Frame 125: Packet, 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) on interface unknown, id 0 Section number: 1 Interface id: 0 (unknown) Interface name: unknown Encapsulation type: Ethernet (1) Arrival Time: Apr 2, 2018 18:53:10.966133000 UTC UTC Arrival Time: Apr 2, 2018 18:53:10.966133000 UTC Epoch Arrival Time: 1522695190.966133000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 22.593000 milliseconds] [Time since reference or first frame: 46.174353000 seconds] Frame Number: 125 Frame Length: 1514 bytes (12112 bits) Capture Length: 1514 bytes (12112 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:image-gif] Character encoding: ASCII (0) Ethernet II, Src: VMware_f4:06:97 (00:0c:29:f4:06:97), Dst: VMware_c0:00:08 (00:50:56:c0:00:08) Destination: VMware_c0:00:08 (00:50:56:c0:00:08) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: VMware_f4:06:97 (00:0c:29:f4:06:97) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 192.168.2.130, Dst: 192.168.2.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0x8b83 (35715) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 64 Protocol: TCP (6) Header Checksum: 0x23c5 [validation disabled] [Header checksum status: Unverified] Source Address: 192.168.2.130 Destination Address: 192.168.2.1 [Stream index: 0] Transmission Control Protocol, Src Port: 80, Dst Port: 52893, Seq: 75574, Ack: 9495, Len: 1448 Source Port: 80 Destination Port: 52893 [Stream index: 0] [Stream Packet Number: 125] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1448] Sequence Number: 75574 (relative sequence number) Sequence Number (raw): 592267193 [Next Sequence Number: 77022 (relative sequence number)] Acknowledgment Number: 9495 (relative ack number) Acknowledgment number (raw): 277469813 1000 .... = Header Length: 32 bytes (8) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 579 [Calculated window size: 37056] [Window size scaling factor: 64] Checksum: 0x4242 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps TCP Option - No-Operation (NOP) Kind: No-Operation (1) TCP Option - No-Operation (NOP) Kind: No-Operation (1) TCP Option - Timestamps: TSval 548899, TSecr 2431604066 Kind: Time Stamp Option (8) Length: 10 Timestamp value: 548899 Timestamp echo reply: 2431604066 [Timestamps] [Time since first frame in this TCP stream: 46.174353000 seconds] [Time since previous frame in this TCP stream: 22.593000 milliseconds] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 124] [The RTT to ACK the segment was: 22.593000 milliseconds] [iRTT: 239.000 microseconds] [Bytes in flight: 1448] [Bytes sent since last PSH flag: 1448] [Client Contiguous Streams: 2] [Server Contiguous Streams: 3] TCP payload (1448 bytes) Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n Response Version: HTTP/1.1 Status Code: 200 [Status Code Description: OK] Response Phrase: OK Server: nginx/1.13.10\r\n Date: Mon, 02 Apr 2018 18:53:11 GMT\r\n Content-Type: image/gif\r\n Content-Length: 4178\r\n [Content length: 4178] Last-Modified: Tue, 28 Mar 2017 15:48:42 GMT\r\n Connection: keep-alive\r\n ETag: "58da85da-1052"\r\n Cache-Control: no-cache\r\n Accept-Ranges: bytes\r\n \r\n [Request in frame: 124] [Time since request: 22.593000 milliseconds] [Request URI: /images/wireshark-loading.gif] [Full request URI: http://192.168.2.130/images/wireshark-loading.gif] File Data: 1182 bytes Compuserve GIF, Version: GIF89a Version: GIF89a Screen width: 32 Screen height: 32 Global settings: (Global color table present) (7 bits per color) (6 bits per pixel) 1... .... = Global color map is present: True (1) .111 .... = Bits per color minus 1: 7 .... 0... = Global color map is ordered: False (0) .... .101 = Image bits per pixel minus 1: 5 Background color index: 0 Global color map […]: ffffff000000fafafac4c4c4e8e8e8f0f0f0d0d0d07e7e7e9a9a9af6f6f6e6e6e6fcfcfc929292868686e2e2e2b8b8b8a0a0a0ecececaeaeaedcdcdc3e3e3e5656566060607c7c7ca8a8a8eeeeee4a4a4a6c6c6c0c0c0c000000cececec8c8c8d8d8d82c2c2c5e5e5e1e1e1 Extension: Comment Extension label: Comment (0xfe) Data block: 43726561746564207769746820616a61786c6f61642e696e666f (length = 26) Data block: (length = 0) Extension: Graphics Control Extension label: Graphics Control (0xf9) Data block: 000a0000 (length = 4) Data block: (length = 0) Extension: Application Extension label: Application (0xff) Data block: 4e45545343415045322e30 (length = 11) Data block: 010000 (length = 3) Data block: (length = 0) Image Image left position: 0 Image top position: 0 Image width: 32 Image height: 32 Local settings: (1 bit per color) (1 bit per pixel) 0... .... = Local color map is present: False (0) .000 .... = Bits per color minus 1: 0 .... 0... = Local color map is ordered: False (0) .... .000 = Image bits per pixel minus 1: 0 LZW minimum code size: 6 Data block […]: 408070482416381c4771c9244e12c441a733280a9a4c09c5129d56870505144b7c50288fa1943a1428140572b142d18cd75f4058212f1ace0c4278426e627d451767040083006f117206064504671b8c5e00096f57440963000407070c4a43106713050303050b6f716d116f0b840 Data block: 267b6aed54a920c342426fc60c65d8f0a8c4369c863c05b71440d5423fb1b8310ab52918af47bb620c4b8416b820 (length = 46) Data block: (length = 0) Extension: Graphics Control Extension label: Graphics Control (0xf9) Data block: 000a0001 (length = 4) Data block: (length = 0) Image Image left position: 0 Image top position: 0 Image width: 32 Image height: 32 Local settings: (1 bit per color) (1 bit per pixel) 0... .... = Local color map is present: False (0) .000 .... = Bits per color minus 1: 0 .... 0... = Local color map is ordered: False (0) .... .000 = Image bits per pixel minus 1: 0 LZW minimum code size: 6 Data block […]: 408070482426341a4271c924120444038562280e9acccf01119d5687a2ce065b341c0e5f80943a1c743a227291716840d5de61a8c329c8890e670f426b5f106f077f4518677e8500051c1d2372044a44056710786c076f574609430903031f7e6d6704090606090e6f144402110a0 Data block: 890f21d922f98f09355c40efd8cac07008d06f491b0e6d0aa0d64e215185586d9a1540d7a70c2532753a7548328d5ccb529523936110 (length = 54) Data block: (length = 0) Extension: Graphics Control Extension label: Graphics Control (0xf9) Data block: 000a0002 (length = 4) Data block: (length = 0) Image Image left position: 0 Image top position: 0 Image width: 32 Image height: 32 Local settings: (1 bit per color) (1 bit per pixel) 0... .... = Local color map is present: False (0) .000 .... = Bits per color minus 1: 0 .... 0... = Local color map is ordered: False (0) .... .000 = Image bits per pixel minus 1: 0 LZW minimum code size: 6 [BoundError Unreassembled Packet: GIF image] [Expert Info (Note/Reassemble): Unreassembled fragment (change preferences to enable reassembly)] [Unreassembled fragment (change preferences to enable reassembly)] [Severity level: Note] [Group: Reassemble]