Frame 2068: 623 bytes on wire (4984 bits), 623 bytes captured (4984 bits) on interface unknown, id 0 Interface id: 0 (unknown) Interface name: unknown Encapsulation type: Ethernet (1) Arrival Time: Oct 18, 2013 14:20:20.183698000 UTC [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1382106020.183698000 seconds [Time delta from previous captured frame: 0.000046000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 7.186950000 seconds] Frame Number: 2068 Frame Length: 623 bytes (4984 bits) Capture Length: 623 bytes (4984 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: SuperMic_97:4b:8e (00:25:90:97:4b:8e), Dst: VMware_0f:e0:23 (00:0c:29:0f:e0:23) Destination: VMware_0f:e0:23 (00:0c:29:0f:e0:23) Address: VMware_0f:e0:23 (00:0c:29:0f:e0:23) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: SuperMic_97:4b:8e (00:25:90:97:4b:8e) Address: SuperMic_97:4b:8e (00:25:90:97:4b:8e) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) Internet Protocol Version 4, Src: 54.230.22.126, Dst: 192.168.103.82 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 609 Identification: 0x7d06 (32006) Flags: 0x40, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 250 Protocol: TCP (6) Header Checksum: 0x8c31 [validation disabled] [Header checksum status: Unverified] Source Address: 54.230.22.126 Destination Address: 192.168.103.82 [Source GeoIP: US, ASN 16509, AMAZON-02] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP AS Number: 16509] [Source or Destination GeoIP AS Number: 16509] [Source GeoIP AS Organization: AMAZON-02] [Source or Destination GeoIP AS Organization: AMAZON-02] [Source GeoIP Latitude: 37.751] [Source or Destination GeoIP Latitude: 37.751] [Source GeoIP Longitude: -97.822] [Source or Destination GeoIP Longitude: -97.822] Transmission Control Protocol, Src Port: 80, Dst Port: 56155, Seq: 595017, Ack: 5680, Len: 569 Source Port: 80 Destination Port: 56155 [Stream index: 3] [Conversation completeness: Incomplete, DATA (15)] [TCP Segment Len: 569] Sequence Number: 595017 (relative sequence number) Sequence Number (raw): 4171173223 [Next Sequence Number: 595586 (relative sequence number)] Acknowledgment Number: 5680 (relative ack number) Acknowledgment number (raw): 1039073800 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 343 [Calculated window size: 21952] [Window size scaling factor: 64] Checksum: 0x1d24 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 3.150293000 seconds] [Time since previous frame in this TCP stream: 0.016034000 seconds] [SEQ/ACK analysis] [iRTT: 0.037853000 seconds] [Bytes in flight: 569] [Bytes sent since last PSH flag: 15169] TCP payload (569 bytes) Hypertext Transfer Protocol [truncated]/���v���\023\���\177>\177£?�\177�\000"��o�������ۻ]U�Wς}����\000��?���ߘ|��o�Pl�k����S]��ҵ���;rSq\017�|���\177�\vx�?^�� [Expert Info (Warning/Undecoded): Trailing stray characters] [Trailing stray characters] [Severity level: Warning] [Group: Undecoded] [Expert Info (Warning/Protocol): Illegal characters found in header name] [Illegal characters found in header name] [Severity level: Warning] [Group: Protocol] File Data: 186 bytes Data (186 bytes) 0000 fc c8 b7 fc e2 bf 0d f0 cf 7c be bf 87 e2 37 a7 .........|....7. 0010 d6 dd fe 77 a7 4a 7d 95 d7 6b e4 f4 8f fe ad 3e ...w.J}..k.....> 0020 be cd bb 53 e9 fa 95 a5 34 bb 55 32 f4 8f e9 7a ...S....4.U2...z 0030 5f dc fd 5f 86 d8 6b f8 bf 17 9d 6b d7 5d 43 7f _.._..k....k.]C. 0040 aa e4 b2 ab d8 7e 5b fc 76 7f 82 ab fc 6b bf af .....~[.v....k.. 0050 c0 ef d9 5a ff 00 db 7a 5e ee ea fe dd 1b af 1f ...Z...z^....... 0060 57 ed 5d 45 df d3 ba 73 f3 3f f2 cb fc 35 cd ff W.]E...s.?...5.. 0070 00 78 77 ca ff 00 94 b4 5f ca 36 fa ff 00 3d f9 .xw....._.6...=. 0080 86 c5 7a 3f 27 af ea fa d5 a6 ed bd 29 f8 ba 69 ..z?'.......)..i 0090 c7 57 ee bf a3 64 07 61 ed ff 00 56 eb 93 3f fe .W...d.a...V..?. 00a0 b4 ff 00 6f 7f ae 3f d9 7f ea 1f fe 6f fe 5e ad ...o..?.....o.^. 00b0 df df fa 6c ab 5f d8 5f ff d9 ...l._._.. Data: fcc8b7fce2bf0df0cf7cbebf87e237a7d6ddfe77a74a7d95d76be4f48ffead3ebecdbb53… [Length: 186]