Frame 5421: Packet, 1514 bytes on wire (12112 bits), 500 bytes captured (4000 bits) Encapsulation type: Ethernet (1) Arrival Time: Mar 20, 2012 23:33:07.952389000 UTC UTC Arrival Time: Mar 20, 2012 23:33:07.952389000 UTC Epoch Arrival Time: 1332286387.952389000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 312.000 microseconds] [Time since reference or first frame: 9.483283000 seconds] Frame Number: 5421 Frame Length: 1514 bytes (12112 bits) Capture Length: 500 bytes (4000 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09), Dst: Apple_85:4d:bc (00:23:6c:85:4d:bc) Destination: Apple_85:4d:bc (00:23:6c:85:4d:bc) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 2] Internet Protocol Version 4, Src: 69.241.108.46, Dst: 192.168.1.104 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x20 (DSCP: CS1, ECN: Not-ECT) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (8) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0xbe1f (48671) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 57 Protocol: TCP (6) Header Checksum: 0x09ad [validation disabled] [Header checksum status: Unverified] Source Address: 69.241.108.46 Destination Address: 192.168.1.104 [Source GeoIP: Seattle, US] [Source GeoIP City: Seattle] [Source or Destination GeoIP City: Seattle] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP Latitude: 47.5741] [Source or Destination GeoIP Latitude: 47.5741] [Source GeoIP Longitude: -122.3975] [Source or Destination GeoIP Longitude: -122.3975] [Stream index: 2] Transmission Control Protocol, Src Port: 80, Dst Port: 54933, Seq: 2142734, Ack: 6851, Len: 1460 Source Port: 80 Destination Port: 54933 [Stream index: 1] [Stream Packet Number: 2507] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1460] Sequence Number: 2142734 (relative sequence number) Sequence Number (raw): 1106153771 [Next Sequence Number: 2144194 (relative sequence number)] Acknowledgment Number: 6851 (relative ack number) Acknowledgment number (raw): 4015828518 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 153 [Calculated window size: 19584] [Window size scaling factor: 128] Checksum: 0x56b3 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 7.006091000 seconds] [Time since previous frame in this TCP stream: 312.000 microseconds] [SEQ/ACK analysis] [iRTT: 15.727000 milliseconds] [Bytes in flight: 2920] [Bytes sent since last PSH flag: 24820] [Client Contiguous Streams: 1] [Server Contiguous Streams: 1] TCP payload (1460 bytes) Hypertext Transfer Protocol File Data: 446 bytes Data (446 bytes) 0000 76 3e 34 f2 6a dc 43 1c 45 5c af 84 38 67 85 29 v>4.j.C.E\..8g.) 0010 e6 12 cb b3 bc 07 12 61 69 ac 1e 27 0d c6 7c 53 .......ai..'..|S 0020 96 c7 28 e3 ec 3f 11 e1 72 da 99 cc e2 f2 0c 37 ..(..?..r......7 0030 12 7d 47 8b b1 5c 3b 99 e5 99 36 5f 99 f1 86 60 .}G..\;...6_...` 0040 b1 f8 dc 9b 28 e1 fc 3d 5c f3 17 95 e6 d9 8e 5f ....(..=\......_ 0050 9a 43 30 cb 28 e2 f3 bc ba 58 2c 27 12 71 16 2b .C0.(....X,'.q.+ 0060 07 9f e6 99 7e 2e 96 7d 99 71 a6 41 c4 f9 ee 5f ....~..}.q.A..._ 0070 9c 53 a1 9d 51 ad 53 c1 1f 0d 7c 7b f1 03 56 b3 .S..Q.S...|{..V. 0080 f8 31 11 d0 7c 4f a8 5c dd 78 b7 f6 a9 8b c3 d6 .1..|O.\.x...... 0090 9e 39 d4 7c 05 0e b3 71 f0 ff 00 e1 97 c1 6d 4f .9.|...q......mO 00a0 42 d5 b4 9f 14 5b 78 66 da df c3 ad e1 2f 17 78 B....[xf...../.x 00b0 4e 5d 5b 40 d4 fe 00 f8 d7 c3 b7 ad e3 1b df 1c N][@............ 00c0 eb fa 47 c3 3d 37 40 64 d0 de f6 ad a7 f8 77 c3 ..G.=7@d......w. 00d0 3e 26 f1 46 a1 e3 0d 66 0d 3f 5b d7 bc 2b e0 7f >&.F...f.?[..+.. 00e0 10 e9 7e 22 f1 8f 8c be 3a 78 4b c2 1a e8 d5 bc ..~"....:xK..... 00f0 19 e0 5d 52 fb c1 de 17 5f 01 fc 43 f0 c7 c3 ff ..]R...._..C.... 0100 00 87 3a 4e 8f 24 ba 98 f1 55 de 8f f1 16 18 7e ..:N.$...U.....~ 0110 1e 78 b3 e2 4e 8f e1 3f 86 7e 14 f8 85 79 61 1e .x..N..?.~...ya. 0120 a9 a3 45 e0 ef 0c f8 1b 4c b9 f8 59 e0 38 bc 23 ..E.....L..Y.8.# 0130 ac 5c 78 6f e1 de a3 6d 7d a7 e9 ff 00 07 fc 25 .\xo...m}......% 0140 ae 15 f8 41 a3 78 86 d3 c3 da 55 fc 56 1f 15 7c ...A.x....U.V..| 0150 61 f0 ed f4 0f 04 59 5e fc 7e d1 fe 2b f8 8b e0 a.....Y^.~..+... 0160 f5 cf c4 93 e0 ff 00 0a 78 fa 1d 23 e0 ec 9e 30 ........x..#...0 0170 f8 83 e1 eb 9f 81 fa 4f 81 75 5c 49 bc 7d f1 5f .......O.u\I.}._ 0180 c6 9a 06 bb e3 2d 4f c3 df 0a 7c 7b 65 a6 78 80 .....-O...|{e.x. 0190 ea 1e 2e f1 8f 84 3e 13 0d 07 c6 9e 21 ff 00 84 ......>.....!... 01a0 ff 00 e2 a4 fe 18 93 e0 6e 99 e3 56 f8 87 e1 6f ........n..V...o 01b0 0c 78 a7 c1 9a f4 1e 2c 6b 39 fe 35 f8 1f .x.....,k9.5.. Data […]: 763e34f26adc431c455caf8438678529e612cbb3bc07126169ac1e270dc67c5396c728e3ec3f11e172da99cce2f20c37127d478bb15c3b99e599365f99f18660b1f8dc9b28e1fc3d5cf31795e6d98e5f9a4330cb28e2f3bcba582c271271162b079fe6997e2e967d9971a641c4f9ee5f9c5 [Length: 446] [Packet size limited during capture: HTTP truncated]