Frame 3922: Packet, 1514 bytes on wire (12112 bits), 500 bytes captured (4000 bits) Encapsulation type: Ethernet (1) Arrival Time: Mar 20, 2012 23:33:06.210995000 UTC UTC Arrival Time: Mar 20, 2012 23:33:06.210995000 UTC Epoch Arrival Time: 1332286386.210995000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 649.000 microseconds] [Time since reference or first frame: 7.741889000 seconds] Frame Number: 3922 Frame Length: 1514 bytes (12112 bits) Capture Length: 500 bytes (4000 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09), Dst: Apple_85:4d:bc (00:23:6c:85:4d:bc) Destination: Apple_85:4d:bc (00:23:6c:85:4d:bc) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 2] Internet Protocol Version 4, Src: 69.241.108.46, Dst: 192.168.1.104 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x20 (DSCP: CS1, ECN: Not-ECT) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (8) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0xbc5b (48219) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 57 Protocol: TCP (6) Header Checksum: 0x0b71 [validation disabled] [Header checksum status: Unverified] Source Address: 69.241.108.46 Destination Address: 192.168.1.104 [Source GeoIP: Seattle, US] [Source GeoIP City: Seattle] [Source or Destination GeoIP City: Seattle] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP Latitude: 47.5741] [Source or Destination GeoIP Latitude: 47.5741] [Source GeoIP Longitude: -122.3975] [Source or Destination GeoIP Longitude: -122.3975] [Stream index: 2] Transmission Control Protocol, Src Port: 80, Dst Port: 54933, Seq: 1490114, Ack: 6851, Len: 1460 Source Port: 80 Destination Port: 54933 [Stream index: 1] [Stream Packet Number: 1756] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1460] Sequence Number: 1490114 (relative sequence number) Sequence Number (raw): 1105501151 [Next Sequence Number: 1491574 (relative sequence number)] Acknowledgment Number: 6851 (relative ack number) Acknowledgment number (raw): 4015828518 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 153 [Calculated window size: 19584] [Window size scaling factor: 128] Checksum: 0x9091 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 5.264697000 seconds] [Time since previous frame in this TCP stream: 649.000 microseconds] [SEQ/ACK analysis] [iRTT: 15.727000 milliseconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 45260] [Client Contiguous Streams: 1] [Server Contiguous Streams: 1] TCP payload (1460 bytes) Hypertext Transfer Protocol File Data: 446 bytes Data (446 bytes) 0000 38 8b 03 91 61 b0 14 30 58 4a f9 7d 4c 83 19 81 8...a..0XJ.}L... 0010 95 4e 24 c3 71 0e 7d 47 8c e7 9a f0 c6 49 98 60 .N$.q.}G.....I.` 0020 38 cf 8a f2 c8 53 c6 66 58 fc a7 26 c0 f0 9f 14 8....S.fX..&.... 0030 63 ea 70 d7 09 f0 be 57 5b 03 99 65 b5 38 87 1f c.p....W[..e.8.. 0040 1a 91 c6 52 c2 63 38 b3 f3 ca d9 87 0d 61 71 bc ...R.c8......aq. 0050 51 c3 7c 37 8f ab 82 ab 97 7f 6a e2 f3 1c cb 1f Q.|7......j..... 0060 95 70 af 01 d2 c3 e3 56 77 c6 39 87 14 e3 57 88 .p.....Vw.9...W. 0070 38 bc 97 35 c4 57 e0 aa 9c 51 8e e2 1c de 9e 0b 8..5.W...Q...... 0080 c3 cc 5f 13 64 99 75 3c ef 89 b2 1e 1c fe da c8 .._.d.u<........ 0090 29 70 c6 7b 8d e5 3e 07 c1 aa ea 71 f8 3e 17 d5 )p.{..>....q.>.. 00a0 3c 6d e2 7b 6f 19 7c 38 d3 fe 22 78 4f 5d b1 d4 ........ 0110 5f 0c f8 cb c6 5a 7e 9b f1 22 d7 c4 fe 2e be f8 _....Z~.."...... 0120 a5 f0 bf c7 97 1f b4 16 bf 1f c3 3f 18 9f 82 1e ...........?.... 0130 21 d5 b5 3b 7f 03 78 33 c3 16 36 7a cf 82 3c 45 !..;..x3..6z..