Frame 5749: Packet, 1514 bytes on wire (12112 bits), 500 bytes captured (4000 bits) Encapsulation type: Ethernet (1) Arrival Time: Mar 20, 2012 23:33:08.358594000 UTC UTC Arrival Time: Mar 20, 2012 23:33:08.358594000 UTC Epoch Arrival Time: 1332286388.358594000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 763.000 microseconds] [Time since reference or first frame: 9.889488000 seconds] Frame Number: 5749 Frame Length: 1514 bytes (12112 bits) Capture Length: 500 bytes (4000 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09), Dst: Apple_85:4d:bc (00:23:6c:85:4d:bc) Destination: Apple_85:4d:bc (00:23:6c:85:4d:bc) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 2] Internet Protocol Version 4, Src: 69.241.108.46, Dst: 192.168.1.104 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x20 (DSCP: CS1, ECN: Not-ECT) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (8) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0xbe7f (48767) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 57 Protocol: TCP (6) Header Checksum: 0x094d [validation disabled] [Header checksum status: Unverified] Source Address: 69.241.108.46 Destination Address: 192.168.1.104 [Source GeoIP: Seattle, US] [Source GeoIP City: Seattle] [Source or Destination GeoIP City: Seattle] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP Latitude: 47.5741] [Source or Destination GeoIP Latitude: 47.5741] [Source GeoIP Longitude: -122.3975] [Source or Destination GeoIP Longitude: -122.3975] [Stream index: 2] Transmission Control Protocol, Src Port: 80, Dst Port: 54933, Seq: 2279974, Ack: 6851, Len: 1460 Source Port: 80 Destination Port: 54933 [Stream index: 1] [Stream Packet Number: 2665] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1460] Sequence Number: 2279974 (relative sequence number) Sequence Number (raw): 1106291011 [Next Sequence Number: 2281434 (relative sequence number)] Acknowledgment Number: 6851 (relative ack number) Acknowledgment number (raw): 4015828518 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 153 [Calculated window size: 19584] [Window size scaling factor: 128] Checksum: 0x20fc [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 7.412296000 seconds] [Time since previous frame in this TCP stream: 763.000 microseconds] [SEQ/ACK analysis] [iRTT: 15.727000 milliseconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 65700] [Client Contiguous Streams: 1] [Server Contiguous Streams: 1] TCP payload (1460 bytes) Hypertext Transfer Protocol File Data: 446 bytes Data (446 bytes) 0000 27 f8 4f e2 2b 4d 3b c2 9e 14 f1 ff 00 81 bc 55 '.O.+M;........U 0010 e3 a8 be 33 7c 72 d2 2f 2c ad 2c fe 21 68 9e 25 ...3|r./,.,.!h.% 0020 f1 67 c4 ef 8a 5f 0f 4f c3 4d 16 f2 e5 bc 14 b2 .g..._.O.M...... 0030 eb 5a 0f c5 4b 3a f2 9f 0e 7c 09 d5 0b df 7c 50 .Z..K:...|....|P 0040 f1 67 83 7e 24 5f fc 56 d1 fe 2b 7c 63 f8 4b f0 .g.~$_.V..+|c.K. 0050 ec fc 31 d5 be 16 df fc 67 f0 25 dd 9e a3 ae 78 ..1.....g.%....x 0060 fe ee e7 f6 9a d0 b4 9d 27 e1 57 c2 7d 53 c1 17 ........'.W.}S.. 0070 bf 0f 6d f5 0f 13 5c fc 42 d6 e5 d1 bc 4f f0 8b ..m...\.B....O.. 0080 47 f1 d7 c3 5f 87 fa ed ed d7 82 be 17 db df c7 G..._........... 0090 87 a8 69 37 7a 2d 8f 83 be 39 a7 8f 6f 7c 65 f0 ..i7z-...9..o|e. 00a0 b7 c6 3e 37 f1 df 81 75 4f 1e 5b fc 3b b5 f8 95 ..>7...uO.[.;... 00b0 26 b1 a4 6b 7f 04 f5 8f 09 fc 1f f8 81 e0 ed 77 &..k...........w 00c0 e2 97 c3 dd 52 e3 43 fd aa 6d 7c 41 e2 bf 19 78 ....R.C..m|A...x 00d0 a3 c5 5e 00 4f 8a 7e 2e 6f f8 49 f5 5b 2d 7b c3 ..^.O.~.o.I.[-{. 00e0 f0 4d f0 66 5f 05 6b 9a cf 67 f1 5e d7 c6 f1 6a .M.f_.k..g.^...j 00f0 bf 07 3e 34 eb b6 9e 2f d4 7e 26 4d e0 2f 05 e8 ..>4.../.~&M./.. 0100 4f a7 7c 15 9b e1 ff 00 85 7c 20 6c 3c 4d 27 8d O.|......| l