Frame 5415: Packet, 1514 bytes on wire (12112 bits), 500 bytes captured (4000 bits) Encapsulation type: Ethernet (1) Arrival Time: Mar 20, 2012 23:33:07.946947000 UTC UTC Arrival Time: Mar 20, 2012 23:33:07.946947000 UTC Epoch Arrival Time: 1332286387.946947000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 738.000 microseconds] [Time since reference or first frame: 9.477841000 seconds] Frame Number: 5415 Frame Length: 1514 bytes (12112 bits) Capture Length: 500 bytes (4000 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09), Dst: Apple_85:4d:bc (00:23:6c:85:4d:bc) Destination: Apple_85:4d:bc (00:23:6c:85:4d:bc) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 2] Internet Protocol Version 4, Src: 69.241.108.46, Dst: 192.168.1.104 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x20 (DSCP: CS1, ECN: Not-ECT) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (8) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0xf7f6 (63478) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 57 Protocol: TCP (6) Header Checksum: 0xcfd5 [validation disabled] [Header checksum status: Unverified] Source Address: 69.241.108.46 Destination Address: 192.168.1.104 [Source GeoIP: Seattle, US] [Source GeoIP City: Seattle] [Source or Destination GeoIP City: Seattle] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP Latitude: 47.5741] [Source or Destination GeoIP Latitude: 47.5741] [Source GeoIP Longitude: -122.3975] [Source or Destination GeoIP Longitude: -122.3975] [Stream index: 2] Transmission Control Protocol, Src Port: 80, Dst Port: 54934, Seq: 2513344, Ack: 1161, Len: 1460 Source Port: 80 Destination Port: 54934 [Stream index: 2] [Stream Packet Number: 2898] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1460] Sequence Number: 2513344 (relative sequence number) Sequence Number (raw): 1105851057 [Next Sequence Number: 2514804 (relative sequence number)] Acknowledgment Number: 1161 (relative ack number) Acknowledgment number (raw): 2053486069 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 64 [Calculated window size: 8192] [Window size scaling factor: 128] Checksum: 0x49f4 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 6.369228000 seconds] [Time since previous frame in this TCP stream: 738.000 microseconds] [SEQ/ACK analysis] [iRTT: 13.003000 milliseconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 5840] [Client Contiguous Streams: 1] [Server Contiguous Streams: 1] TCP payload (1460 bytes) Hypertext Transfer Protocol File Data: 446 bytes Data (446 bytes) 0000 6f 8f df 0d ee ac 3c 5f e3 5b ff 00 88 fe 28 92 o.....<_.[....(. 0010 cb e1 e5 bf c6 0f 88 9a 07 8e be 20 6a 1e 2d f8 ........... j.-. 0020 b7 7d a0 f8 0b cb 97 c2 3f 1f 62 fd 9d 75 9d 1a .}......?.b..u.. 0030 f7 5d ba f0 2e b9 3f c4 8f 0b 69 ba fd f7 c3 0f .]....?...i..... 0040 89 9a df 88 24 f0 47 84 7c 43 e1 af 05 4a 9e 00 ....$.G.|C...J.. 0050 d0 7e 1c 58 68 56 da 8f 81 be 2a e9 f1 f8 c3 c4 .~.XhV....*..... 0060 3a 87 8c 19 b5 2f 81 df 14 fc 41 e2 3d 17 c2 de :..../....A.=... 0070 27 d0 7c 77 e1 4f 1d f8 3f c1 f6 df 12 3e 22 58 '.|w.O..?....>"X 0080 78 cb c3 bf 35 c2 94 b2 6a f5 38 8a 8d 3a 59 76 x...5...j.8..:Yv 0090 77 8a c4 63 f2 75 98 e5 b5 f8 73 0b 84 cd b3 ac w..c.u....s..... 00a0 6e 63 4a 35 f1 d2 ce b8 7b 2e c8 78 77 3d 9e 7b ncJ5....{..xw=.{ 00b0 89 c1 43 32 c0 e1 b1 4f 2c c1 e2 b8 7b 01 0e 2b ..C2...O,...{..+ 00c0 fa dd 3c 16 63 c4 13 c9 73 fe 08 fd 5e 59 0d 1f ..<.c...s...^Y.. 00d0 15 b3 4c 87 03 25 c3 b8 85 9c e7 d8 ac 04 68 61 ..L..%........ha 00e0 f1 95 f8 03 38 c2 f1 de 17 fd 47 96 23 05 97 e5 ....8.....G.#... 00f0 59 67 0d 51 c5 67 13 c4 e0 a5 fd a3 c4 7c 5a e8 Yg.Q.g.......|Z. 0100 71 26 2b 27 c3 62 33 7e 2a 9e 3b 01 0e 18 f3 ed q&+'.b3~*.;..... 0110 4b 41 b1 f1 86 9d 75 ac 69 3e 10 f0 df c3 bf 0e KA....u.i>...... 0120 eb 7f 0a 34 2f 1a 78 a3 c1 7e 17 f1 1f c3 9b 5d ...4/.x..~.....] 0130 7f 57 f0 ff 00 c3 1f 0a c5 e2 6f 8a 3f 0d bc 33 .W........o.?..3 0140 e3 af 0c f8 a7 c4 3a 65 dc 9f 1f 74 bf 16 78 8b ......:e...t..x. 0150 c6 9f 11 35 df 15 eb 9f 13 bc 71 e2 0b cd 13 c6 ...5......q..... 0160 5e 2c f8 e3 e1 5f 1c 69 3f 04 bc 19 7d ab 7a 97 ^,..._.i?...}.z. 0170 c0 ef d9 eb e2 15 c7 8b bc 45 69 ab eb 9e 08 b3 .........Ei..... 0180 d6 2e 2f 7c 4d 0f fc 23 ba ff 00 c7 4d 0b e0 e7 ../|M..#....M... 0190 d9 3e 22 5a de eb da 9f 82 63 b7 f8 73 e2 ff 00 .>"Z.....c..s... 01a0 83 5e 32 d3 7e 1b 78 07 c2 9a 37 8f 3c 69 af fc .^2.~.x...7.