Frame 2327: Packet, 1514 bytes on wire (12112 bits), 500 bytes captured (4000 bits) Encapsulation type: Ethernet (1) Arrival Time: Mar 20, 2012 23:33:04.450939000 UTC UTC Arrival Time: Mar 20, 2012 23:33:04.450939000 UTC Epoch Arrival Time: 1332286384.450939000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 779.000 microseconds] [Time since reference or first frame: 5.981833000 seconds] Frame Number: 2327 Frame Length: 1514 bytes (12112 bits) Capture Length: 500 bytes (4000 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09), Dst: Apple_85:4d:bc (00:23:6c:85:4d:bc) Destination: Apple_85:4d:bc (00:23:6c:85:4d:bc) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 2] Internet Protocol Version 4, Src: 69.241.108.46, Dst: 192.168.1.104 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x20 (DSCP: CS1, ECN: Not-ECT) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (8) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0xbaf9 (47865) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 57 Protocol: TCP (6) Header Checksum: 0x0cd3 [validation disabled] [Header checksum status: Unverified] Source Address: 69.241.108.46 Destination Address: 192.168.1.104 [Source GeoIP: Seattle, US] [Source GeoIP City: Seattle] [Source or Destination GeoIP City: Seattle] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP Latitude: 47.5741] [Source or Destination GeoIP Latitude: 47.5741] [Source GeoIP Longitude: -122.3975] [Source or Destination GeoIP Longitude: -122.3975] [Stream index: 2] Transmission Control Protocol, Src Port: 80, Dst Port: 54933, Seq: 986414, Ack: 6851, Len: 1460 Source Port: 80 Destination Port: 54933 [Stream index: 1] [Stream Packet Number: 1173] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1460] Sequence Number: 986414 (relative sequence number) Sequence Number (raw): 1104997451 [Next Sequence Number: 987874 (relative sequence number)] Acknowledgment Number: 6851 (relative ack number) Acknowledgment number (raw): 4015828518 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 153 [Calculated window size: 19584] [Window size scaling factor: 128] Checksum: 0x08e1 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 3.504641000 seconds] [Time since previous frame in this TCP stream: 779.000 microseconds] [SEQ/ACK analysis] [iRTT: 15.727000 milliseconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 24820] [Client Contiguous Streams: 1] [Server Contiguous Streams: 1] TCP payload (1460 bytes) Hypertext Transfer Protocol File Data: 446 bytes Data (446 bytes) 0000 27 c2 5d 5f c4 1e 20 ba f8 9f f0 d3 c3 9a 5d de '.]_.. .......]. 0010 9b e3 e1 a7 69 fa cf 87 7c 71 e3 4f 87 da 1f c5 ....i...|q.O.... 0020 df 1e ea da 2f 86 ad b5 5f 89 2b e0 6b ef 1b 7c ..../..._.+.k..| 0030 29 f1 47 8a 6e e6 f8 5f e1 7b 8e 96 c6 eb c2 9e ).G.n.._.{...... 0040 1b f0 cf 82 bc 59 e1 ad 43 c1 3f 0a 7c 15 e3 0f .....Y..C.?.|... 0050 1e 69 1e 10 f1 15 de a7 61 a4 be 87 f0 63 c5 5a .i......a....c.Z 0060 57 89 7e 11 78 8b c2 1e 2a f8 47 e0 4f 01 78 ba W.~.x...*.G.O.x. 0070 db c4 bf b4 cf c2 11 a8 f8 e3 c4 3e 0c d7 7c 03 ...........>..|. 0080 e0 ef da 5f e3 47 82 7c 0d a2 fc 70 d1 f4 7f 14 ..._.G.|...p.... 0090 e9 bf 0f 74 4d 2b 44 d1 2b 88 8b c2 f6 3f 12 3c ...tM+D.+....?.< 00a0 47 e3 ef 09 40 bf 11 7e 19 d9 78 3f e1 ce bb e1 G...@..~..x?.... 00b0 4f 86 9a d5 d5 cd f3 5d 7c 52 f1 07 c0 bf 16 ea O......]|R...... 00c0 5f 0c b4 0d 57 c2 9e 2a d2 7e 1d f8 43 4d f1 57 _...W..*.~..CM.W 00d0 82 75 0f 0e c7 ac eb 17 1a c6 89 a1 6a 5a a7 84 .u..........jZ.. 00e0 3c 0f e1 8f 89 69 e1 cf 15 f8 33 c6 17 5e 3c d0 <....i....3..^<. 00f0 3e 14 7d 5f f0 77 c5 fe 0d f8 7d 71 a2 dd f8 6b >.}_.w....}q...k 0100 c2 de 0a f1 c4 3e 24 87 49 f0 e7 89 be 3c 6b 67 .....>$.I....;. 0190 38 87 29 e2 3e 29 e1 6a c6 65 8b cf 68 2a 99 b6 8.).>).j.e..h*.. 01a0 7d 4f 87 30 b9 ae 1b 34 a3 94 62 e8 64 58 ca d3 }O.0...4..b.dX.. 01b0 a9 91 67 58 e8 67 5c 49 85 e1 dc fe be 17 ..gX.g\I...... Data […]: 27c25d5fc41e20baf89ff0d3c39a5dde9be3e1a769facf877c71e34f87da1fc5df1eeada2f86adb55f892be06bef1b7c29f1478a6ee6f85fe17b8e96c6ebc29e1bf0cf82bc59e1ad43c13f0a7c15e30f1e691e10f115dea761a4be87f063c55a57897e11788bc21e2af847e04f0178badbc [Length: 446] [Packet size limited during capture: HTTP truncated]