Frame 4793: 476 bytes on wire (3808 bits), 476 bytes captured (3808 bits) on interface unknown, id 0 Interface id: 0 (unknown) Interface name: unknown Encapsulation type: Ethernet (1) Arrival Time: Oct 18, 2013 14:20:24.227148000 UTC [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1382106024.227148000 seconds [Time delta from previous captured frame: 0.001003000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 11.230400000 seconds] Frame Number: 4793 Frame Length: 476 bytes (3808 bits) Capture Length: 476 bytes (3808 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: SuperMic_97:4b:8e (00:25:90:97:4b:8e), Dst: VMware_0f:e0:23 (00:0c:29:0f:e0:23) Destination: VMware_0f:e0:23 (00:0c:29:0f:e0:23) Address: VMware_0f:e0:23 (00:0c:29:0f:e0:23) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: SuperMic_97:4b:8e (00:25:90:97:4b:8e) Address: SuperMic_97:4b:8e (00:25:90:97:4b:8e) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) Internet Protocol Version 4, Src: 54.230.22.126, Dst: 192.168.103.82 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 462 Identification: 0x2704 (9988) Flags: 0x40, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 250 Protocol: TCP (6) Header Checksum: 0xe2c6 [validation disabled] [Header checksum status: Unverified] Source Address: 54.230.22.126 Destination Address: 192.168.103.82 [Source GeoIP: US, ASN 16509, AMAZON-02] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP AS Number: 16509] [Source or Destination GeoIP AS Number: 16509] [Source GeoIP AS Organization: AMAZON-02] [Source or Destination GeoIP AS Organization: AMAZON-02] [Source GeoIP Latitude: 37.751] [Source or Destination GeoIP Latitude: 37.751] [Source GeoIP Longitude: -97.822] [Source or Destination GeoIP Longitude: -97.822] Transmission Control Protocol, Src Port: 80, Dst Port: 56152, Seq: 985060, Ack: 5349, Len: 422 Source Port: 80 Destination Port: 56152 [Stream index: 1] [Conversation completeness: Incomplete, DATA (15)] [TCP Segment Len: 422] Sequence Number: 985060 (relative sequence number) Sequence Number (raw): 2813761711 [Next Sequence Number: 985482 (relative sequence number)] Acknowledgment Number: 5349 (relative ack number) Acknowledgment number (raw): 3222818900 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 313 [Calculated window size: 20032] [Window size scaling factor: 64] Checksum: 0x2151 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 7.346762000 seconds] [Time since previous frame in this TCP stream: 0.001003000 seconds] [SEQ/ACK analysis] [iRTT: 0.039914000 seconds] [Bytes in flight: 1882] [Bytes sent since last PSH flag: 1882] TCP payload (422 bytes) Hypertext Transfer Protocol Data (422 bytes) 0000 00 00 00 55 00 00 00 44 00 00 00 22 00 00 00 11 ...U...D...".... 0010 00 00 ee 00 00 00 dd 00 00 00 bb 00 00 00 aa 00 ................ 0020 00 00 88 00 00 00 77 00 00 00 55 00 00 00 44 00 ......w...U...D. 0030 00 00 22 00 00 00 11 00 00 00 ee ee ee 00 dd dd .."............. 0040 dd 00 bb bb bb 00 aa aa aa 00 88 88 88 00 77 77 ..............ww 0050 77 00 55 55 55 00 44 44 44 00 22 22 22 00 11 11 w.UUU.DDD."""... 0060 11 00 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ................ 0070 ff ff ff ff ff ff ff ff ff ff ff f5 4f 73 4f f5 ............OsO. 0080 ff ff ff ff ff ff ff ff ff ff 9d c8 ce ce ce c8 ................ 0090 9d ff ff ff ff ff ff ff ff a4 ce c8 c8 c8 c8 c8 ................ 00a0 ce c8 ff ff ff ff ff ff 9d ce ab ce c8 c8 c8 c8 ................ 00b0 c7 c8 c7 ff ff ff ff 2a ce ce ce cf ab 9d ce ce .......*........ 00c0 c8 c8 ce 4f ff ff ff 55 a4 a3 9d c7 79 56 a4 9d ...O...U....yV.. 00d0 9d c7 9d 9d ff ff ff 9d 79 00 2b 32 00 4e 79 f5 ........y.+2.Ny. 00e0 4e 24 00 c7 ff ff ff 9d 4e 24 79 79 00 3f 07 f5 N$......N$yy.?.. 00f0 87 00 96 c7 ff ff ff 79 c8 c8 c1 c8 c8 ce a4 5c .......y.......\ 0100 40 40 ab 9d ff ff ff f6 c8 ce c7 c8 ce c7 c7 ce @@.............. 0110 ce 87 d7 15 ff ff ff ff 79 ce c7 c7 c7 c7 c8 c8 ........y....... 0120 c8 ce 9d ff ff ff ff ff ff 9d c8 c8 c8 c8 c8 ce ................ 0130 ce 9d ff ff ff ff ff ff ff ff 4f a3 c8 c8 c8 c7 ..........O..... 0140 4f ff ff ff ff ff ff ff ff ff ff 00 f5 2a f5 00 O............*.. 0150 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ 0160 ff ff ff ff ff ff ff ff 00 00 f8 3f 00 00 f0 1f ...........?.... 0170 00 00 e0 0f 00 00 c0 07 00 00 80 03 00 00 80 03 ................ 0180 00 00 80 03 00 00 80 03 00 00 80 03 00 00 80 03 ................ 0190 00 00 c0 07 00 00 e0 0f 00 00 f0 1f 00 00 f8 3f ...............? 01a0 00 00 ff ff 00 00 ...... Data: 000000550000004400000022000000110000ee000000dd000000bb000000aa0000008800… [Length: 422]