Frame 3919: Packet, 1514 bytes on wire (12112 bits), 500 bytes captured (4000 bits) Encapsulation type: Ethernet (1) Arrival Time: Mar 20, 2012 23:33:06.209537000 UTC UTC Arrival Time: Mar 20, 2012 23:33:06.209537000 UTC Epoch Arrival Time: 1332286386.209537000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 782.000 microseconds] [Time since reference or first frame: 7.740431000 seconds] Frame Number: 3919 Frame Length: 1514 bytes (12112 bits) Capture Length: 500 bytes (4000 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09), Dst: Apple_85:4d:bc (00:23:6c:85:4d:bc) Destination: Apple_85:4d:bc (00:23:6c:85:4d:bc) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 2] Internet Protocol Version 4, Src: 69.241.108.46, Dst: 192.168.1.104 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x20 (DSCP: CS1, ECN: Not-ECT) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (8) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0xbc59 (48217) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 57 Protocol: TCP (6) Header Checksum: 0x0b73 [validation disabled] [Header checksum status: Unverified] Source Address: 69.241.108.46 Destination Address: 192.168.1.104 [Source GeoIP: Seattle, US] [Source GeoIP City: Seattle] [Source or Destination GeoIP City: Seattle] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP Latitude: 47.5741] [Source or Destination GeoIP Latitude: 47.5741] [Source GeoIP Longitude: -122.3975] [Source or Destination GeoIP Longitude: -122.3975] [Stream index: 2] Transmission Control Protocol, Src Port: 80, Dst Port: 54933, Seq: 1487194, Ack: 6851, Len: 1460 Source Port: 80 Destination Port: 54933 [Stream index: 1] [Stream Packet Number: 1753] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1460] Sequence Number: 1487194 (relative sequence number) Sequence Number (raw): 1105498231 [Next Sequence Number: 1488654 (relative sequence number)] Acknowledgment Number: 6851 (relative ack number) Acknowledgment number (raw): 4015828518 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 153 [Calculated window size: 19584] [Window size scaling factor: 128] Checksum: 0xd56b [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 5.263239000 seconds] [Time since previous frame in this TCP stream: 782.000 microseconds] [SEQ/ACK analysis] [iRTT: 15.727000 milliseconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 42340] [Client Contiguous Streams: 1] [Server Contiguous Streams: 1] TCP payload (1460 bytes) Hypertext Transfer Protocol File Data: 446 bytes Data (446 bytes) 0000 4e 55 c4 39 fe 4b c2 d8 c5 8e cd f1 98 5c 2d 5e NU.9.K.......\-^ 0010 00 ca 73 dc 04 72 ae 27 c8 b8 6f 20 e2 ac fb 84 ..s..r.'..o .... 0020 b8 82 8e 5b 97 f1 0e 65 c4 b4 32 c8 e6 ca 19 66 ...[...e..2....f 0030 5d cf fc 25 d5 34 8d 0b c1 be 05 bb b6 7d 73 c3 ]..%.4.......}s. 0040 5f 10 7e 2d 7c 2f b6 ff 00 84 7b 57 d3 2d 7c 11 _.~-|/....{W.-|. 0050 e2 4f 88 7e 3c f1 9c fe 2c f8 6b e0 8f 1f 6b fe .O.~<...,.k...k. 0060 1a d6 34 dd 5f e1 ef 8f 7c 41 f0 67 e3 17 c6 39 ..4._...|A.g...9 0070 3f b3 bc 00 9a 25 c7 c4 2f 0b e9 be 1f f0 56 af ?....%../.....V. 0080 67 f1 d3 47 f0 77 81 f5 dd 54 59 62 69 b7 b7 3e g..G.w...TYbi..> 0090 3b f1 6d ee a9 63 75 aa e9 7e 14 d7 34 5f 1f e9 ;.m..cu..~..4_.. 00a0 b7 fe 1a f1 37 86 3c 09 e0 4f 09 59 f8 bf c4 77 ....7.<..O.Y...w 00b0 3e 1f 97 59 f1 e6 9f e2 2d 7f e0 fe a3 e1 dd 2f >..Y....-....../ 00c0 e1 86 91 e1 bf 07 1d 17 e2 1d bd 87 84 25 f8 95 .............%.. 00d0 e0 59 be 17 eb 9a 77 c5 5f 0e fc 58 f0 be a9 f1 .Y....w._..X.... 00e0 1f e3 13 e1 dd f8 67 e2 46 91 77 aa e8 9f 13 fc ......g.F.w..... 00f0 75 65 f0 ab e2 66 bd f0 63 c0 d1 dd fc 58 f0 9f ue...f..c....X.. 0100 8e 3c 23 a8 78 8b c6 1a 6e 89 0c 96 77 3f 16 2e .<#.x...n...w?.. 0110 7c 5b e1 cf 86 1a 27 8b fe 1e 9d 5b 4c f8 39 f0 |[....'....[L.9. 0120 b3 c3 7e 2b 1e 1b 83 58 bc f8 9f 73 e1 0f 8d 3e ..~+...X...s...> 0130 3a f0 f5 ef 8f 74 7f 03 fc 3d f0 ef 8c b8 5b df :....t...=....[. 0140 89 47 51 f1 d7 c1 2f 19 6b 5f 14 2e 3e 10 ea 7a .GQ.../.k_..>..z 0150 9f c3 ef 06 7c 51 d1 bc 55 e0 54 d2 75 17 b7 f1 ....|Q..U.T.u... 0160 a7 89 3c 7f aa 78 03 c0 9f 07 fe 0d ea 7a 16 87 ..<..x.......z.. 0170 e2 6d 67 c5 5f 0c 6c 7e 27 c0 be 25 b8 f8 7f e0 .mg._.l~'..%.... 0180 e4 f8 b5 7d ae ea ff 00 b3 cd 8f 8c 7c 49 e0 cb ...}........|I.. 0190 cb 8f 16 68 5f 17 3c 17 78 5e 1c c1 f1 15 5a 54 ...h_.<.x^....ZT 01a0 32 ec 7f 02 e6 92 c7 f0 b7 0b 60 72 3a d8 a9 66 2.........`r:..f 01b0 1c 75 c2 90 cd f2 5c 2e 4b 9f 67 d9 6e 2b .u....\.K.g.n+ Data […]: 4e55c439fe4bc2d8c58ecdf1985c2d5e00ca73dc0472ae27c8b86f20e2acfb84b8828e5b97f10e65c4b432c8e6ca19665dcffc25d5348d0bc1be05bbb67d73c35f107e2d7c2fb6ff00847b57d32d7c11e24f887e3cf19cfe2cf86be08f1f6bfe1ad634dd5fe1ef8f7c41f067e317c6393fb [Length: 446] [Packet size limited during capture: HTTP truncated]