Frame 1113: Packet, 1514 bytes on wire (12112 bits), 500 bytes captured (4000 bits) Encapsulation type: Ethernet (1) Arrival Time: Mar 20, 2012 23:33:02.912600000 UTC UTC Arrival Time: Mar 20, 2012 23:33:02.912600000 UTC Epoch Arrival Time: 1332286382.912600000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 143.000 microseconds] [Time since reference or first frame: 4.443494000 seconds] Frame Number: 1113 Frame Length: 1514 bytes (12112 bits) Capture Length: 500 bytes (4000 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09), Dst: Apple_85:4d:bc (00:23:6c:85:4d:bc) Destination: Apple_85:4d:bc (00:23:6c:85:4d:bc) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 2] Internet Protocol Version 4, Src: 69.241.108.46, Dst: 192.168.1.104 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x20 (DSCP: CS1, ECN: Not-ECT) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (8) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0xf23c (62012) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 57 Protocol: TCP (6) Header Checksum: 0xd58f [validation disabled] [Header checksum status: Unverified] Source Address: 69.241.108.46 Destination Address: 192.168.1.104 [Source GeoIP: Seattle, US] [Source GeoIP City: Seattle] [Source or Destination GeoIP City: Seattle] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP Latitude: 47.5741] [Source or Destination GeoIP Latitude: 47.5741] [Source GeoIP Longitude: -122.3975] [Source or Destination GeoIP Longitude: -122.3975] [Stream index: 2] Transmission Control Protocol, Src Port: 80, Dst Port: 54934, Seq: 401501, Ack: 580, Len: 1460 Source Port: 80 Destination Port: 54934 [Stream index: 2] [Stream Packet Number: 474] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1460] Sequence Number: 401501 (relative sequence number) Sequence Number (raw): 1103739214 [Next Sequence Number: 402961 (relative sequence number)] Acknowledgment Number: 580 (relative ack number) Acknowledgment number (raw): 2053485488 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 55 [Calculated window size: 7040] [Window size scaling factor: 128] Checksum: 0x1292 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 1.334881000 seconds] [Time since previous frame in this TCP stream: 143.000 microseconds] [SEQ/ACK analysis] [iRTT: 13.003000 milliseconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 46720] [Client Contiguous Streams: 1] [Server Contiguous Streams: 1] TCP payload (1460 bytes) Hypertext Transfer Protocol File Data: 446 bytes Data (446 bytes) 0000 7b 8f f9 ac f6 b6 2f 30 a7 c4 79 d6 55 80 ca b8 {...../0..y.U... 0010 7b c4 fc fb 83 b3 59 66 b9 b6 7d 94 65 19 3f 0c {.....Yf..}.e.?. 0020 3a 55 69 e4 f9 7e 71 8b e2 be 1f e2 3c 7e 4b 90 :Ui..~q.....<~K. 0030 e4 fc 2f 98 65 38 9c ab 31 cd b2 5a 98 2a 39 9d ../.e8..1..Z.*9. 0040 0c ef 29 87 0c e6 91 e1 ba 12 cd 30 18 ae e7 c3 ..)........0.... 0050 57 66 db c5 5e 1a f1 17 c4 fd 5e 0d 23 e1 6f c5 Wf..^.....^.#.o. 0060 1f 0f 78 6d be 1c e8 df 1e be 26 69 d6 fa cc 1f ..xm......&i.... 0070 b4 5f 83 2e ad f4 1d 2b e2 df 87 fc 49 f1 07 43 ._.....+....I..C 0080 d4 ff 00 e1 10 f0 4e 9f e2 ef 03 5f de ea ba ef ......N...._.... 0090 c3 1f 80 9a ef c2 df 09 78 bf c5 11 e8 3a 67 82 ........x....:g. 00a0 ec 3e 18 af c3 cd 0e 6f 21 f1 37 c7 1d 52 ee cb .>.....o!.7..R.. 00b0 5b f1 ac 1e 24 f8 9f e3 4f 11 be a7 e2 af 08 ea [...$...O....... 00c0 ff 00 b4 0e b3 e1 cf 88 df 06 7c 4b e2 7f 11 ea ..........|K.... 00d0 fe 32 f8 ab e1 9d 5e db c0 b7 97 3e 32 f0 9c 1e .2....^....>2... 00e0 1e f1 2c fe 75 86 b9 e1 8f 16 db ea ff 00 08 fc ..,.u........... 00f0 3d e2 af 12 7c 57 d1 84 de 04 f0 8c 3a 84 f6 b7 =...|W......:... 0100 fd 46 bd a5 78 8f 49 f0 5f 8a 7e 25 78 07 e2 b7 .F..x.I._.~%x... 0110 c2 9d 1b e1 c5 fe 99 e3 8f 07 fe ce 3a ee 83 7b ............:..{ 0120 e0 4d 3b c6 1e 2f b4 f0 4e ad f0 ca df e1 06 93 .M;../..N....... 0130 ab 49 a6 7c 18 1f 14 7c 6b aa ea ba 3f 84 22 f8 .I.|...|k...?.". 0140 29 f1 43 5a f1 3e 83 f0 f7 e1 bf c4 af 15 7c 22 ).CZ.>........|" 0150 b8 f8 5b f1 6f e3 be 91 e0 7d 63 c3 02 fb 7f c5 ..[.o....}c..... 0160 1a 2c 56 3e 17 d2 3c 63 e1 2f 1e 6b 9e 2d d0 be .,V>.......K...q Data […]: 7b8ff9acf6b62f30a7c479d65580cab87bc4fcfb83b35966b9b67d9465193f0c3a5569e4f97e718be2be1fe23c7e4b90e4fc2f9865389cab31cdb25a982a399d0cef29870ce691e1ba12cd3018aee7c35766dbc55e1af117c4fd5e0d23e16fc51f0f786dbe1ce8df1ebe2669d6facc1fb45 [Length: 446] [Packet size limited during capture: HTTP truncated]