Frame 3494: Packet, 1514 bytes on wire (12112 bits), 500 bytes captured (4000 bits) Encapsulation type: Ethernet (1) Arrival Time: Mar 20, 2012 23:33:05.796309000 UTC UTC Arrival Time: Mar 20, 2012 23:33:05.796309000 UTC Epoch Arrival Time: 1332286385.796309000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 804.000 microseconds] [Time since reference or first frame: 7.327203000 seconds] Frame Number: 3494 Frame Length: 1514 bytes (12112 bits) Capture Length: 500 bytes (4000 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09), Dst: Apple_85:4d:bc (00:23:6c:85:4d:bc) Destination: Apple_85:4d:bc (00:23:6c:85:4d:bc) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 2] Internet Protocol Version 4, Src: 69.241.108.46, Dst: 192.168.1.104 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x20 (DSCP: CS1, ECN: Not-ECT) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (8) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0xbbe1 (48097) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 57 Protocol: TCP (6) Header Checksum: 0x0beb [validation disabled] [Header checksum status: Unverified] Source Address: 69.241.108.46 Destination Address: 192.168.1.104 [Source GeoIP: Seattle, US] [Source GeoIP City: Seattle] [Source or Destination GeoIP City: Seattle] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP Latitude: 47.5741] [Source or Destination GeoIP Latitude: 47.5741] [Source GeoIP Longitude: -122.3975] [Source or Destination GeoIP Longitude: -122.3975] [Stream index: 2] Transmission Control Protocol, Src Port: 80, Dst Port: 54933, Seq: 1313454, Ack: 6851, Len: 1460 Source Port: 80 Destination Port: 54933 [Stream index: 1] [Stream Packet Number: 1554] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1460] Sequence Number: 1313454 (relative sequence number) Sequence Number (raw): 1105324491 [Next Sequence Number: 1314914 (relative sequence number)] Acknowledgment Number: 6851 (relative ack number) Acknowledgment number (raw): 4015828518 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 153 [Calculated window size: 19584] [Window size scaling factor: 128] Checksum: 0xc7dc [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 4.850011000 seconds] [Time since previous frame in this TCP stream: 804.000 microseconds] [SEQ/ACK analysis] [iRTT: 15.727000 milliseconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 62780] [Client Contiguous Streams: 1] [Server Contiguous Streams: 1] TCP payload (1460 bytes) Hypertext Transfer Protocol File Data: 446 bytes Data (446 bytes) 0000 5d 5e de 1f 87 fe 2c be f8 c3 e0 8f 88 3f 07 fe ]^....,......?.. 0010 10 25 ef 8a 3c 75 f0 ff 00 c6 7e 2e f1 37 88 34 .%.. ..+......g.o 0030 12 78 5f e1 8d bd ef c3 cf 85 d3 7c 4a f1 95 dd .x_........|J... 0040 a5 c7 35 ce a9 65 33 c8 97 0e 64 39 85 39 65 bc ..5..e3...d9.9e. 0050 57 53 39 cd b1 14 aa e7 1c 59 c3 14 32 7c 5d 5c WS9......Y..2|]\ 0060 7e 4b 9b e0 71 bf ea 95 2e 1b a5 c3 b8 97 98 e0 ~K..q........... 0070 f3 cf a8 d4 cd a5 98 ac 7c ea e1 78 63 86 f3 3c ........|..xc..< 0080 ff 00 87 aa 63 33 77 c5 79 de 3b 24 ca 70 d9 1c ....c3w.y.;$.p.. 0090 f3 17 84 ae b8 6a be 71 c2 b9 8e 5d 90 64 7c 1b .....j.q...].d|. 00a0 5b 88 28 e2 78 bf 3d c1 e4 7c 57 80 af 83 c8 6a [.(.x.=..|W....j 00b0 66 6f 88 23 c4 55 b8 7a b6 55 92 e6 15 f1 d5 f0 fo.#.U.z.U...... 00c0 32 ce 33 0c ab 2e c9 38 52 af 1d e7 38 dc 83 c2 2.3....8R...8... 00d0 be d1 af db fc 3c 0f e3 bf 03 c5 f0 cb c0 36 da .....<........6. 00e0 3f c3 8f 07 59 78 73 49 bb f1 a6 9c b6 5f 15 e5 ?...YxsI....._.. 00f0 d6 74 af 87 3a 8d 8f c3 bb 4f 82 9e 0f f8 9b a1 .t..:....O...... 0100 5d fc 26 d5 3c 2d f0 e3 c4 3e 27 9f 58 b1 97 e3 ].&.<-...>'.X... 0110 67 c6 7f 0c fc 32 f0 ff 00 c4 0d 2f c0 1e 21 f8 g....2...../..!. 0120 8b a1 f8 f6 e3 e1 3f 82 7d 9f e1 5f 81 e0 f8 8d ......?.}.._.... 0130 79 0f 87 35 4f 8a da d7 86 bc 0b 6d ae e8 be 28 y..5O......m...( 0140 f0 9e 9b a3 7c 42 f1 16 97 e1 cf 18 de 7c 42 f8 ....|B.......|B. 0150 71 1e 99 e1 93 a2 e8 1a 9b 68 7e 0c d0 bc 0b a1 q........h~..... 0160 fc 48 9f 56 d0 f5 cf 0d 78 0f 5c 7f 12 78 f7 c4 .H.V....x.\..x.. 0170 3e 10 93 c4 1f 10 ad cd a7 c5 ff 00 d9 d3 c4 de >............... 0180 14 e1 2d 3c 69 f1 43 c6 5a 32 f8 9b c6 de 30 d3 ..-