Frame 38: 1484 bytes on wire (11872 bits), 1484 bytes captured (11872 bits) on interface en1, id 0 Section number: 1 Interface id: 0 (en1) Interface name: en1 Encapsulation type: Ethernet (1) Arrival Time: Aug 7, 2012 22:50:35.359024000 UTC UTC Arrival Time: Aug 7, 2012 22:50:35.359024000 UTC Epoch Arrival Time: 1344379835.359024000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.015232000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 6.362628000 seconds] Frame Number: 38 Frame Length: 1484 bytes (11872 bits) Capture Length: 1484 bytes (11872 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:media] Ethernet II, Src: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09), Dst: Apple_ae:ed:f8 (10:40:f3:ae:ed:f8) Destination: Apple_ae:ed:f8 (10:40:f3:ae:ed:f8) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 74.125.226.228, Dst: 192.168.1.124 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x20 (DSCP: CS1, ECN: Not-ECT) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (8) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1470 Identification: 0x67c4 (26564) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 54 Protocol: TCP (6) Header Checksum: 0x27d0 [validation disabled] [Header checksum status: Unverified] Source Address: 74.125.226.228 Destination Address: 192.168.1.124 [Source GeoIP: US, ASN 15169, GOOGLE] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP AS Number: 15169] [Source or Destination GeoIP AS Number: 15169] [Source GeoIP AS Organization: GOOGLE] [Source or Destination GeoIP AS Organization: GOOGLE] [Source GeoIP Latitude: 37.751] [Source or Destination GeoIP Latitude: 37.751] [Source GeoIP Longitude: -97.822] [Source or Destination GeoIP Longitude: -97.822] [Stream index: 6] Transmission Control Protocol, Src Port: 80, Dst Port: 60400, Seq: 1, Ack: 992, Len: 1418 Source Port: 80 Destination Port: 60400 [Stream index: 2] [Stream Packet Number: 6] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1418] Sequence Number: 1 (relative sequence number) Sequence Number (raw): 3828614314 [Next Sequence Number: 1419 (relative sequence number)] Acknowledgment Number: 992 (relative ack number) Acknowledgment number (raw): 623820184 1000 .... = Header Length: 32 bytes (8) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 253 [Calculated window size: 16192] [Window size scaling factor: 64] Checksum: 0xf668 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps TCP Option - No-Operation (NOP) Kind: No-Operation (1) TCP Option - No-Operation (NOP) Kind: No-Operation (1) TCP Option - Timestamps: TSval 2824833159, TSecr 2014707985 Kind: Time Stamp Option (8) Length: 10 Timestamp value: 2824833159 Timestamp echo reply: 2014707985 [Timestamps] [Time since first frame in this TCP stream: 0.100263000 seconds] [Time since previous frame in this TCP stream: 0.015232000 seconds] [SEQ/ACK analysis] [iRTT: 0.040699000 seconds] [Bytes in flight: 1418] [Bytes sent since last PSH flag: 1418] TCP payload (1418 bytes) Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n Response Version: HTTP/1.1 Status Code: 200 [Status Code Description: OK] Response Phrase: OK Content-Type: application/vnd.google.safebrowsing-update\r\n X-Content-Type-Options: nosniff\r\n Date: Tue, 07 Aug 2012 22:49:49 GMT\r\n Server: Chunked Update Server\r\n Content-Length: 1240\r\n [Content length: 1240] X-XSS-Protection: 1; mode=block\r\n X-Frame-Options: SAMEORIGIN\r\n \r\n [Request in frame: 36] [Time since request: 0.059436000 seconds] [Request URI: /safebrowsing/downloads?client=navclient-auto-ffox&appver=5.0.1&pver=2.2&wrkey=AKEgNisQU9fjypSdwSodwQEurpxg2RAv7nhu9HfsMKl45mhxQ80n_Kb90XGUbM0D7-498dfJ4lQCwXGKQNp7Ey5XXzUKRS5sew==] [Full request URI: http://safebrowsing.clients.google.com/safebrowsing/downloads?client=navclient-auto-ffox&appver=5.0.1&pver=2.2&wrkey=AKEgNisQU9fjypSdwSodwQEurpxg2RAv7nhu9HfsMKl45mhxQ80n_Kb90XGUbM0D7-498dfJ4lQCwXGKQNp7Ey5XXzUKRS5sew==] File Data: 1156 bytes Media Type Media type: application/vnd.google.safebrowsing-update (1156 bytes)