Frame 3: Packet, 305 bytes on wire (2440 bits), 305 bytes captured (2440 bits) on interface en0, id 0
    Section number: 1
    Interface id: 0 (en0)
        Interface name: en0
    Encapsulation type: Ethernet (1)
    Arrival Time: Aug 10, 2017 16:01:55.481182000 UTC
    UTC Arrival Time: Aug 10, 2017 16:01:55.481182000 UTC
    Epoch Arrival Time: 1502380915.481182000
    [Time shift for this packet: 0.000000000 seconds]
    [Time delta from previous captured frame: 51.000 microseconds]
    [Time since reference or first frame: 612.000 microseconds]
    Frame Number: 3
    Frame Length: 305 bytes (2440 bits)
    Capture Length: 305 bytes (2440 bits)
    [Frame is marked: False]
    [Frame is ignored: False]
    [Protocols in frame: eth:ethertype:ip:tcp:xmpp:xml]
    Character encoding: ASCII (0)
Ethernet II, Src: Apple_a4:dd:a8 (68:5b:35:a4:dd:a8), Dst: 4e:5e:92:29:22:86 (4e:5e:92:29:22:86)
    Destination: 4e:5e:92:29:22:86 (4e:5e:92:29:22:86)
        .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: Apple_a4:dd:a8 (68:5b:35:a4:dd:a8)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IPv4 (0x0800)
    [Stream index: 0]
Internet Protocol Version 4, Src: 172.16.0.62, Dst: 172.16.1.138
    0100 .... = Version: 4
    .... 0101 = Header Length: 20 bytes (5)
    Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
        0000 00.. = Differentiated Services Codepoint: Default (0)
        .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
    Total Length: 291
    Identification: 0xf169 (61801)
    010. .... = Flags: 0x2, Don't fragment
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    ...0 0000 0000 0000 = Fragment Offset: 0
    Time to Live: 64
    Protocol: TCP (6)
    Header Checksum: 0x0000 [validation disabled]
    [Header checksum status: Unverified]
    Source Address: 172.16.0.62
    Destination Address: 172.16.1.138
    [Stream index: 0]
Transmission Control Protocol, Src Port: 57149, Dst Port: 5222, Seq: 1, Ack: 1, Len: 239
    Source Port: 57149
    Destination Port: 5222
    [Stream index: 0]
    [Stream Packet Number: 1]
    [Conversation completeness: Incomplete (0)]
        ..0. .... = RST: Absent
        ...0 .... = FIN: Absent
        .... 0... = Data: Absent
        .... .0.. = ACK: Absent
        .... ..0. = SYN-ACK: Absent
        .... ...0 = SYN: Absent
        [Completeness Flags: [ Null ]]
    [TCP Segment Len: 239]
    Sequence Number: 1    (relative sequence number)
    Sequence Number (raw): 1881641992
    [Next Sequence Number: 240    (relative sequence number)]
    Acknowledgment Number: 1    (relative ack number)
    Acknowledgment number (raw): 2669286744
    1000 .... = Header Length: 32 bytes (8)
    Flags: 0x018 (PSH, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Accurate ECN: Not set
        .... 0... .... = Congestion Window Reduced: Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 1... = Push: Set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
        [TCP Flags: ·······AP···]
    Window: 8192
    [Calculated window size: 8192]
    [Window size scaling factor: -1 (unknown)]
    Checksum: 0x5afe [unverified]
    [Checksum Status: Unverified]
    Urgent Pointer: 0
    Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
        TCP Option - No-Operation (NOP)
            Kind: No-Operation (1)
        TCP Option - No-Operation (NOP)
            Kind: No-Operation (1)
        TCP Option - Timestamps: TSval 1310006680, TSecr 2765433
            Kind: Time Stamp Option (8)
            Length: 10
            Timestamp value: 1310006680
            Timestamp echo reply: 2765433
    [Timestamps]
        [Time since first frame in this TCP stream: 0.000000000 seconds]
        [Time since previous frame in this TCP stream: 0.000000000 seconds]
    [Client Contiguous Streams: 0]
    [Server Contiguous Streams: 1]
    TCP payload (239 bytes)
XMPP Protocol
    PRESENCE []
        to: chat-with-tom@conference.cs-xmpp.lan/tom@cs-xmpp.lan
        CAPS [hash="sha-1" node="http://pidgin.im/"]
            xmlns: http://jabber.org/protocol/caps
            hash: sha-1
            node: http://pidgin.im/
            ver: DdnydQG7RGhP9E3k9Sf+b+bF0zo=
        X MUC []
            xmlns: http://jabber.org/protocol/muc