Frame 10341: Packet, 1514 bytes on wire (12112 bits), 500 bytes captured (4000 bits) Encapsulation type: Ethernet (1) Arrival Time: Mar 20, 2012 23:33:13.648714000 UTC UTC Arrival Time: Mar 20, 2012 23:33:13.648714000 UTC Epoch Arrival Time: 1332286393.648714000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 5.627000 milliseconds] [Time since reference or first frame: 15.179608000 seconds] Frame Number: 10341 Frame Length: 1514 bytes (12112 bits) Capture Length: 500 bytes (4000 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09), Dst: Apple_85:4d:bc (00:23:6c:85:4d:bc) Destination: Apple_85:4d:bc (00:23:6c:85:4d:bc) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 2] Internet Protocol Version 4, Src: 69.241.108.46, Dst: 192.168.1.104 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x20 (DSCP: CS1, ECN: Not-ECT) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (8) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0xfe95 (65173) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 57 Protocol: TCP (6) Header Checksum: 0xc936 [validation disabled] [Header checksum status: Unverified] Source Address: 69.241.108.46 Destination Address: 192.168.1.104 [Source GeoIP: Seattle, US] [Source GeoIP City: Seattle] [Source or Destination GeoIP City: Seattle] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP Latitude: 47.5741] [Source or Destination GeoIP Latitude: 47.5741] [Source GeoIP Longitude: -122.3975] [Source or Destination GeoIP Longitude: -122.3975] [Stream index: 2] Transmission Control Protocol, Src Port: 80, Dst Port: 54934, Seq: 4954464, Ack: 1161, Len: 1460 Source Port: 80 Destination Port: 54934 [Stream index: 2] [Stream Packet Number: 5689] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1460] Sequence Number: 4954464 (relative sequence number) Sequence Number (raw): 1108292177 [Next Sequence Number: 4955924 (relative sequence number)] Acknowledgment Number: 1161 (relative ack number) Acknowledgment number (raw): 2053486069 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 64 [Calculated window size: 8192] [Window size scaling factor: 128] Checksum: 0xdd11 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 12.070995000 seconds] [Time since previous frame in this TCP stream: 5.627000 milliseconds] [SEQ/ACK analysis] [iRTT: 13.003000 milliseconds] [Bytes in flight: 2920] [Bytes sent since last PSH flag: 37960] [Client Contiguous Streams: 1] [Server Contiguous Streams: 1] TCP payload (1460 bytes) Hypertext Transfer Protocol File Data: 446 bytes Data (446 bytes) 0000 5c 59 43 a0 5a 69 1a 67 87 7c 29 a7 e8 38 9f b6 \YC.Zi.g.|)..8.. 0010 f6 b1 27 c1 2b 2f 83 7e 0c f0 cc 77 da e5 87 c4 ..'.+/.~...w.... 0020 8f 83 73 f8 c7 5d d5 bc 67 e2 cf 1e 78 87 c5 91 ..s..]..g...x... 0030 5c f8 8f c4 7f b3 84 4b a2 5b 78 b1 bc 59 6b af \......K.[x..Yk. 0040 5d f8 67 c3 7e 27 f8 b7 37 c4 af 06 e8 fa f5 f6 ].g.~'..7....... 0050 b5 1f 85 be 26 f8 33 c3 9e 33 d2 25 b7 d4 bc 45 ....&.3..3.%...E 0060 f1 64 fc 4b fc ff 00 8e b3 ca 1c 1b c6 19 6e 57 .d.K..........nW 0070 5b 24 c9 73 4e 23 e3 0c 15 3e 33 af 9c 62 70 98 [$.sN#...>3..bp. 0080 bc 5e 27 0d 84 cb f8 42 ad 1c d7 05 87 c6 e6 39 .^'....B.......9 0090 96 33 2f 8c 31 34 16 71 08 e5 58 de 15 cd 32 59 .3/.14.q..X...2Y 00a0 63 31 38 ec e7 28 c3 f0 b6 69 c4 b8 aa d9 1f 06 c18..(...i...... 00b0 69 c6 95 72 6c cf c3 ce 11 c2 63 b3 dc 16 0d 43 i..rl.....c....C 00c0 1b e2 57 0e 70 8e 0f 15 42 af 02 54 c9 38 9b 05 ..W.p...B..T.8.. 00d0 91 c7 8a f8 53 11 81 cc 63 8c a9 c3 b4 f0 b8 cc ....S...c....... 00e0 e7 31 ad c3 18 fc 36 0f 89 f1 b4 21 9d 66 70 c6 .1....6....!.fp. 00f0 e2 a5 4b 0d 97 e1 e9 e0 f8 35 3e 25 7c 43 f0 a6 ..K......5>%|C.. 0100 a1 a9 78 73 c3 fe 38 f8 67 e2 6f 0a c9 e3 ff 00 ..xs..8.g.o..... 0110 17 ea fe 00 f8 69 73 a1 7c 0e d0 3c 44 bf 04 2f .....is.|..).S.z..,' 01b0 d6 fd 89 3e 32 f8 f3 f6 a4 f8 85 e2 4f 86 ...>2.......O. Data […]: 5c5943a05a691a67877c29a7e8389fb6f6b127c12b2f837e0cf0cc77dae587c48f8373f8c75dd5bc67e2cf1e7887c5915cf88fc47fb3844ba25b78b1bc596baf5df867c37e27f8b737c4af06e8faf5f6b51f85be26f833c39e33d225b7d4bc45f164fc4bfcff008eb3ca1c1bc6196e575b2 [Length: 446] [Packet size limited during capture: HTTP truncated]