Frame 11371: Packet, 1514 bytes on wire (12112 bits), 500 bytes captured (4000 bits) Encapsulation type: Ethernet (1) Arrival Time: Mar 20, 2012 23:33:15.699654000 UTC UTC Arrival Time: Mar 20, 2012 23:33:15.699654000 UTC Epoch Arrival Time: 1332286395.699654000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 800.000 microseconds] [Time since reference or first frame: 17.230548000 seconds] Frame Number: 11371 Frame Length: 1514 bytes (12112 bits) Capture Length: 500 bytes (4000 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09), Dst: Apple_85:4d:bc (00:23:6c:85:4d:bc) Destination: Apple_85:4d:bc (00:23:6c:85:4d:bc) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 2] Internet Protocol Version 4, Src: 69.241.108.46, Dst: 192.168.1.104 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x20 (DSCP: CS1, ECN: Not-ECT) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (8) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0xc58c (50572) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 57 Protocol: TCP (6) Header Checksum: 0x0240 [validation disabled] [Header checksum status: Unverified] Source Address: 69.241.108.46 Destination Address: 192.168.1.104 [Source GeoIP: Seattle, US] [Source GeoIP City: Seattle] [Source or Destination GeoIP City: Seattle] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP Latitude: 47.5741] [Source or Destination GeoIP Latitude: 47.5741] [Source GeoIP Longitude: -122.3975] [Source or Destination GeoIP Longitude: -122.3975] [Stream index: 2] Transmission Control Protocol, Src Port: 80, Dst Port: 54933, Seq: 4864174, Ack: 6851, Len: 1460 Source Port: 80 Destination Port: 54933 [Stream index: 1] [Stream Packet Number: 5626] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1460] Sequence Number: 4864174 (relative sequence number) Sequence Number (raw): 1108875211 [Next Sequence Number: 4865634 (relative sequence number)] Acknowledgment Number: 6851 (relative ack number) Acknowledgment number (raw): 4015828518 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 153 [Calculated window size: 19584] [Window size scaling factor: 128] Checksum: 0xab11 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 14.753356000 seconds] [Time since previous frame in this TCP stream: 800.000 microseconds] [SEQ/ACK analysis] [iRTT: 15.727000 milliseconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 49640] [Client Contiguous Streams: 1] [Server Contiguous Streams: 1] TCP payload (1460 bytes) Hypertext Transfer Protocol File Data: 446 bytes Data (446 bytes) 0000 33 41 e0 bf 8a 9e 01 f8 a1 e2 98 3c 4b f1 47 e0 3A.........4.k 0030 c0 5f 0d b5 cf 00 e8 f6 fe 25 d7 fc 2f e1 49 7c ._.......%../.I| 0040 43 e3 2f 00 dc fc 43 f0 b7 ec c1 e2 5b 8d 27 c1 C./...C.....[.'. 0050 5e 1e 1f 18 31 b5 39 3c 17 27 ed 13 6d f0 55 be ^...1.9<.'..m.U. 0060 20 7c 37 f0 d7 82 2d 57 43 f8 63 7d a9 6a 8b 7b |7...-WC.c}.j.{ 0070 7b e1 2f 01 69 1e 33 f1 87 8f 3c 65 73 a4 fc 5a {./.i.3..........ni..7.. 00d0 8b e3 ff 00 0d 78 d1 7e 2a 78 6f e2 06 81 e3 4d .....x.~*xo....M 00e0 46 2d 6f c0 1f 0a 35 9f 85 16 de 02 f8 2f e2 9f F-o...5....../.. 00f0 09 58 f8 77 48 d2 6f 63 b7 b2 f8 6d e1 fd 6f 4d .X.wH.oc...m..oM 0100 83 c2 1f 09 e3 f1 27 c5 4b 5b 2f 2b 3a cc f8 72 ......'.K[/+:..r 0110 bd 17 9c 42 bd 3c ae 39 3d 3c c7 19 81 e2 78 54 ...B.<.9=<....xT 0120 ad 9c 4f 01 c3 dc 43 84 ce e8 e4 b9 35 0c 26 4d ..O...C.....5.&M 0130 86 cc 38 77 1f 99 67 38 a8 e5 b9 6e 03 24 c8 f3 ..8w..g8...n.$.. 0140 3a 31 cb 53 aa f3 4c 1e 5d c3 7c 47 91 e1 38 37 :1.S..L.].|G..87 0150 d9 e3 0a b8 0c ef c3 e7 e2 25 0e 1d c7 f0 4e 55 .........%....NU 0160 8d af 43 8d 78 bb 0d c5 b8 3c 05 3e 23 c4 e4 3c ..C.x....<.>#..< 0170 59 9a 53 ff 00 5b e9 47 83 a5 88 74 f1 f8 6c 26 Y.S..[.G...t..l& 0180 55 99 e5 f8 7c 76 71 98 cb 37 c7 63 f8 9b 05 43 U...|vq..7.c...C 0190 82 f8 f2 54 b2 2c 9f 3c a3 93 79 a7 8d ac 2e be ...T.,.<..y..... 01a0 36 68 7e 3b f8 05 75 a2 ea 5e 06 b6 d0 a7 d0 fc 6h~;..u..^...... 01b0 1b a0 5b 7c 71 f0 c7 84 b5 3f 08 f8 a1 3e ..[|q....?...> Data […]: 3341e0bf8a9e01f8a1e2983c4bf147e0e0baf16683f077c7fe1b87c11e1b8fc05a27874dd7c79d6f57fec1d43e34f86bc05f0db5cf00e8f6fe25d7fc2fe1497c43e32f00dcfc43f0b7ecc1e25b8d27c15e1e1f1831b5393c1727ed136df055be207c37f0d7822d5743f8637da96a8b7b7be [Length: 446] [Packet size limited during capture: HTTP truncated]