Frame 3551: Packet, 1514 bytes on wire (12112 bits), 500 bytes captured (4000 bits) Encapsulation type: Ethernet (1) Arrival Time: Mar 20, 2012 23:33:05.842361000 UTC UTC Arrival Time: Mar 20, 2012 23:33:05.842361000 UTC Epoch Arrival Time: 1332286385.842361000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 309.000 microseconds] [Time since reference or first frame: 7.373255000 seconds] Frame Number: 3551 Frame Length: 1514 bytes (12112 bits) Capture Length: 500 bytes (4000 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09), Dst: Apple_85:4d:bc (00:23:6c:85:4d:bc) Destination: Apple_85:4d:bc (00:23:6c:85:4d:bc) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 2] Internet Protocol Version 4, Src: 69.241.108.46, Dst: 192.168.1.104 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x20 (DSCP: CS1, ECN: Not-ECT) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (8) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0xbbf0 (48112) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 57 Protocol: TCP (6) Header Checksum: 0x0bdc [validation disabled] [Header checksum status: Unverified] Source Address: 69.241.108.46 Destination Address: 192.168.1.104 [Source GeoIP: Seattle, US] [Source GeoIP City: Seattle] [Source or Destination GeoIP City: Seattle] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP Latitude: 47.5741] [Source or Destination GeoIP Latitude: 47.5741] [Source GeoIP Longitude: -122.3975] [Source or Destination GeoIP Longitude: -122.3975] [Stream index: 2] Transmission Control Protocol, Src Port: 80, Dst Port: 54933, Seq: 1335354, Ack: 6851, Len: 1460 Source Port: 80 Destination Port: 54933 [Stream index: 1] [Stream Packet Number: 1578] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1460] Sequence Number: 1335354 (relative sequence number) Sequence Number (raw): 1105346391 [Next Sequence Number: 1336814 (relative sequence number)] Acknowledgment Number: 6851 (relative ack number) Acknowledgment number (raw): 4015828518 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 153 [Calculated window size: 19584] [Window size scaling factor: 128] Checksum: 0x1f25 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 4.896063000 seconds] [Time since previous frame in this TCP stream: 309.000 microseconds] [SEQ/ACK analysis] [iRTT: 15.727000 milliseconds] [Bytes in flight: 2920] [Bytes sent since last PSH flag: 84680] [Client Contiguous Streams: 1] [Server Contiguous Streams: 1] TCP payload (1460 bytes) Hypertext Transfer Protocol File Data: 446 bytes Data (446 bytes) 0000 79 45 4c d7 05 9a 52 c8 33 ac 2c 96 26 96 4d 43 yEL...R.3.,.&.MC 0010 29 8e 65 93 64 cb 2a ca b3 29 f0 17 12 71 46 77 ).e.d.*..)...qFw 0020 93 e3 78 a7 8a b8 87 25 e3 ac 07 a3 e8 3f 09 f4 ..x....%.....?.. 0030 c9 74 3f 87 da 5e 91 a3 78 33 4b 5d 51 1b c2 da .t?..^..x3K]Q... 0040 a7 c7 48 fe 18 af 83 6c 3c 0f 75 61 e0 9b 8f 0c ..H....l<.ua.... 0050 7c 44 f8 99 ad 6a 7f 1e 3c 0f a7 eb fe 2e f1 8f |D...j..<....... 0060 c6 9f 1a 2e 93 77 f0 6b e1 d6 87 f0 ab 57 f0 35 .....w.k.....W.5 0070 f6 b9 f1 57 c7 7f 0c a2 f0 8b f8 60 7f c2 63 75 ...W.......`..cu 0080 c2 78 e0 78 77 c6 f7 9e 2f f0 0f 81 65 f1 2f 8a .x.xw.../...e./. 0090 ec 75 df 19 eb b6 9a 47 84 7c 65 e2 2f 11 9f 13 .u.....G.|e./... 00a0 78 d7 56 ba f1 fe b9 e1 df 01 da ea fe 3a d3 7e x.V..........:.~ 00b0 24 cf e1 fd 5b e1 0c 56 1f 05 3c 4d a2 69 a9 e2 $...[..V.....~..... 0110 00 8a f4 bd 76 ca c3 c5 73 fc 34 f1 27 c3 7b bf ....v...s.4.'.{. 0120 13 ea be 0a 9f 53 d5 34 9d 1f f6 6c d4 f4 b9 fb .....S.4...l.... 0130 2f 1e f8 d7 54 8f 40 f8 47 f0 43 50 f0 9d c7 c5 /...T.@.G.CP.... 0140 af 0d d9 78 97 e2 0f 8f be 23 6a be 20 d1 61 6f ...x.....#j. .ao 0150 17 fc 3a f1 f7 8b a0 36 1a 97 85 27 f1 66 93 f0 ..:....6...'.f.. 0160 92 fb 47 f8 a7 f0 e3 44 f8 7f a3 eb de 00 f1 37 ..G....D.......7 0170 c4 b9 fc 23 ad f8 73 5e d2 75 9f 15 e9 de 2d bd ...#..s^.u....-. 0180 83 e0 c6 bf e0 9f 0b af 8e f0 38 8c 5f 0f f0 bf ..........8._... 0190 16 f0 76 2a 87 16 f1 45 1e 26 e1 8c 92 ae 6a e9 ..v*...E.&....j. 01a0 f0 fe 5e b3 2c 97 01 92 67 98 fe 21 c7 c3 33 c2 ..^.,...g..!..3. 01b0 e7 11 c0 67 b9 86 26 a6 3a 9e 2f 33 ca 30 ...g..&.:./3.0 Data […]: 79454cd7059a52c833ac2c9626964d43298e659364cb2acab329f0171271467793e378a78ab88725e3ac07a3e83f09f4c9743f87da5e91a378334b5d511bc2daa7c748fe18af836c3c0f7561e09b8f0c7c44f899ad6a7f1e3c0fa7ebfe2ef18fc69f1a2e9377f06be1d687f0ab57f035f6b [Length: 446] [Packet size limited during capture: HTTP truncated]