Frame 4275: Packet, 1514 bytes on wire (12112 bits), 500 bytes captured (4000 bits) Encapsulation type: Ethernet (1) Arrival Time: Mar 20, 2012 23:33:06.629881000 UTC UTC Arrival Time: Mar 20, 2012 23:33:06.629881000 UTC Epoch Arrival Time: 1332286386.629881000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 819.000 microseconds] [Time since reference or first frame: 8.160775000 seconds] Frame Number: 4275 Frame Length: 1514 bytes (12112 bits) Capture Length: 500 bytes (4000 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09), Dst: Apple_85:4d:bc (00:23:6c:85:4d:bc) Destination: Apple_85:4d:bc (00:23:6c:85:4d:bc) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 2] Internet Protocol Version 4, Src: 69.241.108.46, Dst: 192.168.1.104 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x20 (DSCP: CS1, ECN: Not-ECT) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (8) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0xbcc9 (48329) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 57 Protocol: TCP (6) Header Checksum: 0x0b03 [validation disabled] [Header checksum status: Unverified] Source Address: 69.241.108.46 Destination Address: 192.168.1.104 [Source GeoIP: Seattle, US] [Source GeoIP City: Seattle] [Source or Destination GeoIP City: Seattle] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP Latitude: 47.5741] [Source or Destination GeoIP Latitude: 47.5741] [Source GeoIP Longitude: -122.3975] [Source or Destination GeoIP Longitude: -122.3975] [Stream index: 2] Transmission Control Protocol, Src Port: 80, Dst Port: 54933, Seq: 1649254, Ack: 6851, Len: 1460 Source Port: 80 Destination Port: 54933 [Stream index: 1] [Stream Packet Number: 1938] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1460] Sequence Number: 1649254 (relative sequence number) Sequence Number (raw): 1105660291 [Next Sequence Number: 1650714 (relative sequence number)] Acknowledgment Number: 6851 (relative ack number) Acknowledgment number (raw): 4015828518 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 153 [Calculated window size: 19584] [Window size scaling factor: 128] Checksum: 0x6579 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 5.683583000 seconds] [Time since previous frame in this TCP stream: 13.935000 milliseconds] [SEQ/ACK analysis] [iRTT: 15.727000 milliseconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 13140] [Client Contiguous Streams: 1] [Server Contiguous Streams: 1] TCP payload (1460 bytes) Hypertext Transfer Protocol File Data: 446 bytes Data (446 bytes) 0000 4d e0 2f 1f 58 e8 3f 12 3c 31 f0 d4 5a 7c 61 96 M./.X.?.<1..Z|a. 0010 c7 c7 5a 45 97 89 6f 3c 39 f0 9b c0 9a 67 c4 8f ..ZE..o<9....g.. 0020 07 f8 f7 e1 ff 00 c1 8f 83 47 54 fe ca f1 5e bb .........GT...^. 0030 a3 7d a7 c2 bf 14 7c 23 f0 aa f3 fe 10 2f 85 56 .}....|#...../.V 0040 7f 00 3c 4d 7b ac 78 eb e2 4f 80 34 ab ef 87 3f .. 0090 20 f8 5e 2e b5 1b 5f 83 70 7c 0b f1 67 8e fc 4f .^..._.p|..g..O 00a0 f0 43 c4 9e 1d d2 bc 41 f0 b7 59 b1 fa 7c 93 33 .C.....A..Y..|.3 00b0 c0 c3 88 b1 38 ac 0e 0a a6 3e be 3b 35 c6 4d d7 ....8....>.;5.M. 00c0 cc b8 73 8e ab d5 c5 e6 39 0e 07 19 c3 79 8f 06 ..s.....9....y.. 00d0 e2 33 1e 28 ca f2 0c 57 08 61 33 39 e5 39 8d 7c .3.(...W.a39.9.| 00e0 c3 3f c9 21 87 e2 bc da 86 3b 0f 9e 71 3c ff 00 .?.!.....;..q<.. 00f0 b4 f3 5c cb 3e cc 7e 52 be 67 96 70 17 0a 57 c7 ..\.>.~R.g.p..W. 0100 52 c3 64 35 bd ae 22 75 fc 3d a1 8e c3 f0 8d 3c R.d5.."u.=.....< 0110 8b 82 b0 b3 ca b0 19 0e 61 80 e2 0c cf 09 2c ad ........a.....,. 0120 e6 39 fe 3b 89 b2 fe 0b c1 65 18 0e 25 c6 e2 70 .9.;.....e..%..p 0130 fc 3e e3 8f a7 8c cb 68 e2 f0 f9 f5 0c 8b c2 7e .>.....h.......~ 0140 13 e9 30 7c 38 d2 f4 eb 2d 77 c1 5a 2f 83 3e 2b ..0|8...-w.Z/.>+ 0150 0d 47 c4 7e 3f b1 93 c3 76 be 1c bc f0 36 99 e2 .G.~?...v....6.. 0160 ef 87 fa 57 89 bc 19 e3 0f 0a f8 47 c0 7e 22 f8 ...W.......G.~". 0170 8b f0 f3 50 be d1 ee bc 1f aa 78 e6 db e2 b7 8a ...P......x..... 0180 7c 63 e0 ef 89 43 c7 da ce ab 6d e2 59 ac 75 df |c...C....m.Y.u. 0190 86 df 01 ee fe 1f d8 75 df 1e be 0f fc 2c 1e 33 .......u.....,.3 01a0 f8 9a df 10 3f 6c 73 a6 78 83 5b f0 87 8e 33 e3 ....?ls.x.[...3. 01b0 3f 8b 5a 3f c4 3f 88 9e 3d d1 3e 25 e8 d7 ?.Z?.?..=.>%.. Data […]: 4de02f1f58e83f123c31f0d45a7c6196c7c75a4597896f3c39f09bc09a67c48f07f8f7e1ff00c18f834754fecaf15ebba37da7c2bf147c23f0aaf3fe102f85567f003c4d7bac78ebe24f8034abef873ff0aafc03ee9e18f05f84f5e92fed749f1e41a0e8be14f0ceb5e218b52d3f43f06fc [Length: 446] [Packet size limited during capture: HTTP truncated]