Frame 1437: Packet, 1514 bytes on wire (12112 bits), 500 bytes captured (4000 bits) Encapsulation type: Ethernet (1) Arrival Time: Mar 20, 2012 23:33:03.312845000 UTC UTC Arrival Time: Mar 20, 2012 23:33:03.312845000 UTC Epoch Arrival Time: 1332286383.312845000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 353.000 microseconds] [Time since reference or first frame: 4.843739000 seconds] Frame Number: 1437 Frame Length: 1514 bytes (12112 bits) Capture Length: 500 bytes (4000 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09), Dst: Apple_85:4d:bc (00:23:6c:85:4d:bc) Destination: Apple_85:4d:bc (00:23:6c:85:4d:bc) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 2] Internet Protocol Version 4, Src: 69.241.108.46, Dst: 192.168.1.104 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x20 (DSCP: CS1, ECN: Not-ECT) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (8) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0xf2df (62175) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 57 Protocol: TCP (6) Header Checksum: 0xd4ec [validation disabled] [Header checksum status: Unverified] Source Address: 69.241.108.46 Destination Address: 192.168.1.104 [Source GeoIP: Seattle, US] [Source GeoIP City: Seattle] [Source or Destination GeoIP City: Seattle] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP Latitude: 47.5741] [Source or Destination GeoIP Latitude: 47.5741] [Source GeoIP Longitude: -122.3975] [Source or Destination GeoIP Longitude: -122.3975] [Stream index: 2] Transmission Control Protocol, Src Port: 80, Dst Port: 54934, Seq: 638704, Ack: 1161, Len: 1460 Source Port: 80 Destination Port: 54934 [Stream index: 2] [Stream Packet Number: 736] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1460] Sequence Number: 638704 (relative sequence number) Sequence Number (raw): 1103976417 [Next Sequence Number: 640164 (relative sequence number)] Acknowledgment Number: 1161 (relative ack number) Acknowledgment number (raw): 2053486069 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 64 [Calculated window size: 8192] [Window size scaling factor: 128] Checksum: 0x96de [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 1.735126000 seconds] [Time since previous frame in this TCP stream: 353.000 microseconds] [SEQ/ACK analysis] [iRTT: 13.003000 milliseconds] [Bytes in flight: 2920] [Bytes sent since last PSH flag: 26280] [Client Contiguous Streams: 1] [Server Contiguous Streams: 1] TCP payload (1460 bytes) Hypertext Transfer Protocol File Data: 446 bytes Data (446 bytes) 0000 2f 8a 5a 9f 85 fc 4f e1 af 85 5a 0a 7c 1a d4 b4 /.Z...O...Z.|... 0010 39 f5 0e dc 66 6c f1 7c 5b 81 74 32 2a b9 1b e1 9...fl.|[.t2*... 0020 f9 e0 f8 d2 6b 22 c7 61 78 26 1c 01 89 c2 e0 f0 ....k".ax&...... 0030 f8 1a fc 43 c2 b9 56 02 51 cd a7 85 5c 4b 8b e2 ...C..V.Q...\K.. 0040 f9 e0 71 3f db 6a 58 9c d2 58 bc 0e 03 09 8a c9 ..q?.jX..X...... 0050 9c 30 94 78 31 99 b6 77 9c 71 2e 31 e6 f8 ec 14 .0.x1..w.q.1.... 0060 f2 ea 38 4c fb 85 70 b9 ce 1f 80 b3 bc 8b 27 c8 ..8L..p.......'. 0070 73 ec 56 63 c1 fc 39 91 e7 f9 9d 1c 2c 21 c1 d8 s.Vc..9.....,!.. 0080 ce 21 ca eb 4f d8 43 88 f3 1c ef 2c ce f3 5c 97 .!..O.C....,..\. 0090 3e cd 72 bc a7 8b eb 67 b8 29 61 73 2d ad 4b c6 >.r....g.)as-.K. 00a0 3e 1f 36 be 14 ba f8 45 e3 4f 19 7c 54 f0 2f 8c >.6....E.O.|T./. 00b0 7c 37 1f c4 4d 63 e3 2f c4 fd 5b 52 b3 d2 ed ac |7..Mc./..[R.... 00c0 ae f5 4f 1d f8 0f 44 d3 7c 35 f0 f7 c7 3f 0e 3f ..O...D.|5...?.? 00d0 e1 62 7c 3d f0 ae 9c 7c 69 e2 7f 06 78 8f c2 be .b|=...|i...x... 00e0 36 f8 c7 e0 0f 0c 58 e9 df 13 2d f4 ff 00 03 fc 6.....X...-..... 00f0 3f b2 f8 97 fb 4a 7c 0f f8 8b 73 e6 97 9a ef 8d ?....J|...s..... 0100 be 12 8d 63 4c bb d7 be 2d ea da ce 99 f1 32 ef ...cL...-.....2. 0110 4c f1 bf 8d 3e 10 41 e0 79 a0 9b e2 fe a5 e0 bd L...>.A.y....... 0120 5b e1 9b 78 85 fc 67 e3 38 fc 35 ac 49 1e b5 ad [..x..g.8.5.I... 0130 e9 fe 29 d1 fc 4d 6d 79 af db f8 a7 c1 df d9 5f ..)..Mmy......._ 0140 02 ad ec 2e 7e 23 1b 7f 12 68 5e 3b bd e1 6b 7f ....~#...h^;..k. 0150 05 b7 c1 e8 3c 47 e1 af 1b 2f c3 5f 17 fc 15 bf .....- 0180 87 8d 74 2f 11 fc 1f f0 06 9b e3 5f 84 16 71 f8 ..t/......._..q. 0190 cb c2 9a bd c7 c3 8f 19 af 81 7c 27 e1 7f f8 54 ..........|'...T 01a0 1a 2f c2 0f 05 f8 9f a6 f8 89 ab f8 9b 5d f1 47 ./...........].G 01b0 81 3c 31 af 6a eb e1 7f 0b a5 84 9e 27 f1 .<1.j.......'. Data […]: 2f8a5a9f85fc4fe1af855a0a7c1ad4b439f50edc666cf17c5b8174322ab91be1f9e0f8d26b22c76178261c0189c2e0f0f81afc43c2b9560251cda7855c4b8be2f9e0713fdb6a589cd258bc0e03098ac99c3094783199b6779c712e31e6f8ec14f2ea384cfb8570b9ce1f80b3bc8b27c873e [Length: 446] [Packet size limited during capture: HTTP truncated]