Frame 1327: Packet, 1514 bytes on wire (12112 bits), 500 bytes captured (4000 bits) Encapsulation type: Ethernet (1) Arrival Time: Mar 20, 2012 23:33:03.220692000 UTC UTC Arrival Time: Mar 20, 2012 23:33:03.220692000 UTC Epoch Arrival Time: 1332286383.220692000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 361.000 microseconds] [Time since reference or first frame: 4.751586000 seconds] Frame Number: 1327 Frame Length: 1514 bytes (12112 bits) Capture Length: 500 bytes (4000 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09), Dst: Apple_85:4d:bc (00:23:6c:85:4d:bc) Destination: Apple_85:4d:bc (00:23:6c:85:4d:bc) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 2] Internet Protocol Version 4, Src: 69.241.108.46, Dst: 192.168.1.104 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x20 (DSCP: CS1, ECN: Not-ECT) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (8) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0xf2ac (62124) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 57 Protocol: TCP (6) Header Checksum: 0xd51f [validation disabled] [Header checksum status: Unverified] Source Address: 69.241.108.46 Destination Address: 192.168.1.104 [Source GeoIP: Seattle, US] [Source GeoIP City: Seattle] [Source or Destination GeoIP City: Seattle] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP Latitude: 47.5741] [Source or Destination GeoIP Latitude: 47.5741] [Source GeoIP Longitude: -122.3975] [Source or Destination GeoIP Longitude: -122.3975] [Stream index: 2] Transmission Control Protocol, Src Port: 80, Dst Port: 54934, Seq: 564244, Ack: 1161, Len: 1460 Source Port: 80 Destination Port: 54934 [Stream index: 2] [Stream Packet Number: 656] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1460] Sequence Number: 564244 (relative sequence number) Sequence Number (raw): 1103901957 [Next Sequence Number: 565704 (relative sequence number)] Acknowledgment Number: 1161 (relative ack number) Acknowledgment number (raw): 2053486069 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 64 [Calculated window size: 8192] [Window size scaling factor: 128] Checksum: 0x283a [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 1.642973000 seconds] [Time since previous frame in this TCP stream: 361.000 microseconds] [SEQ/ACK analysis] [iRTT: 13.003000 milliseconds] [Bytes in flight: 2920] [Bytes sent since last PSH flag: 59860] [Client Contiguous Streams: 1] [Server Contiguous Streams: 1] TCP payload (1460 bytes) Hypertext Transfer Protocol File Data: 446 bytes Data (446 bytes) 0000 4e f0 ad c6 b7 e0 ad 16 fb 44 f8 81 f1 8f c7 5a N........D.....Z 0010 c7 c3 bf 18 5f 49 f1 63 54 b5 d4 2c b5 ef 18 78 ...._I.cT..,...x 0020 af 44 4b 3d 3f 86 9e 20 f8 67 e1 7f 0d f8 b7 e0 .DK=?.. .g...... 0030 3f 8e fc 01 77 e1 cd 53 49 f8 55 06 8a 97 3e 20 ?...w..SI.U...> 0040 8f 49 d6 df e2 c7 c4 ad 63 4d d0 f4 0f 07 f8 37 .I......cM.....7 0050 e1 ef 85 35 2d 41 f5 ed 4b c6 f7 7e 11 5f 18 eb ...5-A..K..~._.. 0060 df 0b bc 71 a8 e9 5f 0f fe 20 fc 3a d4 3c 2f e0 ...q.._.. .:.....d9.. 00f0 8f 3f c6 ba d9 de 79 89 cb b2 dc 26 07 84 31 79 .?....y....&..1y 0100 d6 5b 85 ce 73 ae 35 af 84 ca 71 39 ce 5f 98 71 .[..s.5...q9._.q 0110 2e 5d 8d c1 e7 9c f7 88 60 ba 93 c7 ff 00 06 fc .]......`....... 0120 13 e2 22 34 6d 17 5c f8 b7 e0 7f 89 30 78 66 6f .."4m.\.....0xfo 0130 15 68 b3 fc 5c d2 bc 3d 7f e1 2f 16 f8 73 e2 46 .h..\..=../..s.F 0140 99 a6 78 53 50 8e ef c2 df 0a fc 53 a6 f8 13 57 ..xSP......S...W 0150 f1 4d af c3 df 83 b6 13 2f c5 8f 11 6a 5e 0f f0 .M....../...j^.. 0160 8f c4 c1 e1 6b df 88 1e 1a d2 fe 2e f8 ef a5 b5 ....k........... 0170 f1 3f c3 cf 07 7c 3b b7 9f e2 3f 8d be 23 7c 30 .?...|;...?..#|0 0180 b8 d7 7c 4b e2 ef 11 f8 7b 53 f8 4b e2 4f 8a be ..|K....{S.K.O.. 0190 0c bd f0 e7 8e b5 ed 3f 58 f0 87 c5 4f 1a 5b 78 .......?X...O.[x 01a0 f3 c5 3e 1c f8 89 e1 5f 03 fc 6b f1 16 9f f0 c3 ..>...._..k..... 01b0 e1 8f 80 7c 57 67 e1 9f 0f fc 76 b6 f1 6f ...|Wg....v..o Data […]: 4ef0adc6b7e0ad16fb44f881f18fc75ac7c3bf185f49f16354b5d42cb5ef1878af444b3d3f869e20f867e17f0df8b7e03f8efc0177e1cd5349f855068a973e208f49d6dfe2c7c4ad634dd0f40f07f837e1ef85352d41f5ed4bc6f77e115f18ebdf0bbc71a8e95f0ffe20fc3ad43c2fe07d4 [Length: 446] [Packet size limited during capture: HTTP truncated]