Frame 1911: Packet, 1514 bytes on wire (12112 bits), 500 bytes captured (4000 bits) Encapsulation type: Ethernet (1) Arrival Time: Mar 20, 2012 23:33:03.771947000 UTC UTC Arrival Time: Mar 20, 2012 23:33:03.771947000 UTC Epoch Arrival Time: 1332286383.771947000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 778.000 microseconds] [Time since reference or first frame: 5.302841000 seconds] Frame Number: 1911 Frame Length: 1514 bytes (12112 bits) Capture Length: 500 bytes (4000 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09), Dst: Apple_85:4d:bc (00:23:6c:85:4d:bc) Destination: Apple_85:4d:bc (00:23:6c:85:4d:bc) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 2] Internet Protocol Version 4, Src: 69.241.108.46, Dst: 192.168.1.104 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x20 (DSCP: CS1, ECN: Not-ECT) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (8) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0xba72 (47730) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 57 Protocol: TCP (6) Header Checksum: 0x0d5a [validation disabled] [Header checksum status: Unverified] Source Address: 69.241.108.46 Destination Address: 192.168.1.104 [Source GeoIP: Seattle, US] [Source GeoIP City: Seattle] [Source or Destination GeoIP City: Seattle] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP Latitude: 47.5741] [Source or Destination GeoIP Latitude: 47.5741] [Source GeoIP Longitude: -122.3975] [Source or Destination GeoIP Longitude: -122.3975] [Stream index: 2] Transmission Control Protocol, Src Port: 80, Dst Port: 54933, Seq: 795154, Ack: 6851, Len: 1460 Source Port: 80 Destination Port: 54933 [Stream index: 1] [Stream Packet Number: 951] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1460] Sequence Number: 795154 (relative sequence number) Sequence Number (raw): 1104806191 [Next Sequence Number: 796614 (relative sequence number)] Acknowledgment Number: 6851 (relative ack number) Acknowledgment number (raw): 4015828518 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 153 [Calculated window size: 19584] [Window size scaling factor: 128] Checksum: 0x0048 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 2.825649000 seconds] [Time since previous frame in this TCP stream: 778.000 microseconds] [SEQ/ACK analysis] [iRTT: 15.727000 milliseconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 29200] [Client Contiguous Streams: 1] [Server Contiguous Streams: 1] TCP payload (1460 bytes) Hypertext Transfer Protocol File Data: 446 bytes Data (446 bytes) 0000 6f 04 58 6a 76 5a 85 c1 bb d6 3c 0c 7c 41 37 8a o.XjvZ....<.|A7. 0010 6f 7c 4f 24 da e6 ad a4 36 8d 24 5e ae 7b e1 37 o|O$....6.$^.{.7 0020 0f 78 83 3c b3 82 38 ba ae 6b c4 d8 ec 57 12 e6 .x.<..8..k...W.. 0030 78 dc f7 09 c2 9c 37 c0 d8 2c c3 29 cb 72 aa 3c x.....7..,.).r.< 0040 52 f8 36 95 3c 6e 57 92 61 b3 3f ac 53 a1 2c cb R.6.....'..... 0080 e2 bd b4 b2 ac d2 3c 49 c2 fc 3b 3e 26 c3 c5 f0 ......&... 0090 9d 4c f2 af 12 64 cd 66 38 e8 d3 a5 5f 09 92 62 .L...d.f8..._..b 00a0 b1 f4 b2 be 2a 58 ac 9a b7 d2 7e 2c be 96 6f 11 ....*X....~,..o. 00b0 6b 1a 8f c5 dd 2f c5 9a 6f 89 fc 75 f0 de 6d 12 k..../..o..u..m. 00c0 f7 c4 bf 0e 7e 2d 78 0b 50 b2 8f e1 a6 b1 e3 9f ....~-x.P....... 00d0 09 eb da 6d b7 8d e7 d0 fe 04 fc 17 1e 3f 12 e9 ...m.........?.. 00e0 da f7 85 ec f5 4b fd 2f 4d 3a 2e 87 a3 fc 32 d4 .....K./M:....2. 00f0 b5 67 d6 9f e1 ce bf e3 6f 18 f8 d9 9f 0d 7c 3d .g......o.....|= 0100 f0 0f c3 1e 34 d5 bc 47 e0 bf d9 d5 be 27 78 9a ....4..G.....'x. 0110 c7 c2 d6 7a b7 c5 4f 07 f8 5b c5 5f 01 b5 9f 86 ...z..O..[._.... 0120 3e 0e f1 2f 8a 2d 7e 1c db cd e3 ff 00 12 c9 e3 >../.-~......... 0130 0f 1e 68 bf b3 b6 a7 65 e3 57 d6 35 6d 13 4c f0 ..h....e.W.5m.L. 0140 e7 86 bc 6f e4 ea 50 6a e6 e2 f3 e1 44 1a 8d e7 ...o..Pj....D... 0150 88 35 cf 85 3d 77 86 3c 45 ad e8 7a ce b6 3c 25 .5..=w. xW Data […]: 6f04586a765a85c1bbd63c0c7c41378a6f7c4f24dae6ada4368d245eae7be1370f78833cb38238baae6bc4d8ec5712e678dcf709c29c37c0d82cc329cb72aa3c52f836953c6e579261b33fac53a12ccb0d2c2d1cd337c5e3f2f55b39e32a0b32af9466b8cfa8f0fb2a8713e2e86378da870 [Length: 446] [Packet size limited during capture: HTTP truncated]