysis] [iRTT: 20.332000 milliseconds] [Bytes in flight: 65160] [Bytes sent since last PSH flag: 82536] [Client Contiguous Streams: 1] [Server Contiguous Streams: 1] TCP payload (1448 bytes) Hypertext Transfer Protocol File Data: 1448 bytes Data (1448 bytes) 0000 4a 39 f3 f3 64 93 fc 8a a4 48 dd 20 43 c2 3e 0a J9..d....H. C.>. 0010 a1 6a e2 69 75 92 44 b8 80 cd 43 bd 21 dc 31 f7 .j.iu.D...C.!.1. 0020 3e 76 58 3c 9a 8a e6 e3 0b 19 47 6f 5d c8 f5 38 >vX<......Go]..8 0030 01 6b cf c5 1d 29 e7 4a fe 0c 13 5a 0f b6 d1 cd .k...).J...Z.... 0040 ee ec 0c e8 da a6 ae 93 8d a4 4c 41 ee 45 fd b6 ..........LA.E.. 0050 cb 5a 25 cb a0 08 d4 75 c7 a7 19 2e 1f 2b 3a 11 .Z%....u.....+:. 0060 64 02 d7 e0 72 3b c0 85 b1 6a 9f 8e 55 65 70 29 d...r;...j..Uep) 0070 e9 70 da 05 93 3c 46 78 43 47 1b 4c 89 56 a0 0e .p....X. 0110 02 e2 ee 26 04 6d 13 b8 58 b0 be df d9 6b 9c 1c ...&.m..X....k.. 0120 47 a7 57 42 39 72 65 d8 b1 c5 c2 32 3d ed 9c 7b G.WB9re....2=..{ 0130 88 da 54 8d 62 82 23 bf 86 9a f1 c2 8b 57 cd 4c ..T.b.#......W.L 0140 70 4d 04 4f b4 ad dc ab 08 2e eb 27 09 af 73 d1 pM.O.......'..s. 0150 87 96 62 53 a4 f0 63 b7 41 15 81 79 73 c9 4e d2 ..bS..c.A..ys.N. 0160 df 0a 07 3d 20 3a 2a 41 f5 d3 85 39 b4 06 25 b6 ...= :*A...9..%. 0170 4a a4 4d bc 60 64 1b 5b a5 28 41 a8 c5 f1 60 e4 J.M.`d.[.(A...`. 0180 f3 5e 5c 64 ce fd 7b 15 8b d9 40 47 30 51 b9 8b .^\d..{...@G0Q.. 0190 ea 50 be ec 84 ff 1d e9 2e a3 62 92 5a c7 35 e9 .P........b.Z.5. 01a0 d7 50 79 2d 88 81 45 10 15 4a 57 91 bf 8e cc 09 .Py-..E..JW..... 01b0 73 4a 73 bd eb 6d 41 79 ac 7d e8 4f b4 d2 4f 65 sJs..mAy.}.O..Oe 01c0 b6 1f 2d 8f 05 68 c5 10 4f 84 6c d5 8a 95 da c8 ..-..h..O.l..... 01d0 1e 26 41 b7 80 66 d8 df d8 75 08 13 1f 77 ef e1 .&A..f...u...w.. 01e0 97 68 d2 9c ef 29 a1 43 6e 31 8a ff 33 ac d8 77 .h...).Cn1..3..w 01f0 7c 15 d4 a9 94 28 8c 7c 4a 48 75 9a 86 96 79 e3 |....(.|JHu...y. 0200 3b 01 be 91 4a 92 c1 a1 1d 48 98 9e d3 d0 ca 0b ;...J....H...... 0210 8e c7 72 75 8d 07 c8 62 22 ba c4 4d 52 b3 42 e2 ..ru...b"..MR.B. 0220 6a f1 1a e2 22 7e 93 9d b7 a5 eb a8 db 66 5f 8e j..."~.......f_. 0230 58 3a b2 d9 d7 30 c1 6a be f1 72 6a 84 19 c1 1f X:...0.j..rj.... 0240 44 49 b0 7b 5c 7b f3 19 41 0c 1e e5 a3 2e ed 77 DI.{\{..A......w 0250 e5 6a be 30 9e 33 07 69 27 5b 84 ef 03 15 97 a4 .j.0.3.i'[...... 0260 6f de a9 ef e8 08 7d 97 28 ef bb ec a2 30 78 e5 o.....}.(....0x. 0270 3b 33 a6 d5 04 a0 97 b7 f1 34 28 31 d8 55 a8 74 ;3.......4(1.U.t 0280 96 6b c8 a9 59 88 c5 c7 ee f3 9b e2 eb 28 12 bf .k..Y........(.. 0290 1c 80 a3 29 a5 8e 6c 50 3e c0 86 14 50 09 1e ae ...)..lP>...P... 02a0 f7 42 ab 1a c9 88 9e 8b 7e d0 11 ad d8 e3 c4 38 .B......~......8 02b0 51 c2 0a 02 54 1e 91 86 d4 fd e3 fc 16 08 1f a0 Q...T........... 02c0 4a 20 56 5a 9b ed 36 ed 26 73 33 fd bc e8 53 0e J VZ..6.&s3...S. 02d0 00 f1 03 6f 1b a9 f4 37 6d db f9 c3 88 3f 27 7c ...o...7m....?'| 02e0 40 c8 29 02 c7 24 c8 19 32 3b 92 6e 90 41 49 f1 @.)..$..2;.n.AI. 02f0 bf e4 5b 76 a1 35 a9 df e2 8f 83 30 de c8 55 8c ..[v.5.....0..U. 0300 47 1d cb bd 74 48 f7 27 20 96 6b f0 93 ad 63 be G...tH.' .k...c. 0310 d5 43 46 52 41 78 2b 59 53 93 f2 6b bb 02 2b 77 .CFRAx+YS..k..+w 0320 c4 91 f7 f6 47 a5 2f 51 34 88 3d 52 99 21 04 f5 ....G./Q4.=R.!.. 0330 03 35 77 82 73 93 db 4b 82 02 53 77 47 58 86 20 .5w.s..K..SwGX. 0340 42 55 14 57 5f 64 ca fa b8 52 f2 a4 4d f7 95 2f BU.W_d...R..M../ 0350 90 b1 23 00 dc 6f 3b 56 05 eb ae a2 dc 1a 62 e0 ..#..o;V......b. 0360 8d 37 da a2 a0 78 77 b0 76 2f 55 3c 54 82 40 61 .7...xw.v/U.Bt...T.... 0490 44 b2 b0 e3 c0 98 1f 72 9e a8 af 64 f8 43 cc 64 D......r...d.C.d 04a0 16 26 44 27 e3 fe 93 29 43 d6 f2 d6 24 d6 ed e9 .&D'...)C...$... 04b0 13 bc 5f 1d 40 0d f0 5b 52 07 02 51 84 5a 71 cb .._.@..[R..Q.Zq. 04c0 07 e2 f5 02 ec 23 9d a5 b5 cd 5e c8 88 40 cc 44 .....#....^..@.D 04d0 e1 cc 53 ed af 42 84 bb 30 d3 92 8b 67 6b 7e 0b ..S..B..0...gk~. 04e0 70 f6 1a 67 9a fe 50 c6 2f 06 31 91 0c 73 be 72 p..g..P./.1..s.r 04f0 c9 ec a2 d5 4e 75 f3 a0 72 2c dc 54 c2 a8 0c bb ....Nu..r,.T.... 0500 bc 8c 66 eb 2f 88 c1 88 2b 50 84 d3 8d b9 78 88 ..f./...+P....x. 0510 7b 35 f7 c3 b5 81 ee 4a d2 9d d3 f5 82 a8 00 77 {5.....J.......w 0520 c4 be 35 4a de 7b 9a a1 56 2a 0e 6f d3 5d c4 13 ..5J.{..V*.o.].. 0530 65 43 4b 09 a3 4f 10 bf d4 4a 47 95 75 22 c8 b5 eCK..O...JG.u".. 0540 8f ba 40 bc 7f ac 0f 37 a0 4b da b6 79 c2 2c 13 ..@....7.K..y.,. 0550 1a 0b 8b 24 73 bf 09 d9 47 a6 c4 e7 77 6c 4b b8 ...$s...G...wlK. 0560 47 e6 1e 3a 14 41 eb 1c df 1a b8 75 49 a2 0e 71 G..:.A.....uI..q 0570 f9 a4 36 bd 69 d7 74 e3 82 68 98 31 74 bf f7 f2 ..6.i.t..h.1t... 0580 87 d6 05 fe e8 e6 f7 a8 aa 72 ed 01 ae 87 d5 0a .........r...... 0590 c5 3d 90 e0 43 28 4d e3 af 00 3d 2d 9a b6 d2 34 .=..C(M...=-...4 05a0 e9 9e dc d5 e6 d0 7c 33 ......|3 Data […]: 4a39f3f36493fc8aa448dd2043c23e0aa16ae269759244b880cd43bd21dc31f73e76583c9a8ae6e30b19476f5dc8f538016bcfc51d29e74afe0c135a0fb6d1cdeeec0ce8daa6ae938da44c41ee45fdb6cb5a25cba008d475c7a7192e1f2b3a116402d7e0723bc085b16a9f8e55657029e97 [Length: 1448]