Frame 4011: Packet, 1514 bytes on wire (12112 bits), 500 bytes captured (4000 bits) Encapsulation type: Ethernet (1) Arrival Time: Mar 20, 2012 23:33:06.320687000 UTC UTC Arrival Time: Mar 20, 2012 23:33:06.320687000 UTC Epoch Arrival Time: 1332286386.320687000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 798.000 microseconds] [Time since reference or first frame: 7.851581000 seconds] Frame Number: 4011 Frame Length: 1514 bytes (12112 bits) Capture Length: 500 bytes (4000 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09), Dst: Apple_85:4d:bc (00:23:6c:85:4d:bc) Destination: Apple_85:4d:bc (00:23:6c:85:4d:bc) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 2] Internet Protocol Version 4, Src: 69.241.108.46, Dst: 192.168.1.104 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x20 (DSCP: CS1, ECN: Not-ECT) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (8) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0xf64a (63050) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 57 Protocol: TCP (6) Header Checksum: 0xd181 [validation disabled] [Header checksum status: Unverified] Source Address: 69.241.108.46 Destination Address: 192.168.1.104 [Source GeoIP: Seattle, US] [Source GeoIP City: Seattle] [Source or Destination GeoIP City: Seattle] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP Latitude: 47.5741] [Source or Destination GeoIP Latitude: 47.5741] [Source GeoIP Longitude: -122.3975] [Source or Destination GeoIP Longitude: -122.3975] [Stream index: 2] Transmission Control Protocol, Src Port: 80, Dst Port: 54934, Seq: 1891384, Ack: 1161, Len: 1460 Source Port: 80 Destination Port: 54934 [Stream index: 2] [Stream Packet Number: 2187] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1460] Sequence Number: 1891384 (relative sequence number) Sequence Number (raw): 1105229097 [Next Sequence Number: 1892844 (relative sequence number)] Acknowledgment Number: 1161 (relative ack number) Acknowledgment number (raw): 2053486069 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 64 [Calculated window size: 8192] [Window size scaling factor: 128] Checksum: 0x303c [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 4.742968000 seconds] [Time since previous frame in this TCP stream: 798.000 microseconds] [SEQ/ACK analysis] [iRTT: 13.003000 milliseconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 58400] [Client Contiguous Streams: 1] [Server Contiguous Streams: 1] TCP payload (1460 bytes) Hypertext Transfer Protocol File Data: 446 bytes Data (446 bytes) 0000 32 78 a7 e2 0f c4 1f 8a da 84 9e 17 88 f8 2e d7 2x.............. 0010 c6 52 c1 a5 fc 26 d2 17 c2 de 2d f8 c1 f0 b7 c6 .R...&....-..... 0020 be 14 f1 34 1e 1f f0 34 b6 8d e2 1d 4b e1 ff 00 ...4...4....K... 0030 8a bc 39 e3 29 e7 d4 f0 af e4 b4 f8 73 e2 ef 1b ..9.).......s... 0040 e8 de 32 f8 03 a8 eb 76 f0 78 87 c5 5f 1a a1 bc ..2....v.x.._... 0050 f8 4b ab f8 97 c0 1e 29 f0 37 89 fc 23 1f 81 75 .K.....).7..#..u 0060 ed 26 d3 e2 4c be 3e f8 69 e0 ff 00 16 47 e3 8d .&..L.>.i....G.. 0070 33 c3 fa c3 f8 7a f7 e2 6f 88 db c4 be 1a b3 27 3....z..o......' 0080 c2 1e 21 f8 2d e0 7b 85 f1 2f 8b ac fc 79 f4 1f ..!.-.{../...y.. 0090 c4 1f 86 9e 30 f1 c6 b3 e2 4f 18 6b 9a 86 8f e0 ....0....O.k.... 00a0 fb af 01 78 8b f6 8a d2 f4 fd 0a 1f 18 e8 1e 1d ...x............ 00b0 f1 6d af 89 74 e8 fe 05 69 10 fc 48 b2 f8 c7 e2 .m..t...i..H.... 00c0 ef 1f d9 eb 1f 0c 6c f5 3d 6f c3 b3 ea 1e 24 d3 ......l.=o....$. 00d0 7c 60 fe 04 f8 cf a8 7c 24 f1 17 c4 e8 3c 37 ad |`.....|$....<7. 00e0 78 67 c7 be 21 d2 7c 3b f1 53 8d f1 77 c2 7d 71 xg..!.|;.S..w.}q 00f0 3c 62 2f be 1c 78 9f e2 de a1 af f8 43 c1 be 26 ..s..y6R....x 0190 bf ae e5 b2 c1 61 f8 9f 85 f8 c3 24 a1 99 62 b8 .....a.....$..b. 01a0 8f 20 c6 f1 6e 3f 12 f8 5b 23 ce b8 5f 20 e1 4c . ..n?..[#.._ .L 01b0 d6 a7 0f 41 f0 55 0c bb 85 b8 8b 8e e9 66 ...A.U.......f Data […]: 3278a7e20fc41f8ada849e1788f82ed7c652c1a5fc26d217c2de2df8c1f0b7c6be14f1341e1ff034b68de21d4be1ff008abc39e329e7d4f0afe4b4f873e2ef1be8de32f803a8eb76f07887c55f1aa1bcf84babf897c01e29f03789fc231f8175ed26d3e24cbe3ef869e0ff001647e38d33c [Length: 446] [Packet size limited during capture: HTTP truncated]