Frame 2839: Packet, 1514 bytes on wire (12112 bits), 500 bytes captured (4000 bits) Encapsulation type: Ethernet (1) Arrival Time: Mar 20, 2012 23:33:05.044626000 UTC UTC Arrival Time: Mar 20, 2012 23:33:05.044626000 UTC Epoch Arrival Time: 1332286385.044626000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 761.000 microseconds] [Time since reference or first frame: 6.575520000 seconds] Frame Number: 2839 Frame Length: 1514 bytes (12112 bits) Capture Length: 500 bytes (4000 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09), Dst: Apple_85:4d:bc (00:23:6c:85:4d:bc) Destination: Apple_85:4d:bc (00:23:6c:85:4d:bc) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 2] Internet Protocol Version 4, Src: 69.241.108.46, Dst: 192.168.1.104 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x20 (DSCP: CS1, ECN: Not-ECT) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (8) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0xf489 (62601) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 57 Protocol: TCP (6) Header Checksum: 0xd342 [validation disabled] [Header checksum status: Unverified] Source Address: 69.241.108.46 Destination Address: 192.168.1.104 [Source GeoIP: Seattle, US] [Source GeoIP City: Seattle] [Source or Destination GeoIP City: Seattle] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP Latitude: 47.5741] [Source or Destination GeoIP Latitude: 47.5741] [Source GeoIP Longitude: -122.3975] [Source or Destination GeoIP Longitude: -122.3975] [Stream index: 2] Transmission Control Protocol, Src Port: 80, Dst Port: 54934, Seq: 1243144, Ack: 1161, Len: 1460 Source Port: 80 Destination Port: 54934 [Stream index: 2] [Stream Packet Number: 1439] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1460] Sequence Number: 1243144 (relative sequence number) Sequence Number (raw): 1104580857 [Next Sequence Number: 1244604 (relative sequence number)] Acknowledgment Number: 1161 (relative ack number) Acknowledgment number (raw): 2053486069 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 64 [Calculated window size: 8192] [Window size scaling factor: 128] Checksum: 0x68ad [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 3.466907000 seconds] [Time since previous frame in this TCP stream: 761.000 microseconds] [SEQ/ACK analysis] [iRTT: 13.003000 milliseconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 81760] [Client Contiguous Streams: 1] [Server Contiguous Streams: 1] TCP payload (1460 bytes) Hypertext Transfer Protocol File Data: 446 bytes Data (446 bytes) 0000 67 e5 65 98 7a f1 c3 60 e8 e7 b9 86 12 7c 2f 4b g.e.z..`.....|/K 0010 87 78 9e 18 0e 22 cb f8 6b 85 72 6e 1d 86 73 8a .x..."..k.rn..s. 0020 c7 60 25 e2 26 61 95 60 38 56 1c 49 5b 1d 81 c4 .`%.&a.`8V.I[... 0030 70 e4 a1 e2 36 33 2a e2 19 c2 a6 67 4b 24 cc 78 p...63*....gK$.x 0040 bf 29 cb b3 da d9 96 12 a4 bb 6b 8d 1f 5d f8 ae .)........k..].. 0050 f6 1a 2f 8b ed 52 f7 c7 7e 04 bd d2 3c 23 e3 2b ../..R..~...<#.+ 0060 ff 00 12 6a 1e 37 f8 3d 37 c4 cd 67 e2 e7 88 a3 ...j.7.=7..g.... 0070 f8 51 a7 7c 61 d6 75 4b 03 e0 6f 82 7e 06 96 1b .Q.|a.uK..o.~... 0080 5f 82 5e 21 7b ad 2f e1 97 83 f5 e8 75 af 84 3e _.^!{./.....u..> 0090 1c d4 fc 3d 7d e2 ed 0f f6 92 f8 7f e1 09 f5 fb ...=}........... 00a0 be 24 d6 fc 59 f0 ff 00 c0 be 06 f1 87 8a 7c 7b .$..Y.........|{ 00b0 e2 df 89 df 08 3e 1f 7c 4b f8 a2 75 2f 86 5e 16 .....>.|K..u/.^. 00c0 d4 fc 21 f0 e3 c3 be 05 b8 f1 07 c5 df 88 fe 0a ..!............. 00d0 d2 b4 db 6f 8e 3a 9d d6 89 f1 1b c3 7e 17 bb f8 ...o.:......~... 00e0 7c f6 ef 79 a1 1d 5f c3 ba 67 88 f5 18 7e 26 1f |..y.._..g...~&. 00f0 11 f8 bb 4f f1 af 8d b4 3f 06 78 ee 82 dd d8 f8 ...O....?.x..... 0100 d3 c5 9f 0f bc 1d e1 eb ef 02 f8 ab e1 ae 9b e1 ................ 0110 9f 8a ff 00 0c fc 41 f0 93 c2 bf 0f 3c 43 a8 7c ......A.....8.~-.....o 0140 1a f8 b7 c4 de 01 d4 47 c4 5f 14 e8 ba 77 c6 ff .......G._...w.. 0150 00 84 9f 1d 35 1d 27 5d f8 91 ad c7 f0 d3 cd b5 ....5.']........ 0160 7f 87 7a 67 c5 5f 86 ba 9f c3 6f 04 f8 2a d3 e3 ..zg._....o..*.. 0170 07 87 3c 55 f1 03 45 f1 df 89 b5 7f 88 de 18 f8 ..