Frame 3253: Packet, 1514 bytes on wire (12112 bits), 500 bytes captured (4000 bits) Encapsulation type: Ethernet (1) Arrival Time: Mar 20, 2012 23:33:05.536771000 UTC UTC Arrival Time: Mar 20, 2012 23:33:05.536771000 UTC Epoch Arrival Time: 1332286385.536771000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 606.000 microseconds] [Time since reference or first frame: 7.067665000 seconds] Frame Number: 3253 Frame Length: 1514 bytes (12112 bits) Capture Length: 500 bytes (4000 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09), Dst: Apple_85:4d:bc (00:23:6c:85:4d:bc) Destination: Apple_85:4d:bc (00:23:6c:85:4d:bc) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 2] Internet Protocol Version 4, Src: 69.241.108.46, Dst: 192.168.1.104 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x20 (DSCP: CS1, ECN: Not-ECT) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (8) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0xbb9d (48029) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 57 Protocol: TCP (6) Header Checksum: 0x0c2f [validation disabled] [Header checksum status: Unverified] Source Address: 69.241.108.46 Destination Address: 192.168.1.104 [Source GeoIP: Seattle, US] [Source GeoIP City: Seattle] [Source or Destination GeoIP City: Seattle] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP Latitude: 47.5741] [Source or Destination GeoIP Latitude: 47.5741] [Source GeoIP Longitude: -122.3975] [Source or Destination GeoIP Longitude: -122.3975] [Stream index: 2] Transmission Control Protocol, Src Port: 80, Dst Port: 54933, Seq: 1214174, Ack: 6851, Len: 1460 Source Port: 80 Destination Port: 54933 [Stream index: 1] [Stream Packet Number: 1441] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1460] Sequence Number: 1214174 (relative sequence number) Sequence Number (raw): 1105225211 [Next Sequence Number: 1215634 (relative sequence number)] Acknowledgment Number: 6851 (relative ack number) Acknowledgment number (raw): 4015828518 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 153 [Calculated window size: 19584] [Window size scaling factor: 128] Checksum: 0xf08d [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 4.590473000 seconds] [Time since previous frame in this TCP stream: 17.761000 milliseconds] [SEQ/ACK analysis] [iRTT: 15.727000 milliseconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 56940] [Client Contiguous Streams: 1] [Server Contiguous Streams: 1] TCP payload (1460 bytes) Hypertext Transfer Protocol File Data: 446 bytes Data (446 bytes) 0000 4e af f0 a3 41 b0 f0 4f c2 ff 00 1c f8 3f c3 1a N...A..O.....?.. 0010 ae bc 3c 47 e0 eb 8d 0f c5 1e 0b d3 ae 7c 07 e1 ...|..,. 0080 ef 83 6b 7f f1 13 d8 9e 21 71 af 10 e4 dc 5d c6 ..k.....!q....]. 0090 d8 be 12 c6 e0 f0 58 59 47 07 2c c7 8c 28 e7 99 ......XYG.,..(.. 00a0 7e 7f 9a 63 31 1c 51 5f 86 30 58 4c ca 38 65 c7 ~..c1.Q_.0XL.8e. 00b0 39 8f 0c e1 e9 e5 f8 2c 7f 10 47 30 e2 8e 2f cc 9......,..G0../. 00c0 f3 3c c7 0d c3 d9 de 47 86 c8 f0 19 e6 0e 8e 55 .<.....G.......U 00d0 e8 e1 b2 fa dc 44 be af c4 bc 75 c3 f9 0e 71 9d .....D....u...q. 00e0 4b 21 e3 5c 76 1f 33 a0 a9 f1 f6 45 8e e2 ae 1f K!.\v.3....E.... 00f0 cf 33 4c af 31 a1 c4 18 bc 2e 61 c4 d8 fc a7 17 .3L.1.....a..... 0100 84 c2 e7 f9 5e 45 95 51 e2 5c 76 57 c5 94 b2 7e ....^E.Q.\vW...~ 0110 25 e1 bc 7e 2f 8b 71 38 09 e4 53 e0 fc 29 ff 00 %..~/.q8..S..).. 0120 0a e3 c3 1e 21 8b c1 5f 11 23 f1 17 8b be 27 78 ....!.._.#....'x 0130 2f c7 9e 39 f0 6d 84 3f f0 9a 78 1e 4d 2b e2 ed /..9.m.?..x.M+.. 0140 8f 8f 74 2f 89 36 3e 13 f1 07 86 7c 49 73 7d 17 ..t/.6>....|Is}. 0150 80 7e 0a 68 3e 08 3e 05 f0 aa ea f7 ba 26 9d 3f .~.h>.>......&.? 0160 8e fe 1e 6a 3a 8f 83 bc 03 f0 4a fc e9 5f 0d 3c ...j:.....J.._.< 0170 2d a2 f8 f3 d3 fe 0a 78 ab 5e f1 65 fc 9f 14 bc -......x.^.e.... 0180 13 e0 ef 14 bd ce b7 69 a9 78 3f c7 de 1e f0 87 .......i.x?..... 0190 88 b5 df 09 27 8b 7e 0f 5c ea 5f 0e 2d 47 89 e2 ....'.~.\._.-G.. 01a0 d1 a7 f8 3f e1 7d 33 c5 97 fa e6 8f a8 f8 4b 55 ...?.}3.......KU 01b0 ba d3 be 0a 78 4e c3 f6 86 b8 d2 7c 09 f1 ....xN.....|.. Data […]: 4eaff0a341b0f04fc2ff001cf83fc31aaebc3c47e0eb8d0fc51e0bd3ae7c07e1eb7f87dacda7c41c1f0f68ff0013be27f84fe1bfc65d0ef74dbdff00858ff09b47965f1fea9347aadef8cfe3abeafe0bd1f4af077887c4baf6a1f0c3c4de29f8eba77c39d3be177c3ff88be2dd1be2178af [Length: 446] [Packet size limited during capture: HTTP truncated]