tcp.flags == 0x18 and ip.src == 10.201.62.249 and ip.dst == 10.201.62.78
Filter out PSH ACK (flags 0x18: “Push” and “Acknowledgement”). In UCIP XML-RPC, it carries response from AIR server e.g. the following stream
HTTP/1.1 401 Access to /Air denied for this user ...
Content-Length: 366
Content-Type: text/html
Date: Fri, 26 Mar 2010 07:52:55 GMT
Server