Frame 1239: Packet, 1514 bytes on wire (12112 bits), 500 bytes captured (4000 bits) Encapsulation type: Ethernet (1) Arrival Time: Mar 20, 2012 23:33:03.138593000 UTC UTC Arrival Time: Mar 20, 2012 23:33:03.138593000 UTC Epoch Arrival Time: 1332286383.138593000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 785.000 microseconds] [Time since reference or first frame: 4.669487000 seconds] Frame Number: 1239 Frame Length: 1514 bytes (12112 bits) Capture Length: 500 bytes (4000 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09), Dst: Apple_85:4d:bc (00:23:6c:85:4d:bc) Destination: Apple_85:4d:bc (00:23:6c:85:4d:bc) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 2] Internet Protocol Version 4, Src: 69.241.108.46, Dst: 192.168.1.104 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x20 (DSCP: CS1, ECN: Not-ECT) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (8) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0xf288 (62088) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 57 Protocol: TCP (6) Header Checksum: 0xd543 [validation disabled] [Header checksum status: Unverified] Source Address: 69.241.108.46 Destination Address: 192.168.1.104 [Source GeoIP: Seattle, US] [Source GeoIP City: Seattle] [Source or Destination GeoIP City: Seattle] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP Latitude: 47.5741] [Source or Destination GeoIP Latitude: 47.5741] [Source GeoIP Longitude: -122.3975] [Source or Destination GeoIP Longitude: -122.3975] [Stream index: 2] Transmission Control Protocol, Src Port: 80, Dst Port: 54934, Seq: 511684, Ack: 1161, Len: 1460 Source Port: 80 Destination Port: 54934 [Stream index: 2] [Stream Packet Number: 599] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1460] Sequence Number: 511684 (relative sequence number) Sequence Number (raw): 1103849397 [Next Sequence Number: 513144 (relative sequence number)] Acknowledgment Number: 1161 (relative ack number) Acknowledgment number (raw): 2053486069 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 64 [Calculated window size: 8192] [Window size scaling factor: 128] Checksum: 0x1db3 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 1.560874000 seconds] [Time since previous frame in this TCP stream: 785.000 microseconds] [SEQ/ACK analysis] [iRTT: 13.003000 milliseconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 7300] [Client Contiguous Streams: 1] [Server Contiguous Streams: 1] TCP payload (1460 bytes) Hypertext Transfer Protocol File Data: 446 bytes Data (446 bytes) 0000 69 f7 de 30 f1 6e 8f aa dc f8 c6 c5 fe 22 7c 28 i..0.n......."|( 0010 f8 7b ff 00 09 7d a7 8b 6d f4 ad 5b e0 bf c5 ed .{...}..m..[.... 0020 5b 4a f0 9e bb e0 e5 d7 fc 35 73 e3 74 d2 b5 ed [J.......5s.t... 0030 47 c9 c2 e5 b1 c8 d5 6a 99 06 1b 31 a5 8f ca b3 G......j...1.... 0040 7c 6e 59 9e 3e 31 c3 65 ff 00 d8 f8 be 19 cd 32 |nY.>1.e.......2 0050 6a 18 da fc 49 9c 65 59 3f 08 62 b2 6c 2d 5c 75 j...I.eY?.b.l-\u 0060 1e 27 ca 70 59 be 45 9c 3c 4e 73 86 fe cc a3 97 .'.pY.E....8... 0090 41 8c cc 73 8c 36 37 01 84 6f d8 e7 0a 9d 5c 97 A..s.67..o....\. 00a0 30 f0 cf 35 e1 fc 2e 0f 01 95 f0 97 16 e4 d0 f1 0..5............ 00b0 12 be 45 57 85 b8 9a 59 5f 03 50 cb f8 77 0b 67 ..EW...Y_.P..w.g 00c0 51 f8 9f e3 bf 0c f8 93 e2 bf 8b cf 86 fc 47 a6 Q.............G. 00d0 78 c3 46 f0 7e 9d 37 c4 cf 12 f8 e7 c5 f7 5e 38 x.F.~.7.......^8 00e0 d6 20 f8 7b 02 fc 27 1a 1f 85 b4 9f 0b 7c 61 b5 . .{..'......|a. 00f0 ff 00 84 da f3 c6 77 43 50 f1 77 88 7c 7b f0 eb ......wCP.w.|{.. 0100 c6 57 1e 08 d3 7c 0f a1 e9 96 9a 6e b1 a8 5d 7c .W...|.....n..]| 0110 42 d7 e7 f0 b7 c5 2b 1a 16 97 e2 7f 17 e9 fe 26 B.....+........& 0120 f8 97 a6 9d 19 bc 5b af 78 af e1 b7 88 fc 33 6d ......[.x.....3m 0130 a1 f8 b7 4e d2 35 5b cd 3b 5a f1 9f 80 2c 74 ff ...N.5[.;Z...,t. 0140 00 8a 1e 29 f0 af c6 cd 46 6f 0f 78 ab c3 fe 18 ...)....Fo.x.... 0150 b7 f8 43 ff 00 09 47 c2 8f 13 5c 68 5a 66 9b e2 ..C...G...\hZf.. 0160 3d 2f c7 ff 00 1c 34 c8 bc 04 d6 76 9e 37 f0 d7 =/....4....v.7.. 0170 c3 e8 cf 85 75 8f 0f 6a 5f 14 fc 43 f0 b5 b5 6f ....u..j_..C...o 0180 0c 78 2b 4d f8 95 e2 19 fc 30 be 26 92 0f 81 3f .x+M.....0.&...? 0190 0b 60 97 5b d6 b5 ff 00 f8 4a 3e 22 7c 46 4d 23 .`.[.....J>"|FM# 01a0 40 d3 35 7f 14 78 c7 c3 f2 7d 9f e1 4f c1 3b eb @.5..x...}..O.;. 01b0 5f 08 7f c2 3b 69 f0 4b e0 97 c7 0b ef 1c _...;i.K...... Data […]: 69f7de30f16e8faadcf8c6c5fe227c28f87bff00097da78b6df4ad5be0bfc5ed5b4af09ebbe0e5d7fc3573e374d2b5ed47c9c2e5b1c8d56a99061b31a58fcab37c6e599e3e31c365ff00d8f8be19cd326a18dafc499c65593f0862b26c2d5c751e27ca7059be459c3c4e7386fecca397f0d [Length: 446] [Packet size limited during capture: HTTP truncated]