Frame 4009: Packet, 1514 bytes on wire (12112 bits), 500 bytes captured (4000 bits) Encapsulation type: Ethernet (1) Arrival Time: Mar 20, 2012 23:33:06.319787000 UTC UTC Arrival Time: Mar 20, 2012 23:33:06.319787000 UTC Epoch Arrival Time: 1332286386.319787000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 707.000 microseconds] [Time since reference or first frame: 7.850681000 seconds] Frame Number: 4009 Frame Length: 1514 bytes (12112 bits) Capture Length: 500 bytes (4000 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09), Dst: Apple_85:4d:bc (00:23:6c:85:4d:bc) Destination: Apple_85:4d:bc (00:23:6c:85:4d:bc) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 2] Internet Protocol Version 4, Src: 69.241.108.46, Dst: 192.168.1.104 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x20 (DSCP: CS1, ECN: Not-ECT) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (8) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0xf649 (63049) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 57 Protocol: TCP (6) Header Checksum: 0xd182 [validation disabled] [Header checksum status: Unverified] Source Address: 69.241.108.46 Destination Address: 192.168.1.104 [Source GeoIP: Seattle, US] [Source GeoIP City: Seattle] [Source or Destination GeoIP City: Seattle] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP Latitude: 47.5741] [Source or Destination GeoIP Latitude: 47.5741] [Source GeoIP Longitude: -122.3975] [Source or Destination GeoIP Longitude: -122.3975] [Stream index: 2] Transmission Control Protocol, Src Port: 80, Dst Port: 54934, Seq: 1889924, Ack: 1161, Len: 1460 Source Port: 80 Destination Port: 54934 [Stream index: 2] [Stream Packet Number: 2185] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1460] Sequence Number: 1889924 (relative sequence number) Sequence Number (raw): 1105227637 [Next Sequence Number: 1891384 (relative sequence number)] Acknowledgment Number: 1161 (relative ack number) Acknowledgment number (raw): 2053486069 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 64 [Calculated window size: 8192] [Window size scaling factor: 128] Checksum: 0xea28 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 4.742068000 seconds] [Time since previous frame in this TCP stream: 707.000 microseconds] [SEQ/ACK analysis] [iRTT: 13.003000 milliseconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 56940] [Client Contiguous Streams: 1] [Server Contiguous Streams: 1] TCP payload (1460 bytes) Hypertext Transfer Protocol File Data: 446 bytes Data (446 bytes) 0000 69 bc 11 e3 26 f1 1f c1 3f 89 ba 61 f8 b5 e3 7f i...&...?..a.... 0010 89 3e 25 d1 bf 67 1d 68 cf 3f 86 3c 27 e0 5d 62 .>%..g.h.?.<'.]b 0020 eb 5f f8 27 a8 db f8 3b e1 cf 86 fc 63 e2 9b 5f ._.'...;....c.._ 0030 86 d7 fe 34 b2 d3 6f bc 55 e1 95 d4 b5 ad 1b e2 ...4..o.U....... 0040 fb f8 a7 53 f0 ee 85 a9 de 78 a7 c1 1e 39 d6 3b ...S.....x...9.; 0050 4f 14 49 f1 0f c5 3e 31 f0 66 bd e3 9d 37 4f d5 O.I...>1.f...7O. 0060 3e 0e e9 ba d7 8c 7e 1c 6b 5f 06 7c 7b f1 87 e1 >.....~.k_.|{... 0070 e7 87 16 53 a2 fc 1f f8 a3 e3 5f 13 6b 92 49 e2 ...S......_.k.I. 0080 0f 8b 5e 12 b6 7f 8a 1f 0b 3e 1a f8 9f c7 9e 25 ..^......>.....% 0090 f8 7e ff 00 b4 b6 a9 a0 d9 ea fa 1c 16 fe 15 f8 .~.............. 00a0 ad 37 c3 64 f0 7d ef 8c 35 a9 bc 09 a2 f8 82 e7 .7.d.}..5....... 00b0 43 f0 ac f1 f8 af 47 f8 6b a4 6b 0f 79 e1 6d 5f C.....G.k.k.y.m_ 00c0 4f 8b e1 66 8b e2 6f 10 41 2f 8c bc 3d 75 e0 68 O..f..o.A/..=u.h 00d0 be 00 78 47 c7 7a 77 83 fe 37 4b a7 78 96 d7 c3 ..xG.zw..7K.x... 00e0 ba c5 fc 36 1a d4 3e 32 f0 e7 8c 3c 63 a3 78 5b ...6..>2...!...; 0180 c4 fc 1f 95 e4 3c 5b 8e c4 43 89 f1 98 9a 19 96 .....<[..C...... 0190 59 90 66 1c 2d 43 e1 2d df c2 fb 0f 09 fc 44 f1 Y.f.-C.-......D. 01a0 07 c4 bf 13 59 ea 5f 0c fc 7f e1 23 aa 6a 7e 31 ....Y._....#.j~1 01b0 3e 36 d5 7e 28 eb ba 65 84 1e 3e f0 3f c1 >6.~(..e..>.?. Data […]: 69bc11e326f11fc13f89ba61f8b5e37f893e25d1bf671d68cf3f863c27e05d62eb5ff827a8dbf83be1cf86fc63e29b5f86d7fe34b2d36fbc55e195d4b5ad1be2fbf8a753f0ee85a9de78a7c11e39d63b4f1449f10fc53e31f066bde39d374fd53e0ee9bad78c7e1c6b5f067c7bf187e1e78 [Length: 446] [Packet size limited during capture: HTTP truncated]