Frame 11327: Packet, 1514 bytes on wire (12112 bits), 500 bytes captured (4000 bits) Encapsulation type: Ethernet (1) Arrival Time: Mar 20, 2012 23:33:15.613794000 UTC UTC Arrival Time: Mar 20, 2012 23:33:15.613794000 UTC Epoch Arrival Time: 1332286395.613794000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 9.747000 milliseconds] [Time since reference or first frame: 17.144688000 seconds] Frame Number: 11327 Frame Length: 1514 bytes (12112 bits) Capture Length: 500 bytes (4000 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09), Dst: Apple_85:4d:bc (00:23:6c:85:4d:bc) Destination: Apple_85:4d:bc (00:23:6c:85:4d:bc) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 2] Internet Protocol Version 4, Src: 69.241.108.46, Dst: 192.168.1.104 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x20 (DSCP: CS1, ECN: Not-ECT) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (8) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0xc571 (50545) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 57 Protocol: TCP (6) Header Checksum: 0x025b [validation disabled] [Header checksum status: Unverified] Source Address: 69.241.108.46 Destination Address: 192.168.1.104 [Source GeoIP: Seattle, US] [Source GeoIP City: Seattle] [Source or Destination GeoIP City: Seattle] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP Latitude: 47.5741] [Source or Destination GeoIP Latitude: 47.5741] [Source GeoIP Longitude: -122.3975] [Source or Destination GeoIP Longitude: -122.3975] [Stream index: 2] Transmission Control Protocol, Src Port: 80, Dst Port: 54933, Seq: 4824754, Ack: 6851, Len: 1460 Source Port: 80 Destination Port: 54933 [Stream index: 1] [Stream Packet Number: 5582] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1460] Sequence Number: 4824754 (relative sequence number) Sequence Number (raw): 1108835791 [Next Sequence Number: 4826214 (relative sequence number)] Acknowledgment Number: 6851 (relative ack number) Acknowledgment number (raw): 4015828518 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 153 [Calculated window size: 19584] [Window size scaling factor: 128] Checksum: 0xfbc8 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 14.667496000 seconds] [Time since previous frame in this TCP stream: 9.747000 milliseconds] [SEQ/ACK analysis] [iRTT: 15.727000 milliseconds] [Bytes in flight: 2920] [Bytes sent since last PSH flag: 10220] [Client Contiguous Streams: 1] [Server Contiguous Streams: 1] TCP payload (1460 bytes) Hypertext Transfer Protocol File Data: 446 bytes Data (446 bytes) 0000 6a 7f 27 f1 ef 8e 3c 4f e0 dd 07 c7 5f 14 7c 37 j.'......|Y.4?.x 0040 de f2 4f 04 78 93 56 f0 9e af 2c 36 3e 13 ba f8 ..O.x.V...,6>... 0050 87 a8 e8 3e 16 f0 e7 c6 9d 0b e1 2f 8a bd e2 c3 ...>......./.... 0060 e1 f7 86 74 6d 6b 52 d1 bc 70 9f 04 7c 17 06 a1 ...tmkR..p..|... 0070 e2 0b 1b 9f 0e f8 e3 4c f1 df 87 7c 67 79 e0 ad .......L...|gy.. 0080 6f fe 16 bf 85 3e 15 59 cb 7f e3 4d 1b e2 67 86 o....>.Y...M..g. 0090 6e 2f 7c 7f a0 f8 5f c5 9f 10 bf e1 0a f8 93 f0 n/|..._......... 00a0 4c fc 3c f8 45 e0 4f 8b be 39 f1 ee 83 f1 ef 47 L.<.E.O..9.....G 00b0 f0 4f c4 09 b5 6f 88 9a e7 cc 5e 35 f0 c7 84 35 .O...o....^5...5 00c0 0d 4b c1 d1 f8 73 c2 1a 6e 97 e1 6b 7b 4f 0c 78 .K...s..n..k{O.x 00d0 cb c5 ba 2f 89 6d 75 1f 0a ae 87 fb 41 fc 22 f1 .../.mu.....A.". 00e0 76 81 ab 7c 5a d3 3e 07 e8 be 12 b2 9b 5f d5 fc v..|Z.>......_.. 00f0 3d e1 8f 06 6a 9e 3a d2 ff 00 e1 0d f1 7f 80 ec =...j.:......... 0100 7e 02 f8 4e fb c4 4b ad 78 8f c7 17 5f 11 7e 24 ~..N..K.x..._.~$ 0110 fc 28 1e 05 fa 6e 0d c2 e1 60 f1 1c 3b 99 67 b0 .(...n...`..;.g. 0120 e3 7c e2 97 12 70 2f 19 61 72 1c 37 12 61 f8 7b .|...p/.ar.7.a.{ 0130 83 5b c6 e7 d9 8e 22 b7 10 60 73 7c 9e 8c b3 fc .[...."..`s|.... 0140 44 38 9b 2a c5 bc 8f 33 c9 38 33 16 f8 92 86 55 D8.*...3.83....U 0150 8c a7 57 09 98 57 ca b3 ae 21 ca b1 fd 39 24 28 ..W..W...!...9$( 0160 4b 29 cd 31 df db 99 e7 01 e6 59 be 5f 98 e5 3c K).1......Y._..< 0170 3d 84 ce 69 64 f9 f6 27 35 a1 e1 c4 ab f1 27 1b =..id..'5.....'. 0180 4f 01 c4 59 16 2f 37 c1 65 39 37 06 70 5f 0d 71 O..Y./7.e97.p_.q 0190 46 5f 4f 33 ab 81 8e 53 3c eb 20 cb 69 e2 78 af F_O3...S<. .i.x. 01a0 2c cc 31 39 ee 61 9a fd 2c ff 00 0f 53 e1 9f c2 ,.19.a..,...S... 01b0 35 f8 fb f1 33 57 f8 77 e1 1b df d9 df c3 5...3W.w...... Data […]: 6a7f27f1ef8e3c4fe0dd07c75f147c37f06f5db3b9fd9ff43f0ee9fe3abaf122fc46f87bf13757d6be376a9a569facfc62f8cdaffc3e7f13d87c59d7343f0178def24f04789356f09eaf2c363e13baf887a8e83e16f0e7c69d0be12f8abde2c3e1f786746d6b52d1bc709f047c1706a1e20 [Length: 446] [Packet size limited during capture: HTTP truncated]