Frame 5056: Packet, 1514 bytes on wire (12112 bits), 500 bytes captured (4000 bits) Encapsulation type: Ethernet (1) Arrival Time: Mar 20, 2012 23:33:07.597174000 UTC UTC Arrival Time: Mar 20, 2012 23:33:07.597174000 UTC Epoch Arrival Time: 1332286387.597174000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 968.000 microseconds] [Time since reference or first frame: 9.128068000 seconds] Frame Number: 5056 Frame Length: 1514 bytes (12112 bits) Capture Length: 500 bytes (4000 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09), Dst: Apple_85:4d:bc (00:23:6c:85:4d:bc) Destination: Apple_85:4d:bc (00:23:6c:85:4d:bc) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 2] Internet Protocol Version 4, Src: 69.241.108.46, Dst: 192.168.1.104 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x20 (DSCP: CS1, ECN: Not-ECT) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (8) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0xbdb1 (48561) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 57 Protocol: TCP (6) Header Checksum: 0x0a1b [validation disabled] [Header checksum status: Unverified] Source Address: 69.241.108.46 Destination Address: 192.168.1.104 [Source GeoIP: Seattle, US] [Source GeoIP City: Seattle] [Source or Destination GeoIP City: Seattle] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP Latitude: 47.5741] [Source or Destination GeoIP Latitude: 47.5741] [Source GeoIP Longitude: -122.3975] [Source or Destination GeoIP Longitude: -122.3975] [Stream index: 2] Transmission Control Protocol, Src Port: 80, Dst Port: 54933, Seq: 1983594, Ack: 6851, Len: 1460 Source Port: 80 Destination Port: 54933 [Stream index: 1] [Stream Packet Number: 2323] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1460] Sequence Number: 1983594 (relative sequence number) Sequence Number (raw): 1105994631 [Next Sequence Number: 1985054 (relative sequence number)] Acknowledgment Number: 6851 (relative ack number) Acknowledgment number (raw): 4015828518 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 153 [Calculated window size: 19584] [Window size scaling factor: 128] Checksum: 0x8b25 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 6.650876000 seconds] [Time since previous frame in this TCP stream: 968.000 microseconds] [SEQ/ACK analysis] [iRTT: 15.727000 milliseconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 58400] [Client Contiguous Streams: 1] [Server Contiguous Streams: 1] TCP payload (1460 bytes) Hypertext Transfer Protocol File Data: 446 bytes Data (446 bytes) 0000 5f 06 6d f4 c8 a1 d0 fc 4d f1 26 eb c7 b7 df 01 _.m.....M.&..... 0010 f5 8f 82 7f 18 35 af 12 78 c7 fe 16 0c be 14 f0 .....5..x....... 0020 af 84 3e 3a e9 9a 37 81 35 54 f0 4f 82 87 8a 7e ..>:..7.5T.O...~ 0030 20 c3 71 e3 8d 67 c2 dc 3f c4 ed 53 e3 bf c5 4d .q..g..?..S...M 0040 4f c3 b2 7c 15 b7 fd aa 74 cf 03 7c 3e f0 67 87 O..|....t..|>.g. 0050 fe 18 c3 a5 e9 1e 18 fd b2 e2 f1 76 97 ad 78 56 ...........v..xV 0060 3b 87 d7 f4 ef 8c 9e 10 f8 1b e1 2b cd 0f e1 f7 ;..........+.... 0070 c6 5b 2d 57 52 b9 b6 f1 bf 86 bc 51 ad eb 7e 2e .[-WR......Q..~. 0080 d5 a4 8e c3 e2 00 6f 0d f8 43 c6 fe 11 f0 2f 84 ......o..C..../. 0090 fa 4d 6b fb 3a ef c3 91 7c 4c d2 13 40 f0 e4 fe .Mk.:...|L..@... 00a0 14 f0 77 82 fc 67 f1 f7 e3 ae ad a3 6b 5f 0a fc ..w..g......k_.. 00b0 2f f1 2f c5 69 e3 41 e3 7f 0e 68 f7 de 3c f0 af /./.i.A...h..<.. 00c0 85 ee 3c 53 e1 8f 19 7c 5c f8 83 e2 8d 1b c4 9f ...4...<. 0120 47 83 e2 d1 3c 2f af d9 eb 56 fa 05 85 df 82 3c G...<..... 01a0 a6 5b c3 fc 1b 9a 70 d6 3a b5 3c a1 62 f2 7a b9 .[....p.:.<.b.z. 01b0 56 1f 2e e0 ae 1d c3 e5 55 aa 64 b2 c4 cb V.......U.d... Data […]: 5f066df4c8a1d0fc4df126ebc7b7df01f58f827f1835af1278c7fe160cbe14f0af843e3ae99a37813554f04f82878a7e20c371e38d67c2dc3fc4ed53e3bfc54d4fc3b27c15b7fdaa74cf037c3ef06787fe18c3a5e91e18fdb2e2f17697ad78563b87d7f4ef8c9e10f81be12bcd0fe1f7c65 [Length: 446] [Packet size limited during capture: HTTP truncated]