Frame 1189: Packet, 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) on interface unknown, id 0 Section number: 1 Interface id: 0 (unknown) Interface name: unknown Encapsulation type: Ethernet (1) Arrival Time: Apr 21, 2015 02:19:01.768333000 UTC UTC Arrival Time: Apr 21, 2015 02:19:01.768333000 UTC Epoch Arrival Time: 1429582741.768333000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 2.753000 milliseconds] [Time since reference or first frame: 1.150862000 seconds] Frame Number: 1189 Frame Length: 1514 bytes (12112 bits) Capture Length: 1514 bytes (12112 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: VMware_8d:0a:0c (00:0c:29:8d:0a:0c), Dst: VMware_8c:8b:4a (00:0c:29:8c:8b:4a) Destination: VMware_8c:8b:4a (00:0c:29:8c:8b:4a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: VMware_8d:0a:0c (00:0c:29:8d:0a:0c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 216.34.181.45, Dst: 10.0.1.4 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0x5596 (21910) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 241 Protocol: TCP (6) Header Checksum: 0x9631 [validation disabled] [Header checksum status: Unverified] Source Address: 216.34.181.45 Destination Address: 10.0.1.4 [Source GeoIP: US] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP Latitude: 37.751] [Source or Destination GeoIP Latitude: 37.751] [Source GeoIP Longitude: -97.822] [Source or Destination GeoIP Longitude: -97.822] [Stream index: 0] Transmission Control Protocol, Src Port: 80, Dst Port: 51482, Seq: 49001, Ack: 336, Len: 1448 Source Port: 80 Destination Port: 51482 [Stream index: 0] [Stream Packet Number: 66] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1448] Sequence Number: 49001 (relative sequence number) Sequence Number (raw): 3719368257 [Next Sequence Number: 50449 (relative sequence number)] Acknowledgment Number: 336 (relative ack number) Acknowledgment number (raw): 1944249689 1000 .... = Header Length: 32 bytes (8) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 147 [Calculated window size: 4704] [Window size scaling factor: 32] Checksum: 0xcb6f [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps TCP Option - No-Operation (NOP) Kind: No-Operation (1) TCP Option - No-Operation (NOP) Kind: No-Operation (1) TCP Option - Timestamps: TSval 3653599370, TSecr 16631638 Kind: Time Stamp Option (8) Length: 10 Timestamp value: 3653599370 Timestamp echo reply: 16631638 [Timestamps] [Time since first frame in this TCP stream: 1.150862000 seconds] [Time since previous frame in this TCP stream: 2.753000 milliseconds] [SEQ/ACK analysis] [iRTT: 188.182000 milliseconds] [Bytes in flight: 8688] [Bytes sent since last PSH flag: 21726] [Client Contiguous Streams: 1] [Server Contiguous Streams: 1] TCP payload (1448 bytes) Hypertext Transfer Protocol File Data: 1448 bytes Data (1448 bytes) 0000 69 41 0a 70 f4 a7 38 be 3c 23 35 4f 83 93 53 1d iA.p..8.<#5O..S. 0010 b8 eb 31 35 2f 05 98 8e 4b 8a 4a 53 81 2a 21 aa ..15/...K.JS.*!. 0020 41 61 09 02 30 2f c5 17 43 06 8e 8b f5 80 b3 17 Aa..0/..C....... 0030 45 25 20 23 80 96 28 29 81 ac 00 42 74 65 c5 7a E% #..()...Bte.z 0040 c0 71 0b b0 8a 5c e0 ea 9e 14 dc ca 60 77 bb 80 .q...\......`w.. 0050 94 e2 56 05 1e f8 4b 01 6e a5 05 aa 72 71 0d 76 ..V...K.n...rq.v 0060 26 a0 12 b8 12 0b a8 10 34 d9 58 02 5c 97 06 3c &.......4.X.\..< 0070 69 18 a7 72 d8 7e 75 a0 7a 5d 50 a4 82 00 ba 2a i..r.~u.z]P....* 0080 d0 d6 37 60 2b 1e a8 04 78 26 10 f0 b0 73 74 d3 ..7`+...x&...st. 0090 10 ea c0 e7 b8 03 95 15 03 fb 3e c0 69 78 fc 0a ..........>.ix.. 00a0 c1 4d 65 90 6a dc ca 80 0d 78 fc 0a 80 f7 02 00 .Me.j....x...... 00b0 ef 87 41 0f 40 2c 0a 81 09 a3 08 b8 0d 2f b5 3c ..A.@,......./.< 00c0 be 14 38 64 8a 57 69 31 a4 0c 01 ed 62 02 29 f4 ..8d.Wi1....b.). 00d0 05 9e 57 0f 52 8c 94 0d e0 4a 81 f3 19 c0 93 f0 ..W.R....J...... 00e0 81 8a 40 0a d0 a5 e1 26 01 15 18 02 87 80 c1 39 ..@....&.......9 00f0 04 b2 23 aa b0 14 78 43 3e 30 77 00 37 44 69 a0 ..#...xC>0w.7Di. 0100 6b 43 24 09 70 3a 44 36 17 78 9e 2e cc 55 e0 62 kC$.p:D6.x...U.b 0110 18 d8 d5 44 b5 38 27 3f 1d 58 67 00 a5 81 13 54 ...D.8'?.Xg....T 0120 c5 c0 6a 04 78 d2 35 30 d9 00 0b 6e e0 4d 8b 69 ..j.x.50...n.M.i 0130 a0 f3 2f 81 c3 d8 c0 75 ce 40 b3 c1 71 03 d7 08 ../....u.@..q... 0140 c9 12 f1 e0 18 89 07 5f 05 a0 01 b4 1c 21 5f 9c ......._.....!_. 0150 9b 98 93 03 2c 0f 80 91 0f 34 dd 00 ec 2e 20 02 ....,....4.... . 0160 42 24 35 30 e7 67 82 ae 36 02 2a 03 25 27 90 2a B$50.g..6.*.%'.* 0170 c8 aa 35 b8 ba 44 70 98 00 ed 02 7b 04 68 16 aa ..5..Dp....{.h.. 0180 34 38 a2 c0 05 35 54 16 a8 1f aa 24 03 e8 34 f4 48...5T....$..4. 0190 74 08 13 04 a9 8e 56 00 1e a8 9c 02 dc ba aa 94 t.....V......... 01a0 5f 04 ba 0a 01 c4 aa 04 1e 70 90 5f 0e 62 41 b4 _........p._.bA. 01b0 00 19 c0 12 06 2c 05 74 67 26 b0 4a 04 b2 ca 32 .....,.tg&.J...2 01c0 f3 81 45 33 88 05 5c 28 08 ba 8b 0a b8 73 15 c5 ..E3..\(.....s.. 01d0 ca e2 f8 0c 60 70 03 ad 00 0e 71 03 af 18 2d 02 ....`p....q...-. 01e0 96 de 06 e0 00 02 ba 46 03 a4 30 d3 d6 c0 5a 21 .......F..0...Z! 01f0 d3 06 a1 41 2f 07 bc 67 0e 28 a8 ad 0d 29 9f e0 ...A/..g.(...).. 0200 52 60 b3 a2 e1 dc e8 cc d8 58 a0 c9 99 40 e3 6a R`.......X...@.j 0210 81 7e 05 99 06 94 03 27 55 f4 22 04 4b 60 17 24 .~.....'U.".K`.$ 0220 02 3b 92 d0 80 02 59 91 59 1c 9f 08 ba 95 04 2a .;....Y.Y......* 0230 06 32 0d 12 b9 9e c0 de 61 51 59 62 4e 08 b0 90 .2......aQYbN... 0240 07 4a 1a 41 25 33 f3 40 f1 51 06 dc 3d 05 8e 91 .J.A%3.@.Q..=... 0250 fc 52 50 d1 69 0c 3c b9 08 28 0f b4 04 36 f9 ef .RP.i.<..(...6.. 0260 08 54 04 2c 8e 41 7e 06 e9 82 18 09 d6 01 54 0e .T.,.A~.......T. 0270 dc 26 68 68 aa 6b 60 a2 6b 64 a8 60 60 64 65 68 .&hh.k`.kd.``deh 0280 61 65 60 00 74 2d 44 69 6e 62 05 7e 65 60 55 99 ae`.t-Dinb.~e`U. 0290 79 c0 68 2f 89 07 06 6f 3c 30 89 02 d5 02 e7 38 y.h/...o<0.....8 02a0 80 72 40 4f 71 01 3d 05 ac c8 b3 41 cd 1f a0 84 .r@Oq.=....A.... 02b0 a1 a9 35 17 52 3e 50 cf 04 ee ce 45 19 77 51 07 ..5.R>P....E.wQ. 02c0 ea 02 41 a4 2a b4 18 92 0d 41 55 1d 10 d9 a4 e5 ..A.*....AU..... 02d0 03 8f e0 02 5a 09 6c 16 01 73 5a 89 12 ac 59 90 ....Z.l..sZ...Y. 02e0 5e 04 3a ef cc 44 21 2f 4d 09 58 e7 d9 00 2b 47 ^.:..D!/M.X...+G 02f0 b0 9a 1c 60 bb 29 1e 28 06 53 06 3e d3 0c a4 02 ...`.).(.S.>.... 0300 79 f4 07 d9 05 c0 a1 11 70 ab 0c 96 45 81 0e 00 y.......p...E... 0310 71 81 15 33 50 13 b4 d2 e5 b4 c9 4b 2c 03 de 65 q..3P......K,..e 0320 9a 03 ac 70 61 91 0a cc af 20 87 81 8d 06 fa 9b ...pa.... ...... 0330 13 d4 aa 01 31 41 dd 77 90 43 80 51 0d 8c 2d 90 ....1A.w.C.Q..-. 0340 4f c0 7d 7d a0 e6 62 88 5a 60 cc 83 00 58 31 50 O.}}..b.Z`...X1P 0350 39 f0 ac 15 54 a7 a2 bb 13 e8 26 90 3b f5 ed c1 9...T.....&.;... 0360 c5 97 2d 28 5a 0c 4c 8c 0c 94 ec 42 f2 53 12 2b ..-(Z.L....B.S.+ 0370 41 ee 04 b7 22 c1 c6 81 09 0a 8d 36 b4 04 8e 7b A..."......6...{ 0380 94 e6 d1 c6 6c e0 4a d2 60 d0 26 6b da 98 0e bc ....l.J.`.&k.... 0390 d9 c1 0d 98 2c d0 cd 06 13 94 9a 6d 06 0c f0 8c ....,......m.... 03a0 d2 22 d0 c8 1e ba e9 20 40 a1 e9 a6 c0 45 99 a9 ."..... @....E.. 03b0 29 c0 55 47 b4 31 de 04 e8 78 e0 65 35 b4 31 dc ).UG.1...x.e5.1. 03c0 58 09 b8 5a 17 3d bd 40 cc 06 77 6c c0 0c 68 f6 X..Z.=.@..wl..h. 03d0 56 d0 d7 02 95 97 c0 cc 01 ad c5 80 a7 35 6b e9 V............5k. 03e0 03 f3 1c 44 1a 9a 8d 40 04 08 83 f2 12 cc 45 45 ...D...@......EE 03f0 a0 81 48 e0 55 53 49 b9 c0 b5 99 c0 06 0b 70 7c ..H.USI.......p| 0400 15 ae 0e 44 23 bb be 08 a4 16 d9 f9 10 6d c0 b4 ...D#........m.. 0410 07 a6 c1 19 1e a6 38 1f d4 68 56 08 06 99 08 74 ......8..hV....t 0420 06 50 02 e8 05 98 37 60 e6 db 40 bc 61 a3 0f 2c .P....7`..@.a.., 0430 06 40 2d 71 48 d6 07 89 40 0b 2b 98 61 49 85 40 .@-qH...@.+.aI.@ 0440 5b 81 b3 66 c9 d9 85 a5 40 25 30 e1 dc e2 74 85 [..f....@%0...t. 0450 f4 22 70 79 05 2c 98 80 e5 21 a2 0b 05 54 00 0b ."py.,...!...T.. 0460 56 a0 d6 02 3b d0 5e f8 3c 60 4d 93 0e 3c 58 08 V...;.^.<`M...r...x.>pv.X 0480 ec 94 67 00 ef 26 06 ef 65 01 32 81 a5 2f 70 65 ..g..&..e.2../pe 0490 53 25 50 1d 70 ee bb 44 01 98 6b 81 6d 85 12 e0 S%P.p..D..k.m... 04a0 62 2e e0 14 69 01 a4 60 83 b9 01 68 53 1e d0 a7 b...i..`...hS... 04b0 70 3f 22 5c 09 e4 40 bd 01 f4 1b c4 6b e0 12 0c p?"\..@.....k... 04c0 98 02 60 9a 61 8e 07 7a 19 52 16 22 8b 1b 02 b7 ..`.a..z.R.".... 04d0 9d 03 8b 37 a0 a7 20 9a 95 40 aa 40 41 07 8c 3e ...7.. ..@.@A..> 04e0 10 13 94 b0 90 e2 02 c5 cf fa 69 89 c0 20 73 73 ..........i.. ss 04f0 0c 44 04 3a 01 0d a0 06 19 70 11 08 68 e3 84 1d .D.:.....p..h... 0500 38 d6 80 35 3c 58 84 68 13 32 f2 d3 f4 8a 41 27 8..5