Frame 3988: Packet, 1514 bytes on wire (12112 bits), 500 bytes captured (4000 bits) Encapsulation type: Ethernet (1) Arrival Time: Mar 20, 2012 23:33:06.295444000 UTC UTC Arrival Time: Mar 20, 2012 23:33:06.295444000 UTC Epoch Arrival Time: 1332286386.295444000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 636.000 microseconds] [Time since reference or first frame: 7.826338000 seconds] Frame Number: 3988 Frame Length: 1514 bytes (12112 bits) Capture Length: 500 bytes (4000 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09), Dst: Apple_85:4d:bc (00:23:6c:85:4d:bc) Destination: Apple_85:4d:bc (00:23:6c:85:4d:bc) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 2] Internet Protocol Version 4, Src: 69.241.108.46, Dst: 192.168.1.104 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x20 (DSCP: CS1, ECN: Not-ECT) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (8) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0xbc75 (48245) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 57 Protocol: TCP (6) Header Checksum: 0x0b57 [validation disabled] [Header checksum status: Unverified] Source Address: 69.241.108.46 Destination Address: 192.168.1.104 [Source GeoIP: Seattle, US] [Source GeoIP City: Seattle] [Source or Destination GeoIP City: Seattle] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP Latitude: 47.5741] [Source or Destination GeoIP Latitude: 47.5741] [Source GeoIP Longitude: -122.3975] [Source or Destination GeoIP Longitude: -122.3975] [Stream index: 2] Transmission Control Protocol, Src Port: 80, Dst Port: 54933, Seq: 1528074, Ack: 6851, Len: 1460 Source Port: 80 Destination Port: 54933 [Stream index: 1] [Stream Packet Number: 1799] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1460] Sequence Number: 1528074 (relative sequence number) Sequence Number (raw): 1105539111 [Next Sequence Number: 1529534 (relative sequence number)] Acknowledgment Number: 6851 (relative ack number) Acknowledgment number (raw): 4015828518 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 153 [Calculated window size: 19584] [Window size scaling factor: 128] Checksum: 0xbd0b [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 5.349146000 seconds] [Time since previous frame in this TCP stream: 636.000 microseconds] [SEQ/ACK analysis] [iRTT: 15.727000 milliseconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 83220] [Client Contiguous Streams: 1] [Server Contiguous Streams: 1] TCP payload (1460 bytes) Hypertext Transfer Protocol File Data: 446 bytes Data (446 bytes) 0000 3a 18 ba f8 4c 16 79 8a cc 70 f8 e5 1c ca 59 3e :...L.y..p....Y> 0010 7b 84 cd 31 b8 ee 22 a5 82 85 3c bb 8a 33 ba 0b {..1.."...<..3.. 0020 07 c3 f8 1e 25 e3 cc 07 13 54 c0 70 de 3b 11 94 ....%....T.p.;.. 0030 4f 22 e2 ba af 3e c1 65 d9 ff 00 0e 57 c5 70 d5 O"...>.e....W.p. 0040 3c 7e 7a 78 75 27 9d 50 c4 65 79 56 33 1b 82 e2 <~zxu'.P.eyV3... 0050 9c 9f 23 a9 57 34 c7 60 6a 43 8d f8 03 0d c2 b8 ..#.W4.`jC...... 0060 0e 1a c2 f0 e6 07 13 83 c7 66 94 31 14 78 8f 17 .........f.1.x.. 0070 9f 71 ce 65 8e af 9a be 2a c3 e0 f1 fc 3b 9e 71 .q.e....*....;.q 0080 56 0f 2e f1 1f 0f 0a f8 dc ce 8e 57 80 f4 cf 86 V..........W.... 0090 fe 0e b0 f1 bf f6 7f 8c ed 74 8d 0e 0d 42 0f 17 .........t...B.. 00a0 7c 39 b3 f1 27 c3 bf 8a 7f 0b be 1f f8 6f c6 b7 |9..'........o.. 00b0 9f 09 a0 d0 8f c4 6b 2d 33 47 f0 ec 1e 33 f0 9f ......k-3G...3.. 00c0 89 fc 03 69 63 e1 df 89 d2 5d 6a 9a 0f 82 b4 eb ...ic....]j..... 00d0 5b ef 19 78 03 c5 ba 7e 97 7b 3d 8f c3 0d 13 c1 [..x...~.{=..... 00e0 1f 1d fc 49 e8 1e 2c f1 06 9d f1 0f 42 d2 3c 37 ...I..,.....B.<7 00f0 e2 1f 04 fc 3b f8 db e3 3f 1f 78 34 78 8a 7f 11 ....;...?.x4x... 0100 69 3a 07 ec df ad f8 9b c6 f6 9f 11 63 f8 67 f0 i:..........c.g. 0110 83 40 6d 5f f6 a8 f0 8b fc 36 f8 7d a8 f8 9b 4e .@m_.....6.}...N 0120 f1 17 c4 0f 18 bf 85 35 cd 6b c0 b6 5a 67 c3 09 .......5.k..Zg.. 0130 3c 3f e1 7f 0e fc 49 f0 d7 c2 e8 fe 29 78 44 6a