Frame 1656: Packet, 1514 bytes on wire (12112 bits), 500 bytes captured (4000 bits) Encapsulation type: Ethernet (1) Arrival Time: Mar 20, 2012 23:33:03.544858000 UTC UTC Arrival Time: Mar 20, 2012 23:33:03.544858000 UTC Epoch Arrival Time: 1332286383.544858000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 696.000 microseconds] [Time since reference or first frame: 5.075752000 seconds] Frame Number: 1656 Frame Length: 1514 bytes (12112 bits) Capture Length: 500 bytes (4000 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09), Dst: Apple_85:4d:bc (00:23:6c:85:4d:bc) Destination: Apple_85:4d:bc (00:23:6c:85:4d:bc) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 2] Internet Protocol Version 4, Src: 69.241.108.46, Dst: 192.168.1.104 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x20 (DSCP: CS1, ECN: Not-ECT) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (8) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0xba23 (47651) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 57 Protocol: TCP (6) Header Checksum: 0x0da9 [validation disabled] [Header checksum status: Unverified] Source Address: 69.241.108.46 Destination Address: 192.168.1.104 [Source GeoIP: Seattle, US] [Source GeoIP City: Seattle] [Source or Destination GeoIP City: Seattle] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP Latitude: 47.5741] [Source or Destination GeoIP Latitude: 47.5741] [Source GeoIP Longitude: -122.3975] [Source or Destination GeoIP Longitude: -122.3975] [Stream index: 2] Transmission Control Protocol, Src Port: 80, Dst Port: 54933, Seq: 682734, Ack: 6851, Len: 1460 Source Port: 80 Destination Port: 54933 [Stream index: 1] [Stream Packet Number: 820] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1460] Sequence Number: 682734 (relative sequence number) Sequence Number (raw): 1104693771 [Next Sequence Number: 684194 (relative sequence number)] Acknowledgment Number: 6851 (relative ack number) Acknowledgment number (raw): 4015828518 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 153 [Calculated window size: 19584] [Window size scaling factor: 128] Checksum: 0xa90f [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 2.598560000 seconds] [Time since previous frame in this TCP stream: 696.000 microseconds] [SEQ/ACK analysis] [iRTT: 15.727000 milliseconds] [Bytes in flight: 2920] [Bytes sent since last PSH flag: 138700] [Client Contiguous Streams: 1] [Server Contiguous Streams: 1] TCP payload (1460 bytes) Hypertext Transfer Protocol File Data: 446 bytes Data (446 bytes) 0000 41 4f 14 78 df e2 17 80 74 4d 17 e3 ff 00 c1 8b AO.x....tM...... 0010 ed 77 c4 7f 11 6d fc 35 e2 fa 76 9b e2 cf 00 e9 .w...m.5..v..... 0020 5f 13 fc 5f 6f e0 1b 7f 86 9f 17 fc 07 e3 1d 1b _.._o........... 0030 e2 77 88 fc 4f f0 3f 43 d0 fc 61 a3 f8 57 e1 07 .w..O.?C..a..W.. 0040 8a 97 57 b5 f0 5f c7 df 13 eb 3f 10 35 af 17 5e ..W.._....?.5..^ 0050 dd 7c 56 f8 6f a8 78 7b e2 37 81 3c 0d a8 e8 7f .|V.o.x{.7.<.... 0060 13 b5 2d 67 c5 7a 8f c6 2f 89 93 5d 78 8b e2 26 ..-g.z../..]x..& 0070 99 e1 4f 8f 9e 34 bb f8 8c b7 27 c4 60 f8 7e 92 ..O..4....'.`.~. 0080 a3 c6 b5 e1 5f 8a e5 95 61 72 ec 52 8e 69 9c 51 ...._...ar.R.i.Q 0090 ca e1 57 1d c3 d9 6e 37 32 c0 f8 69 9a f0 ce 57 ..W...n72..i...W 00a0 9d 62 72 3e 17 cd 55 05 9a 4e a5 1c ea ad 4a b4 .br>..U..N....J. 00b0 7c 3f cd 38 93 20 c5 62 b2 08 66 39 af c0 60 e8 |?.8. .b..f9..`. 00c0 e6 b8 8c c2 38 2e 1a cd b1 55 e3 5f 1d 52 79 7f ....8....U._.Ry. 00d0 00 e7 b5 f0 7c 45 96 e6 3c 4f 8e 78 7c 8f 19 88 ....|E..... 0170 bc 31 61 79 6d e0 dd 70 fc 35 f0 66 97 f1 21 bc .1aym..p.5.f..!. 0180 61 79 f1 af c0 77 1a 0f 84 bc 33 0f c4 16 79 7e ay...w....3...y~ 0190 2a c1 73 a3 e8 ff 00 0f 74 f5 f8 ad fb 33 f8 57 *.s.....t....3.W 01a0 55 fd 9a fc 35 67 e1 bd 5f e1 6f 81 5a 1f 87 5e U...5g.._.o.Z..^ 01b0 3c ea be 27 f8 ff 00 c0 fa f7 89 3e 15 78 <..'.......>.x Data […]: 414f1478dfe21780744d17e3ff00c18bed77c47f116dfc35e2fa769be2cf00e95f13fc5f6fe01b7f869f17fc07e31d1be27788fc4ff03f43d0fc61a3f857e1078a9757b5f05fc7df13eb3f1035af175edd7c56f86fa8787be237813c0da8e87f13b52d67c57a8fc62f89935d788be22699e [Length: 446] [Packet size limited during capture: HTTP truncated]