Frame 1881: Packet, 1514 bytes on wire (12112 bits), 500 bytes captured (4000 bits) Encapsulation type: Ethernet (1) Arrival Time: Mar 20, 2012 23:33:03.748874000 UTC UTC Arrival Time: Mar 20, 2012 23:33:03.748874000 UTC Epoch Arrival Time: 1332286383.748874000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 366.000 microseconds] [Time since reference or first frame: 5.279768000 seconds] Frame Number: 1881 Frame Length: 1514 bytes (12112 bits) Capture Length: 500 bytes (4000 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09), Dst: Apple_85:4d:bc (00:23:6c:85:4d:bc) Destination: Apple_85:4d:bc (00:23:6c:85:4d:bc) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 2] Internet Protocol Version 4, Src: 69.241.108.46, Dst: 192.168.1.104 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x20 (DSCP: CS1, ECN: Not-ECT) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (8) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0xf356 (62294) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 57 Protocol: TCP (6) Header Checksum: 0xd475 [validation disabled] [Header checksum status: Unverified] Source Address: 69.241.108.46 Destination Address: 192.168.1.104 [Source GeoIP: Seattle, US] [Source GeoIP City: Seattle] [Source or Destination GeoIP City: Seattle] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP Latitude: 47.5741] [Source or Destination GeoIP Latitude: 47.5741] [Source GeoIP Longitude: -122.3975] [Source or Destination GeoIP Longitude: -122.3975] [Stream index: 2] Transmission Control Protocol, Src Port: 80, Dst Port: 54934, Seq: 808064, Ack: 1161, Len: 1460 Source Port: 80 Destination Port: 54934 [Stream index: 2] [Stream Packet Number: 929] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1460] Sequence Number: 808064 (relative sequence number) Sequence Number (raw): 1104145777 [Next Sequence Number: 809524 (relative sequence number)] Acknowledgment Number: 1161 (relative ack number) Acknowledgment number (raw): 2053486069 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 64 [Calculated window size: 8192] [Window size scaling factor: 128] Checksum: 0xd970 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 2.171155000 seconds] [Time since previous frame in this TCP stream: 366.000 microseconds] [SEQ/ACK analysis] [iRTT: 13.003000 milliseconds] [Bytes in flight: 2920] [Bytes sent since last PSH flag: 35040] [Client Contiguous Streams: 1] [Server Contiguous Streams: 1] TCP payload (1460 bytes) Hypertext Transfer Protocol File Data: 446 bytes Data (446 bytes) 0000 35 cf 00 7c 20 e6 7c 61 e2 ff 00 85 36 bf 17 3c 5..| .|a....6..< 0010 33 ad eb 3a 76 83 f0 bf c5 16 bf 0a bc 4f e3 0f 3..:v........O.. 0020 81 5a 37 88 7c 43 f0 a7 c4 da 36 9d e2 ad 61 34 .Z7.|C....6...a4 0030 5d 7e 6d 1f 54 f8 31 73 6d a1 7c 2f f1 76 95 e3 ]~m.T.1sm.|/.v.. 0040 ff 00 0d 78 cb c3 9f b4 1f 80 bc 79 f1 2f e3 5e ...x.......y./.^ 0050 8b a2 eb df 1d 3c 39 16 a5 ff 00 0b bb 5f f1 7f .....<9......_.. 0060 8d 24 f1 4d f7 6b 2f 81 3c 63 e2 8f 02 fc 30 9a .$.M.k/.6x.@.....T...0. 00c0 f2 7c ff 00 17 93 63 68 f0 b5 6c 8f 33 a1 c3 58 .|....ch..l.3..X 00d0 3a 58 8a fc 43 88 ad 3e 1e c2 64 1c 43 86 e3 0c :X..C..>..d.C... 00e0 9f 26 c9 f0 99 84 f3 cc 47 0a d1 e0 ae 1b 74 38 .&......G.....t8 00f0 8b 03 3c 6d 0c b1 60 30 d9 6f 0a d5 c2 52 e1 cc ..+......n.....5 0190 1f 16 dd de 7c 51 f0 a7 c5 09 3c 33 f0 f7 c0 1a ....|Q....<3.... 01a0 1d b7 8c fe 0f 69 5e 1b b9 f1 0f 86 fc 59 d7 78 .....i^......Y.x 01b0 ff 00 e1 ad bf fc 23 ff 00 03 be 1f 78 bb ......#.....x. Data […]: 35cf007c20e67c61e2ff008536bf173c33adeb3a7683f0bfc516bf0abc4fe30f815a37887c43f0a7c4da369de2ad61345d7e6d1f54f831736da17c2ff17695e3ff000d78cbc39fb41f80bc79f12fe35e8ba2ebdf1d3c3916a5ff000bbb5ff17f8d24f14df76b2f813c63e28f02fc309a49f [Length: 446] [Packet size limited during capture: HTTP truncated]