Frame 1615: Packet, 1514 bytes on wire (12112 bits), 500 bytes captured (4000 bits) Encapsulation type: Ethernet (1) Arrival Time: Mar 20, 2012 23:33:03.506204000 UTC UTC Arrival Time: Mar 20, 2012 23:33:03.506204000 UTC Epoch Arrival Time: 1332286383.506204000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 386.000 microseconds] [Time since reference or first frame: 5.037098000 seconds] Frame Number: 1615 Frame Length: 1514 bytes (12112 bits) Capture Length: 500 bytes (4000 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09), Dst: Apple_85:4d:bc (00:23:6c:85:4d:bc) Destination: Apple_85:4d:bc (00:23:6c:85:4d:bc) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 2] Internet Protocol Version 4, Src: 69.241.108.46, Dst: 192.168.1.104 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x20 (DSCP: CS1, ECN: Not-ECT) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (8) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0xba14 (47636) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 57 Protocol: TCP (6) Header Checksum: 0x0db8 [validation disabled] [Header checksum status: Unverified] Source Address: 69.241.108.46 Destination Address: 192.168.1.104 [Source GeoIP: Seattle, US] [Source GeoIP City: Seattle] [Source or Destination GeoIP City: Seattle] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP Latitude: 47.5741] [Source or Destination GeoIP Latitude: 47.5741] [Source GeoIP Longitude: -122.3975] [Source or Destination GeoIP Longitude: -122.3975] [Stream index: 2] Transmission Control Protocol, Src Port: 80, Dst Port: 54933, Seq: 660834, Ack: 6851, Len: 1460 Source Port: 80 Destination Port: 54933 [Stream index: 1] [Stream Packet Number: 796] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1460] Sequence Number: 660834 (relative sequence number) Sequence Number (raw): 1104671871 [Next Sequence Number: 662294 (relative sequence number)] Acknowledgment Number: 6851 (relative ack number) Acknowledgment number (raw): 4015828518 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 153 [Calculated window size: 19584] [Window size scaling factor: 128] Checksum: 0x9184 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 2.559906000 seconds] [Time since previous frame in this TCP stream: 18.525000 milliseconds] [SEQ/ACK analysis] [iRTT: 15.727000 milliseconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 116800] [Client Contiguous Streams: 1] [Server Contiguous Streams: 1] TCP payload (1460 bytes) Hypertext Transfer Protocol File Data: 446 bytes Data (446 bytes) 0000 4e d3 66 d7 74 08 fe 14 cb e2 2f 0a eb 2f f0 bf N.f.t...../../.. 0010 c5 36 dd 7e 8d a0 78 93 47 d7 ac bc 6f f1 23 56 .6.~..x.G...o.#V 0020 1f 01 3e 1a fc 4b d7 7e 24 c1 e0 9b 4d 6f 44 1e ..>..K.~$...MoD. 0030 2b f8 bf a9 f8 73 57 f8 79 ae fc 4a 9f 4a f8 87 +....sW.y..J.J.. 0040 17 83 35 fb 1f 10 f8 f3 5e f1 35 86 97 e1 df 12 ..5.....^.5..... 0050 f8 df e0 3e 97 aa 78 17 54 d1 7c 11 ac fc 0c f8 ...>..x.T.|..... 0060 35 69 f1 8f e3 0d ee 9b e0 2f 83 da bc 7e 26 b2 5i......./...~&. 0070 d3 be 0e ea 7e 3d d2 fe 1e 78 73 c5 7e 01 f1 57 ....~=...xs.~..W 0080 8a f4 7f 86 7e 29 4f 86 df 10 2c 74 df 8b 7e 21 ....~)O...,t..~! 0090 bd d3 9e 3d 53 c3 7e 15 d7 fe 27 f8 77 5d f1 dd ...=S.~...'.w].. 00a0 ad bf c4 df 18 f8 87 57 f1 cf 8e e7 b0 f8 59 f0 .......W......Y. 00b0 b3 50 1f 0b b4 dd 6b c1 7a d7 87 75 2f 15 f8 93 .P....k.z..u/... 00c0 c7 be 30 f0 27 8b 6d 7b eb 6d 07 c6 3e 0d b3 f1 ..0.'.m{.m..>... 00d0 77 c4 0f 14 fc 1d 7d 02 e3 c4 fa 6d 8e 9b f0 6f w.....}....m...o 00e0 e1 96 96 ff 00 12 b5 2f 86 be 0e f1 a7 c4 d6 f8 ......./........ 00f0 9b a5 78 c6 c7 c3 ba 07 81 3c 25 a2 78 9e 6f 80 ..x......<%.x.o. 0100 1a 97 c3 ef 1c f8 6b 5f f8 83 f1 9b c3 1e 28 f1 ......k_......(. 0110 34 9e 1e d5 f5 ff 00 17 68 5f 0a 3c 49 6d e1 7b 4.......h_.... 0190 78 9b 11 81 ca f3 ae 20 c8 b1 fc 3b c0 99 26 23 x...... ...;..&# 01a0 fb 57 22 cc b8 63 38 ca b1 cb 13 83 e2 0a 54 b8 .W"..c8.......T. 01b0 9b 05 89 ce 78 8f 1f 89 f0 f1 af 7e cf b7 ....x......~.. Data […]: 4ed366d77408fe14cbe22f0aeb2ff0bfc536dd7e8da0789347d7acbc6ff123561f013e1afc4bd77e24c1e09b4d6f441e2bf8bfa9f87357f879aefc4a9f4af887178335fb1f10f8f35ef1358697e1df12f8dfe03e97aa781754d17c11acfc0cf83569f18fe30dee9be02f83dabc7e26b2d3b [Length: 446] [Packet size limited during capture: HTTP truncated]