Frame 2592: Packet, 1514 bytes on wire (12112 bits), 500 bytes captured (4000 bits) Encapsulation type: Ethernet (1) Arrival Time: Mar 20, 2012 23:33:04.783956000 UTC UTC Arrival Time: Mar 20, 2012 23:33:04.783956000 UTC Epoch Arrival Time: 1332286384.783956000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 399.000 microseconds] [Time since reference or first frame: 6.314850000 seconds] Frame Number: 2592 Frame Length: 1514 bytes (12112 bits) Capture Length: 500 bytes (4000 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09), Dst: Apple_85:4d:bc (00:23:6c:85:4d:bc) Destination: Apple_85:4d:bc (00:23:6c:85:4d:bc) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 2] Internet Protocol Version 4, Src: 69.241.108.46, Dst: 192.168.1.104 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x20 (DSCP: CS1, ECN: Not-ECT) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (8) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0xf438 (62520) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 57 Protocol: TCP (6) Header Checksum: 0xd393 [validation disabled] [Header checksum status: Unverified] Source Address: 69.241.108.46 Destination Address: 192.168.1.104 [Source GeoIP: Seattle, US] [Source GeoIP City: Seattle] [Source or Destination GeoIP City: Seattle] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP Latitude: 47.5741] [Source or Destination GeoIP Latitude: 47.5741] [Source GeoIP Longitude: -122.3975] [Source or Destination GeoIP Longitude: -122.3975] [Stream index: 2] Transmission Control Protocol, Src Port: 80, Dst Port: 54934, Seq: 1129264, Ack: 1161, Len: 1460 Source Port: 80 Destination Port: 54934 [Stream index: 2] [Stream Packet Number: 1305] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1460] Sequence Number: 1129264 (relative sequence number) Sequence Number (raw): 1104466977 [Next Sequence Number: 1130724 (relative sequence number)] Acknowledgment Number: 1161 (relative ack number) Acknowledgment number (raw): 2053486069 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 64 [Calculated window size: 8192] [Window size scaling factor: 128] Checksum: 0x91f2 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 3.206237000 seconds] [Time since previous frame in this TCP stream: 399.000 microseconds] [SEQ/ACK analysis] [iRTT: 13.003000 milliseconds] [Bytes in flight: 2920] [Bytes sent since last PSH flag: 67160] [Client Contiguous Streams: 1] [Server Contiguous Streams: 1] TCP payload (1460 bytes) Hypertext Transfer Protocol File Data: 446 bytes Data (446 bytes) 0000 33 16 b2 5c 93 30 e0 cc 9f 9b 22 c1 2c 9b 0d 56 3..\.0....".,..V 0010 86 47 91 e6 d8 3c 87 0d 81 c9 72 9c eb 85 73 2c .G...<....r...s, 0020 9e 8d 41 57 ce fd a7 12 e7 3c 51 9a 47 1b 2c f3 ..AW.....9....3 0060 0e 0c c1 e6 94 31 af c3 7c 1e 2b cf 97 5d 7b ff .....1..|.+..]{. 0070 00 14 7c 18 f0 9f 80 2e 7e 19 f8 b2 c3 48 f8 f5 ..|.....~....H.. 0080 f0 2b c7 9a 8f c4 f8 be 2d f8 82 3b ef 0a fc 39 .+......-..;...9 0090 d3 7c 0b a5 7c 30 f1 dc ba c7 ec db a6 78 91 3c .|..|0.......x.< 00a0 2f 79 7b a5 78 b3 c2 97 9e 1c d1 bc 01 27 8d ac /y{.x........'.. 00b0 b5 5f 14 49 65 ff 00 0a ab c1 9f 04 25 b2 b9 f1 ._.Ie.......%... 00c0 3e bf e3 0f 54 f1 ce bd e3 6f 88 bf 0a bc 67 a8 >...T....o....g. 00d0 78 0e df c7 11 5e 78 6b c1 9e 17 bb d1 fe 11 fc x....^xk........ 00e0 50 f8 29 2f c5 ef 05 7c 61 d1 74 8f 10 f8 af 4b P.)/...|a.t....K 00f0 bd d3 fc 50 fa 0f 89 34 9f 84 fa 25 d7 c3 bf 0e ...P...4...%.... 0100 5f d8 5f 1f 05 5a e9 1e 19 d7 7e 15 f8 97 c2 3e _._..Z....~....> 0110 26 f0 f4 f7 9e 10 d2 f4 0f 86 2f e1 de fb c2 7e &........./....~ 0120 3b f8 63 17 c4 8f 88 7f 12 7c 59 e1 9f 15 de 6a ;.c......|Y....j 0130 9e 1a fd a6 5b 48 be b8 d3 7c 61 77 e3 9d 76 2f ....[H...|aw..v/ 0140 18 78 7b e1 cd 87 84 34 5b fb eb bf 03 f8 57 5a .x{....4[.....WZ 0150 d5 2c 6f 24 d6 3e 35 78 1b 54 d1 d3 c4 d0 e8 d0 .,o$.>5x.T...... 0160 59 47 70 34 c8 3e 1e fe ce f6 df 0f 35 4d 0b 41 YGp4.>......5M.A 0170 f1 7f 88 ff 00 12 f5 6d 0b c6 de 36 ba f1 16 8d .......m...6.... 0180 ab 69 ff 00 15 bc 39 e0 bf 8e 5f 17 35 2f 87 3a .i....9..._.5/.: 0190 27 8b 75 cf 19 a8 d3 fc 15 f1 b7 c2 7e 3a f0 cf '.u.........~:.. 01a0 c3 af 06 1f 12 78 37 4d ba f0 17 81 7c 1f 71 a0 .....x7M....|.q. 01b0 c3 f1 2f 4c 8f c6 df 0e 2d 7c 6d 37 8d fe ../L....-|m7.. Data […]: 3316b25c9330e0cc9f9b22c12c9b0d56864791e6d83c870d81c9729ceb85732c9e8d4157cefda712e73c519a471b2cf389386ab548e068e659970d710e72b0787c9f8cb0fc3f5b31cc7328f12f06d0cee3f5be29cf29645c3f3e39e1bcf38b330e0cc1e69431afc37c1e2bcf975d7bff001 [Length: 446] [Packet size limited during capture: HTTP truncated]