Frame 4140: Packet, 1514 bytes on wire (12112 bits), 500 bytes captured (4000 bits) Encapsulation type: Ethernet (1) Arrival Time: Mar 20, 2012 23:33:06.476968000 UTC UTC Arrival Time: Mar 20, 2012 23:33:06.476968000 UTC Epoch Arrival Time: 1332286386.476968000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 596.000 microseconds] [Time since reference or first frame: 8.007862000 seconds] Frame Number: 4140 Frame Length: 1514 bytes (12112 bits) Capture Length: 500 bytes (4000 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09), Dst: Apple_85:4d:bc (00:23:6c:85:4d:bc) Destination: Apple_85:4d:bc (00:23:6c:85:4d:bc) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 2] Internet Protocol Version 4, Src: 69.241.108.46, Dst: 192.168.1.104 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x20 (DSCP: CS1, ECN: Not-ECT) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (8) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0xbca9 (48297) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 57 Protocol: TCP (6) Header Checksum: 0x0b23 [validation disabled] [Header checksum status: Unverified] Source Address: 69.241.108.46 Destination Address: 192.168.1.104 [Source GeoIP: Seattle, US] [Source GeoIP City: Seattle] [Source or Destination GeoIP City: Seattle] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP Latitude: 47.5741] [Source or Destination GeoIP Latitude: 47.5741] [Source GeoIP Longitude: -122.3975] [Source or Destination GeoIP Longitude: -122.3975] [Stream index: 2] Transmission Control Protocol, Src Port: 80, Dst Port: 54933, Seq: 1602534, Ack: 6851, Len: 1460 Source Port: 80 Destination Port: 54933 [Stream index: 1] [Stream Packet Number: 1885] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1460] Sequence Number: 1602534 (relative sequence number) Sequence Number (raw): 1105613571 [Next Sequence Number: 1603994 (relative sequence number)] Acknowledgment Number: 6851 (relative ack number) Acknowledgment number (raw): 4015828518 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 153 [Calculated window size: 19584] [Window size scaling factor: 128] Checksum: 0x20f5 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 5.530670000 seconds] [Time since previous frame in this TCP stream: 596.000 microseconds] [SEQ/ACK analysis] [iRTT: 15.727000 milliseconds] [Bytes in flight: 2920] [Bytes sent since last PSH flag: 61320] [Client Contiguous Streams: 1] [Server Contiguous Streams: 1] TCP payload (1460 bytes) Hypertext Transfer Protocol File Data: 446 bytes Data (446 bytes) 0000 33 8c 2f f6 d5 5e 1f e1 2a 18 be 17 e1 4c cf 83 3./..^..*....L.. 0010 b8 93 11 9c 70 05 5e 17 e1 cc 46 2a af a8 78 67 ....p.^...F*..xg 0020 e0 9c ff 00 0a 3c 11 a2 7f c2 dc 97 e1 8e a3 a1 .....<.......... 0030 ea de 17 f8 d1 e2 6b af 84 9a 25 bf c3 0f 1a e8 ......k...%..... 0040 fe 0c 93 c3 d6 7a ff 00 8a fe 0a 7f 6e 5f f8 aa .....z......n_.. 0050 df c2 36 1f 10 b4 bf 86 5a 77 c2 ad 57 c2 3f 16 ..6.....Zw..W.?. 0060 13 51 d0 ed 45 b6 b3 f0 ee e7 e2 1c bf 17 35 a9 .Q..E.........5. 0070 f4 3f 15 eb d0 79 14 1a 8f 86 7f 67 e8 fc 30 cd .?...y.....g..0. 0080 2f 83 63 d2 fe 20 f8 73 5e fd a0 34 5f 08 f8 ef /.c.. .s^..4_... 0090 c4 56 ff 00 16 3c 35 e0 fb 6d 13 5c f1 bf 89 7e .V...<5..m.\...~ 00a0 19 fc 6b d5 74 ed 73 e2 27 81 e7 f8 f3 e0 2f 11 ..k.t.s.'...../. 00b0 5d 69 5f 11 7c 68 25 f1 3f 89 b5 bf 0e ff 00 c2 ]i_.|h%.?....... 00c0 6b f1 cf 57 f8 a1 e1 bd 67 f6 b7 d0 ad fc 65 e3 k..W....g.....e. 00d0 38 3d 2f c3 16 7e 1c d3 fc 23 e3 9f 0c 37 c4 9d 8=/..~...#...7.. 00e0 2b 55 d2 35 9f 19 f8 82 e3 c2 5e 0f d2 fc 33 f0 +U.5......^...3. 00f0 f3 e1 f6 93 e1 2b bf 85 d6 5f 11 7e 1b cd e0 fd .....+..._.~.... 0100 5b 4c f1 5f 85 6f bc 3b e1 78 35 9f 12 df 8d 5f [L._.o.;.x5...._ 0110 42 f8 33 e1 8f 85 ba 1c 1a 26 8f ab 7c 29 f0 67 B.3......&..|).g 0120 89 0d f6 8d f0 b2 d3 e3 75 b7 19 f0 eb 59 f8 9f ........u....Y.. 0130 e1 f4 d4 fc 6b e0 4b eb c8 b5 3f 16 f8 a3 c1 7a ....k.K...?....z 0140 7e b1 f0 fb e3 a7 80 e0 ff 00 85 6b a0 fc 39 f1 ~..........k..9. 0150 e7 c5 28 67 f0 1c f0 c7 aa f8 16 d3 e2 67 8c be ..(g.........g.. 0160 36 6a bf 19 b4 a1 7d 69 ae dd d8 6a 7f 0a 3e 14 6j....}i...j..>. 0170 de eb 7f 13 3e 17 93 79 71 e1 a8 f4 2f 14 f9 f8 ....>..yq.../... 0180 8c bf 17 97 e2 6a 66 13 a7 9c e3 27 9c 60 31 d9 .....jf....'.`1. 0190 3d 48 65 38 5e 1c c1 d3 c4 71 2f 02 66 f9 3f 10 =He8^....q/.f.?. 01a0 e1 32 3c ae 9d 7c 77 14 62 f2 5c 8b 09 9f e1 38 .2<..|w.b.\....8 01b0 72 85 2e 39 ce 70 df ea de 3f 87 f8 4f 83 r..9.p...?..O. Data […]: 338c2ff6d55e1fe12a18be17e14ccf83b893119c70055e17e1cc462aafa87867e09cff000a3c11a27fc2dc97e18ea3a1eade17f8d1e26baf849a25bfc30f1ae8fe0c93c3d67aff008afe0a7f6e5ff8aadfc2361f10b4bf865a77c2ad57c23f161351d0ed45b6b3f0eee7e21cbf1735a9f43 [Length: 446] [Packet size limited during capture: HTTP truncated]