Frame 2217: Packet, 1514 bytes on wire (12112 bits), 500 bytes captured (4000 bits) Encapsulation type: Ethernet (1) Arrival Time: Mar 20, 2012 23:33:04.228810000 UTC UTC Arrival Time: Mar 20, 2012 23:33:04.228810000 UTC Epoch Arrival Time: 1332286384.228810000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 397.000 microseconds] [Time since reference or first frame: 5.759704000 seconds] Frame Number: 2217 Frame Length: 1514 bytes (12112 bits) Capture Length: 500 bytes (4000 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09), Dst: Apple_85:4d:bc (00:23:6c:85:4d:bc) Destination: Apple_85:4d:bc (00:23:6c:85:4d:bc) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 2] Internet Protocol Version 4, Src: 69.241.108.46, Dst: 192.168.1.104 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x20 (DSCP: CS1, ECN: Not-ECT) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (8) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0xf3ba (62394) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 57 Protocol: TCP (6) Header Checksum: 0xd411 [validation disabled] [Header checksum status: Unverified] Source Address: 69.241.108.46 Destination Address: 192.168.1.104 [Source GeoIP: Seattle, US] [Source GeoIP City: Seattle] [Source or Destination GeoIP City: Seattle] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP Latitude: 47.5741] [Source or Destination GeoIP Latitude: 47.5741] [Source GeoIP Longitude: -122.3975] [Source or Destination GeoIP Longitude: -122.3975] [Stream index: 2] Transmission Control Protocol, Src Port: 80, Dst Port: 54934, Seq: 949684, Ack: 1161, Len: 1460 Source Port: 80 Destination Port: 54934 [Stream index: 2] [Stream Packet Number: 1097] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1460] Sequence Number: 949684 (relative sequence number) Sequence Number (raw): 1104287397 [Next Sequence Number: 951144 (relative sequence number)] Acknowledgment Number: 1161 (relative ack number) Acknowledgment number (raw): 2053486069 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 64 [Calculated window size: 8192] [Window size scaling factor: 128] Checksum: 0xc330 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 2.651091000 seconds] [Time since previous frame in this TCP stream: 397.000 microseconds] [SEQ/ACK analysis] [iRTT: 13.003000 milliseconds] [Bytes in flight: 2920] [Bytes sent since last PSH flag: 77380] [Client Contiguous Streams: 1] [Server Contiguous Streams: 1] TCP payload (1460 bytes) Hypertext Transfer Protocol File Data: 446 bytes Data (446 bytes) 0000 3c 45 f1 36 1f 88 76 5e 2d f0 b6 91 e1 e9 2e be 5..... 0050 e2 1f 85 bc 17 e2 0f 05 7c 59 f0 bf 8f b4 3f 86 ........|Y....?. 0060 9a b5 8f 87 7c 57 77 e0 6d 07 c4 9f b3 35 af c4 ....|Ww.m....5.. 0070 f9 b5 c9 3c 19 a5 eb 29 f0 3c 6a 12 f8 af 48 f1 ...<...).-.5-.m.R.. 0170 c7 bf d8 be 1f e1 1d 33 53 f0 77 84 74 9f 88 be .......3S.w.t... 0180 32 f0 b7 89 bc 63 e3 6b 0b ed 57 c5 7a 3f 8f be 2....c.k..W.z?.. 0190 19 8d 0b e1 0c 3f 1b f4 cb 4b 6d 4b c0 3f 10 bc .....?...KmK.?.. 01a0 69 a0 fc 44 d3 3e 31 7c 6f f1 d7 c6 0f 0d d8 4b i..D.>1|o......K 01b0 79 69 7d f0 fa c3 c6 7f 07 7c 33 e2 af 8c yi}......|3... Data […]: 3c45f1361f88765e2df0b691e1e92ebe2bf823c67a7ebff17bc47e07b0d1b4cba9757d53c2be39d5efadec98f8efe227c2bb1a1e2df13783fe216afe0df11e9d669e34b4f18ea50f883e35dce8f3f8c3e21f85bc17e20f057c59f0bf8fb43f869ab58f877c5777e06d07c49fb335afc4f9b [Length: 446] [Packet size limited during capture: HTTP truncated]