Frame 11119: Packet, 1514 bytes on wire (12112 bits), 500 bytes captured (4000 bits) Encapsulation type: Ethernet (1) Arrival Time: Mar 20, 2012 23:33:15.252665000 UTC UTC Arrival Time: Mar 20, 2012 23:33:15.252665000 UTC Epoch Arrival Time: 1332286395.252665000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 1.005000 milliseconds] [Time since reference or first frame: 16.783559000 seconds] Frame Number: 11119 Frame Length: 1514 bytes (12112 bits) Capture Length: 500 bytes (4000 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09), Dst: Apple_85:4d:bc (00:23:6c:85:4d:bc) Destination: Apple_85:4d:bc (00:23:6c:85:4d:bc) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 2] Internet Protocol Version 4, Src: 69.241.108.46, Dst: 192.168.1.104 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x20 (DSCP: CS1, ECN: Not-ECT) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (8) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0xc4f2 (50418) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 57 Protocol: TCP (6) Header Checksum: 0x02da [validation disabled] [Header checksum status: Unverified] Source Address: 69.241.108.46 Destination Address: 192.168.1.104 [Source GeoIP: Seattle, US] [Source GeoIP City: Seattle] [Source or Destination GeoIP City: Seattle] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP Latitude: 47.5741] [Source or Destination GeoIP Latitude: 47.5741] [Source GeoIP Longitude: -122.3975] [Source or Destination GeoIP Longitude: -122.3975] [Stream index: 2] Transmission Control Protocol, Src Port: 80, Dst Port: 54933, Seq: 4640794, Ack: 6851, Len: 1460 Source Port: 80 Destination Port: 54933 [Stream index: 1] [Stream Packet Number: 5374] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1460] Sequence Number: 4640794 (relative sequence number) Sequence Number (raw): 1108651831 [Next Sequence Number: 4642254 (relative sequence number)] Acknowledgment Number: 6851 (relative ack number) Acknowledgment number (raw): 4015828518 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 153 [Calculated window size: 19584] [Window size scaling factor: 128] Checksum: 0xc86b [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 14.306367000 seconds] [Time since previous frame in this TCP stream: 1.005000 milliseconds] [SEQ/ACK analysis] [iRTT: 15.727000 milliseconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 20440] [Client Contiguous Streams: 1] [Server Contiguous Streams: 1] TCP payload (1460 bytes) Hypertext Transfer Protocol File Data: 446 bytes Data (446 bytes) 0000 67 5c be 16 7a ed af c4 af 1f 7c 35 f8 77 63 f0 g\..z.....|5.wc. 0010 bb 5e ba d2 fe 12 78 1e cf 49 d3 7c 4b e3 ff 00 .^....x..I.|K... 0020 87 de 29 f0 a7 84 7c 5b a5 fc 43 17 97 1d 95 30 ..)...|[..C....0 0030 99 6e 6b c6 39 4d 3c db 25 79 c6 1f 0d ed 65 8a .nk.9M<.%y....e. 0040 c5 e7 99 36 23 28 c0 e7 b9 55 6c cf 23 c6 4f 88 ...6#(...Ul.#.O. 0050 73 7c 9f 8a 3e b1 96 e5 38 5e 37 c8 f0 78 6c ae s|..>...8^7..xl. 0060 b6 03 86 f0 bc 29 c5 4b 2d cb b2 4e 25 cc f3 0c .....).K-..N%... 0070 8b 37 cb 3f d5 d8 70 43 0f 8f e2 8c 2e 73 86 e3 .7.?..pC.....s.. 0080 6c 27 87 b4 ed 84 c9 b0 95 f3 5c 3e 49 c4 98 ba l'........\>I... 0090 19 c6 3f 09 8e a3 96 e6 58 2c 36 0b 1d c4 f9 a7 ..?.....X,6..... 00a0 1f 70 c7 02 bc 4d 48 65 d9 57 16 4f 0f c7 5c 27 .p...MHe.W.O..\' 00b0 43 37 a7 88 a1 c3 79 76 4f 86 e2 3c 8b 2e c9 fe C7....yvO..<.... 00c0 73 b3 f1 1f 84 bc 65 6f e0 1b 8b cb 6f 05 f8 77 s.....eo....o..w 00d0 c6 77 d0 c1 e2 8d 7f c6 7a ba 45 f1 3a f7 e2 4f .w......z.E.:..O 00e0 8a 75 9b 8d 6f c2 96 9f 1a 3e 19 5e 78 5a d3 c0 .u..o....>.^xZ.. 00f0 17 b7 bf 18 6e fc 7c 7c 15 7f f0 bb e1 ef 84 3c ....n.||.......< 0100 67 f0 42 c7 c7 7a af c2 3d 4f e2 7f 8e b4 dd 26 g.B..z..=O.....& 0110 fa f2 fb 54 d2 7d ab 4f d4 2d fe 2c dc ea 33 f8 ...T.}.O.-.,..3. 0120 9b 5a d0 3c 2d 07 80 fc 47 f1 2b e3 bc bf 18 b5 .Z.<-...G.+..... 0130 2f 85 da 68 d0 3c 69 e1 5d 2b e2 82 f8 35 bc 37 /..h....>.x.[...>-. 0170 b6 7e 8d 61 e1 2f 85 fa e2 fc 53 fe c5 f0 ff 00 .~.a./....S..... 0180 c4 f8 3e 26 da 6a 5a 9e b3 e3 df 86 5a 8f 84 35 ..>&.jZ.....Z..5 0190 3f 8b 9e 1c f1 e7 84 2e fc 25 e0 bd 0a d8 6b 1a ?........%....k. 01a0 9f 89 9b 46 f8 b5 a5 f8 c6 fb e2 a7 ec fb e1 cf ...F............ 01b0 85 5e 0a b1 f8 a9 f0 bf e2 0e a9 a8 de de .^............ Data […]: 675cbe167aedafc4af1f7c35f87763f0bb5ebad2fe12781ecf49d37c4be3ff0087de29f0a7847c5ba5fc4317971d9530996e6bc6394d3cdb2579c61f0ded658ac5e799362328c0e7b9556ccf23c64f88737c9f8a3eb196e5385e37c8f0786caeb60386f0bc29c54b2dcbb24e25ccf30c8b3 [Length: 446] [Packet size limited during capture: HTTP truncated]