Here frames 47-50, sorry I was not sure which ones are important:
Frame 47: 618 bytes on wire (4944 bits), 618 bytes captured (4944 bits) on interface lo0, id 0
Section number: 1
Interface id: 0 (lo0)
Interface name: lo0
Interface description: Loopback
Encapsulation type: NULL/Loopback (15)
Arrival Time: Oct 15, 2024 10:04:29.250987000 CEST
UTC Arrival Time: Oct 15, 2024 08:04:29.250987000 UTC
Epoch Arrival Time: 1728979469.250987000
[Time shift for this packet: 0.000000000 seconds]
[Time delta from previous captured frame: 0.000211000 seconds]
[Time delta from previous displayed frame: 0.000211000 seconds]
[Time since reference or first frame: 1.517462000 seconds]
Frame Number: 47
Frame Length: 618 bytes (4944 bits)
Capture Length: 618 bytes (4944 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: null:ip:tcp:http:websocket]
Null/Loopback
Family: IP (2)
Internet Protocol Version 4, Src: 127.0.0.1, Dst: 127.0.0.1
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 614
Identification: 0x0000 (0)
010. .... = Flags: 0x2, Don't fragment
0... .... = Reserved bit: Not set
.1.. .... = Don't fragment: Set
..0. .... = More fragments: Not set
...0 0000 0000 0000 = Fragment Offset: 0
Time to Live: 64
Protocol: TCP (6)
Header Checksum: 0x0000 [validation disabled]
[Header checksum status: Unverified]
Source Address: 127.0.0.1
Destination Address: 127.0.0.1
[Stream index: 0]
Transmission Control Protocol, Src Port: 60903, Dst Port: 8080, Seq: 563, Ack: 200, Len: 562
Source Port: 60903
Destination Port: 8080
[Stream index: 12]
[Conversation completeness: Incomplete, DATA (15)]
..0. .... = RST: Absent
...0 .... = FIN: Absent
.... 1... = Data: Present
.... .1.. = ACK: Present
.... ..1. = SYN-ACK: Present
.... ...1 = SYN: Present
[Completeness Flags: ··DASS]
[TCP Segment Len: 562]
Sequence Number: 563 (relative sequence number)
Sequence Number (raw): 1424653802
[Next Sequence Number: 1125 (relative sequence number)]
Acknowledgment Number: 200 (relative ack number)
Acknowledgment number (raw): 1179582105
1000 .... = Header Length: 32 bytes (8)
Flags: 0x018 (PSH, ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Accurate ECN: Not set
.... 0... .... = Congestion Window Reduced: Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 1... = Push: Set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
[TCP Flags: ·······AP···]
Window: 6376
[Calculated window size: 408064]
[Window size scaling factor: 64]
Checksum: 0x005b [unverified]
[Checksum Status: Unverified]
Urgent Pointer: 0
Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
TCP Option - No-Operation (NOP)
Kind: No-Operation (1)
TCP Option - No-Operation (NOP)
Kind: No-Operation (1)
TCP Option - Timestamps: TSval 1247263607, TSecr 983459320
Kind: Time Stamp Option (8)
Length: 10
Timestamp value: 1247263607
Timestamp echo reply: 983459320
[Timestamps]
[Time since first frame in this TCP stream: 0.005977000 seconds]
[Time since previous frame in this TCP stream: 0.001815000 seconds]
[SEQ/ACK analysis]
[iRTT: 0.000055000 seconds]
[Bytes in flight: 562]
[Bytes sent since last PSH flag: 562]
TCP payload (562 bytes)
[PDU Size: 71]
[PDU Size: 47]
[PDU Size: 124]
[PDU Size: 50]
[PDU Size: 51]
[PDU Size: 34]
[PDU Size: 99]
TCP segment data (86 bytes)
WebSocket
0... .... = Fin: False
.100 .... = Reserved: 0x4
.1.. .... = Per-Message Compressed: True
.... 0111 = Opcode: Unknown (7)
0... .... = Mask: False
.100 0101 = Payload length: 69
Payload
WebSocket
0... .... = Fin: False
.110 .... = Reserved: 0x6
.1.. .... = Per-Message Compressed: True
.... 1111 = Opcode: Unknown (15)
0... .... = Mask: False
.010 1101 = Payload length: 45
Payload
Unknown: 63616368650d0a43616368652d436f6e74726f6c3a206e6f2d63616368650d0a557365722d4167656e743a204d
[Expert Info (Note/Undecoded): Dissector for Websocket Opcode (15) code not implemented, Contact Wireshark developers if you want this supported]
[Dissector for Websocket Opcode (15) code not implemented, Contact Wireshark developers if you want this supported]
[Severity level: Note]
[Group: Undecoded]
WebSocket
0... .... = Fin: False
.110 .... = Reserved: 0x6
.1.. .... = Per-Message Compressed: True
.... 1111 = Opcode: Unknown (15)
0... .... = Mask: False
.111 1010 = Payload length: 122
Payload
Unknown […]: 696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132392e302e302e30205361666172692f3533372e
[Expert Info (Note/Undecoded): Dissector for Websocket Opcode (15) code not implemented, Contact Wireshark developers if you want this supported]
[Dissector for Websocket Opcode (15) code not implemented, Contact Wireshark developers if you want this supported]
[Severity level: Note]
[Group: Undecoded]
WebSocket
0... .... = Fin: False
.010 .... = Reserved: 0x2
.0.. .... = Per-Message Compressed: False
.... 1110 = Opcode: Unknown (14)
0... .... = Mask: False
.011 0000 = Payload length: 48
Payload
Unknown: 2e302e300d0a557067726164653a20776562736f636b65740d0a4f726967696e3a20687474703a2f2f3132372e302e30
[Expert Info (Note/Undecoded): Dissector for Websocket Opcode (14) code not implemented, Contact Wireshark developers if you want this supported]
[Dissector for Websocket Opcode (14) code not implemented, Contact Wireshark developers if you want this supported]
[Severity level: Note]
[Group: Undecoded]
WebSocket
0... .... = Fin: False
.010 .... = Reserved: 0x2
.0.. .... = Per-Message Compressed: False
.... 1110 = Opcode: Unknown (14)
0... .... = Mask: False
.011 0001 = Payload length: 49
Payload
Unknown: 3a383038300d0a5365632d576562536f636b65742d56657273696f6e3a2031330d0a4163636570742d456e636f64696e67
[Expert Info (Note/Undecoded): Dissector for Websocket Opcode (14) code not implemented, Contact Wireshark developers if you want this supported]
[Dissector for Websocket Opcode (14) code not implemented, Contact Wireshark developers if you want this supported]
[Severity level: Note]
[Group: Undecoded]
WebSocket
0... .... = Fin: False
.011 .... = Reserved: 0x3
.0.. .... = Per-Message Compressed: False
.... 1010 = Opcode: Pong (10)
0... .... = Mask: False
.010 0000 = Payload length: 32
Payload
Pong: 677a69702c206465666c6174652c2062722c207a7374640d0a4163636570742d
WebSocket
0... .... = Fin: False
.100 .... = Reserved: 0x4
.1.. .... = Per-Message Compressed: True
.... 1100 = Opcode: Unknown (12)
0... .... = Mask: False
.110 0001 = Payload length: 97
Payload
Unknown: 6e67756167653a20656e2d47422c656e3b713d302e392c656e2d55533b713d302e382c64653b713d302e372c72753b713d302e362c64652d44453b713d302e350d0a5365632d576562536f636b65742d4b65793a20754f373674326b4b46564c39
[Expert Info (Note/Undecoded): Dissector for Websocket Opcode (12) code not implemented, Contact Wireshark developers if you want this supported]
[Dissector for Websocket Opcode (12) code not implemented, Contact Wireshark developers if you want this supported]
[Severity level: Note]
[Group: Undecoded]
Frame 48: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface lo0, id 0
Section number: 1
Interface id: 0 (lo0)
Interface name: lo0
Interface description: Loopback
Encapsulation type: NULL/Loopback (15)
Arrival Time: Oct 15, 2024 10:04:29.251004000 CEST
UTC Arrival Time: Oct 15, 2024 08:04:29.251004000 UTC
Epoch Arrival Time: 1728979469.251004000
[Time shift for this packet: 0.000000000 seconds]
[Time delta from previous captured frame: 0.000017000 seconds]
[Time delta from previous displayed frame: 0.000017000 seconds]
[Time since reference or first frame: 1.517479000 seconds]
Frame Number: 48
Frame Length: 56 bytes (448 bits)
Capture Length: 56 bytes (448 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: null:ip:tcp]
Null/Loopback
Family: IP (2)
Internet Protocol Version 4, Src: 127.0.0.1, Dst: 127.0.0.1
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 52
Identification: 0x0000 (0)
010. .... = Flags: 0x2, Don't fragment
0... .... = Reserved bit: Not set
.1.. .... = Don't fragment: Set
..0. .... = More fragments: Not set
...0 0000 0000 0000 = Fragment Offset: 0
Time to Live: 64
Protocol: TCP (6)
Header Checksum: 0x0000 [validation disabled]
[Header checksum status: Unverified]
Source Address: 127.0.0.1
Destination Address: 127.0.0.1
[Stream index: 0]
Transmission Control Protocol, Src Port: 8080, Dst Port: 60903, Seq: 200, Ack: 1125, Len: 0
Source Port: 8080
Destination Port: 60903
[Stream index: 12]
[Conversation completeness: Incomplete, DATA (15)]
..0. .... = RST: Absent
...0 .... = FIN: Absent
.... 1... = Data: Present
.... .1.. = ACK: Present
.... ..1. = SYN-ACK: Present
.... ...1 = SYN: Present
[Completeness Flags: ··DASS]
[TCP Segment Len: 0]
Sequence Number: 200 (relative sequence number)
Sequence Number (raw): 1179582105
[Next Sequence Number: 200 (relative sequence number)]
Acknowledgment Number: 1125 (relative ack number)
Acknowledgment number (raw): 1424654364
1000 .... = Header Length: 32 bytes (8)
Flags: 0x010 (ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Accurate ECN: Not set
.... 0... .... = Congestion Window Reduced: Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 0... = Push: Not set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
[TCP Flags: ·······A····]
Window: 6362
[Calculated window size: 407168]
[Window size scaling factor: 64]
Checksum: 0xfe28 [unverified]
[Checksum Status: Unverified]
Urgent Pointer: 0
Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
TCP Option - No-Operation (NOP)
Kind: No-Operation (1)
TCP Option - No-Operation (NOP)
Kind: No-Operation (1)
TCP Option - Timestamps: TSval 983459321, TSecr 1247263607
Kind: Time Stamp Option (8)
Length: 10
Timestamp value: 983459321
Timestamp echo reply: 1247263607
[Timestamps]
[Time since first frame in this TCP stream: 0.005994000 seconds]
[Time since previous frame in this TCP stream: 0.000017000 seconds]
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 47]
[The RTT to ACK the segment was: 0.000017000 seconds]
[iRTT: 0.000055000 seconds]
Frame 49: 288 bytes on wire (2304 bits), 288 bytes captured (2304 bits) on interface lo0, id 0
Section number: 1
Interface id: 0 (lo0)
Interface name: lo0
Interface description: Loopback
Encapsulation type: NULL/Loopback (15)
Arrival Time: Oct 15, 2024 10:04:29.251013000 CEST
UTC Arrival Time: Oct 15, 2024 08:04:29.251013000 UTC
Epoch Arrival Time: 1728979469.251013000
[Time shift for this packet: 0.000000000 seconds]
[Time delta from previous captured frame: 0.000009000 seconds]
[Time delta from previous displayed frame: 0.000009000 seconds]
[Time since reference or first frame: 1.517488000 seconds]
Frame Number: 49
Frame Length: 288 bytes (2304 bits)
Capture Length: 288 bytes (2304 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: null:ip:tcp:http:websocket:http:websocket]
Null/Loopback
Family: IP (2)
Internet Protocol Version 4, Src: 127.0.0.1, Dst: 127.0.0.1
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 284
Identification: 0x0000 (0)
010. .... = Flags: 0x2, Don't fragment
0... .... = Reserved bit: Not set
.1.. .... = Don't fragment: Set
..0. .... = More fragments: Not set
...0 0000 0000 0000 = Fragment Offset: 0
Time to Live: 64
Protocol: TCP (6)
Header Checksum: 0x0000 [validation disabled]
[Header checksum status: Unverified]
Source Address: 127.0.0.1
Destination Address: 127.0.0.1
[Stream index: 0]
Transmission Control Protocol, Src Port: 60903, Dst Port: 8080, Seq: 1125, Ack: 200, Len: 232
Source Port: 60903
Destination Port: 8080
[Stream index: 12]
[Conversation completeness: Incomplete, DATA (15)]
..0. .... = RST: Absent
...0 .... = FIN: Absent
.... 1... = Data: Present
.... .1.. = ACK: Present
.... ..1. = SYN-ACK: Present
.... ...1 = SYN: Present
[Completeness Flags: ··DASS]
[TCP Segment Len: 232]
Sequence Number: 1125 (relative sequence number)
Sequence Number (raw): 1424654364
[Next Sequence Number: 1357 (relative sequence number)]
Acknowledgment Number: 200 (relative ack number)
Acknowledgment number (raw): 1179582105
1000 .... = Header Length: 32 bytes (8)
Flags: 0x018 (PSH, ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Accurate ECN: Not set
.... 0... .... = Congestion Window Reduced: Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 1... = Push: Set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
[TCP Flags: ·······AP···]
Window: 6376
[Calculated window size: 408064]
[Window size scaling factor: 64]
Checksum: 0xff10 [unverified]
[Checksum Status: Unverified]
Urgent Pointer: 0
Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
TCP Option - No-Operation (NOP)
Kind: No-Operation (1)
TCP Option - No-Operation (NOP)
Kind: No-Operation (1)
TCP Option - Timestamps: TSval 1247263607, TSecr 983459321
Kind: Time Stamp Option (8)
Length: 10
Timestamp value: 1247263607
Timestamp echo reply: 983459321
[Timestamps]
[Time since first frame in this TCP stream: 0.006003000 seconds]
[Time since previous frame in this TCP stream: 0.000009000 seconds]
[SEQ/ACK analysis]
[iRTT: 0.000055000 seconds]
[Bytes in flight: 232]
[Bytes sent since last PSH flag: 232]
TCP payload (232 bytes)
[PDU Size: 101]
TCP segment data (15 bytes)
[PDU Size: 17]
[PDU Size: 60]
[PDU Size: 46]
[PDU Size: 51]
TCP segment data (43 bytes)
[2 Reassembled TCP Segments (101 bytes): #47(86), #49(15)]
[Frame: 47, payload: 0-85 (86 bytes)]
[Frame: 49, payload: 86-100 (15 bytes)]
[Segment count: 2]
[Reassembled TCP length: 101]
[Reassembled TCP Data: 436369447277766c43673d3d0d0a5365632d576562536f636b65742d457874656e73696f6e733a207065726d6573736167652d6465666c6174653b20636c69656e745f6d61785f77696e646f775f626974730d0a0d0ac1fe00e0f0916dc27c1e2c8933a16d]
WebSocket
0... .... = Fin: False
.100 .... = Reserved: 0x4
.1.. .... = Per-Message Compressed: True
.... 0011 = Opcode: Unknown (3)
0... .... = Mask: False
.110 0011 = Payload length: 99
Payload
WebSocket
1... .... = Fin: True
.000 .... = Reserved: 0x0
.0.. .... = Per-Message Compressed: False
.... 0100 = Opcode: Unknown (4)
0... .... = Mask: False
.000 1111 = Payload length: 15
Payload
Decompression failed
[Expert Info (Warning/Protocol): Decompression failed]
[Decompression failed]
[Severity level: Warning]
[Group: Protocol]
WebSocket
1... .... = Fin: True
.011 .... = Reserved: 0x3
.0.. .... = Per-Message Compressed: False
.... 0000 = Opcode: Continuation (0)
1... .... = Mask: True
.011 0110 = Payload length: 54
Masking-Key: 4f5056f8
Masked payload
Payload
[3 Reassembled websocket Fragments (222 bytes): #47(69), #49(99), #49(54)]
[Frame: 47, payload: 0-68 (69 bytes)]
[Frame: 49, payload: 69-167 (99 bytes)]
[Frame: 49, payload: 168-221 (54 bytes)]
[Fragment count: 3]
[Reassembled websocket Payload length: 222]
Decompression failed
[Expert Info (Warning/Protocol): Decompression failed]
[Decompression failed]
[Severity level: Warning]
[Group: Protocol]
WebSocket
1... .... = Fin: True
.110 .... = Reserved: 0x6
.1.. .... = Per-Message Compressed: True
.... 0000 = Opcode: Continuation (0)
1... .... = Mask: True
.010 1000 = Payload length: 40
Masking-Key: ec5e6214
Masked payload
Payload
Decompression failed
[Expert Info (Warning/Protocol): Decompression failed]
[Decompression failed]
[Severity level: Warning]
[Group: Protocol]
WebSocket
1... .... = Fin: True
.011 .... = Reserved: 0x3
.0.. .... = Per-Message Compressed: False
.... 1010 = Opcode: Pong (10)
0... .... = Mask: False
.011 0001 = Payload length: 49
Payload
Pong: 639b2e10b3cbc71297e3fcafeffd332c3d7680338c29c26bc5e698f98b701cbe965c03b508e9b7157f375770e3c4feecbe
Frame 50: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface lo0, id 0
Section number: 1
Interface id: 0 (lo0)
Interface name: lo0
Interface description: Loopback
Encapsulation type: NULL/Loopback (15)
Arrival Time: Oct 15, 2024 10:04:29.251016000 CEST
UTC Arrival Time: Oct 15, 2024 08:04:29.251016000 UTC
Epoch Arrival Time: 1728979469.251016000
[Time shift for this packet: 0.000000000 seconds]
[Time delta from previous captured frame: 0.000003000 seconds]
[Time delta from previous displayed frame: 0.000003000 seconds]
[Time since reference or first frame: 1.517491000 seconds]
Frame Number: 50
Frame Length: 56 bytes (448 bits)
Capture Length: 56 bytes (448 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: null:ip:tcp]
Null/Loopback
Family: IP (2)
Internet Protocol Version 4, Src: 127.0.0.1, Dst: 127.0.0.1
0100 .... = Version: 4
.... 0101 = Header Length: 20 bytes (5)
Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
0000 00.. = Differentiated Services Codepoint: Default (0)
.... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
Total Length: 52
Identification: 0x0000 (0)
010. .... = Flags: 0x2, Don't fragment
0... .... = Reserved bit: Not set
.1.. .... = Don't fragment: Set
..0. .... = More fragments: Not set
...0 0000 0000 0000 = Fragment Offset: 0
Time to Live: 64
Protocol: TCP (6)
Header Checksum: 0x0000 [validation disabled]
[Header checksum status: Unverified]
Source Address: 127.0.0.1
Destination Address: 127.0.0.1
[Stream index: 0]
Transmission Control Protocol, Src Port: 8080, Dst Port: 60903, Seq: 200, Ack: 1357, Len: 0
Source Port: 8080
Destination Port: 60903
[Stream index: 12]
[Conversation completeness: Incomplete, DATA (15)]
..0. .... = RST: Absent
...0 .... = FIN: Absent
.... 1... = Data: Present
.... .1.. = ACK: Present
.... ..1. = SYN-ACK: Present
.... ...1 = SYN: Present
[Completeness Flags: ··DASS]
[TCP Segment Len: 0]
Sequence Number: 200 (relative sequence number)
Sequence Number (raw): 1179582105
[Next Sequence Number: 200 (relative sequence number)]
Acknowledgment Number: 1357 (relative ack number)
Acknowledgment number (raw): 1424654596
1000 .... = Header Length: 32 bytes (8)
Flags: 0x010 (ACK)
000. .... .... = Reserved: Not set
...0 .... .... = Accurate ECN: Not set
.... 0... .... = Congestion Window Reduced: Not set
.... .0.. .... = ECN-Echo: Not set
.... ..0. .... = Urgent: Not set
.... ...1 .... = Acknowledgment: Set
.... .... 0... = Push: Not set
.... .... .0.. = Reset: Not set
.... .... ..0. = Syn: Not set
.... .... ...0 = Fin: Not set
[TCP Flags: ·······A····]
Window: 6358
[Calculated window size: 406912]
[Window size scaling factor: 64]
Checksum: 0xfe28 [unverified]
[Checksum Status: Unverified]
Urgent Pointer: 0
Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
TCP Option - No-Operation (NOP)
Kind: No-Operation (1)
TCP Option - No-Operation (NOP)
Kind: No-Operation (1)
TCP Option - Timestamps: TSval 983459321, TSecr 1247263607
Kind: Time Stamp Option (8)
Length: 10
Timestamp value: 983459321
Timestamp echo reply: 1247263607
[Timestamps]
[Time since first frame in this TCP stream: 0.006006000 seconds]
[Time since previous frame in this TCP stream: 0.000003000 seconds]
[SEQ/ACK analysis]
[This is an ACK to the segment in frame: 49]
[The RTT to ACK the segment was: 0.000003000 seconds]
[iRTT: 0.000055000 seconds]
