Frame 76: 1467 bytes on wire (11736 bits), 1467 bytes captured (11736 bits) on interface en1, id 0 Section number: 1 Interface id: 0 (en1) Interface name: en1 Encapsulation type: Ethernet (1) Arrival Time: Aug 7, 2012 22:50:36.019968000 UTC UTC Arrival Time: Aug 7, 2012 22:50:36.019968000 UTC Epoch Arrival Time: 1344379836.019968000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.038863000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 7.023572000 seconds] Frame Number: 76 Frame Length: 1467 bytes (11736 bits) Capture Length: 1467 bytes (11736 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:media] Ethernet II, Src: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09), Dst: Apple_ae:ed:f8 (10:40:f3:ae:ed:f8) Destination: Apple_ae:ed:f8 (10:40:f3:ae:ed:f8) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: CiscoLinksys_56:30:09 (58:6d:8f:56:30:09) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 74.125.226.200, Dst: 192.168.1.124 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x20 (DSCP: CS1, ECN: Not-ECT) 0010 00.. = Differentiated Services Codepoint: Class Selector 1 (8) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1453 Identification: 0xd2dd (53981) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 54 Protocol: TCP (6) Header Checksum: 0xbce3 [validation disabled] [Header checksum status: Unverified] Source Address: 74.125.226.200 Destination Address: 192.168.1.124 [Source GeoIP: US, ASN 15169, GOOGLE] [Source GeoIP Country: United States] [Source or Destination GeoIP Country: United States] [Source GeoIP ISO Two Letter Country Code: US] [Source or Destination GeoIP ISO Two Letter Country Code: US] [Source GeoIP AS Number: 15169] [Source or Destination GeoIP AS Number: 15169] [Source GeoIP AS Organization: GOOGLE] [Source or Destination GeoIP AS Organization: GOOGLE] [Source GeoIP Latitude: 37.751] [Source or Destination GeoIP Latitude: 37.751] [Source GeoIP Longitude: -97.822] [Source or Destination GeoIP Longitude: -97.822] [Stream index: 7] Transmission Control Protocol, Src Port: 80, Dst Port: 60401, Seq: 11000, Ack: 4102, Len: 1401 Source Port: 80 Destination Port: 60401 [Stream index: 3] [Stream Packet Number: 29] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1401] Sequence Number: 11000 (relative sequence number) Sequence Number (raw): 1469278544 [Next Sequence Number: 12401 (relative sequence number)] Acknowledgment Number: 4102 (relative ack number) Acknowledgment number (raw): 1505902798 1000 .... = Header Length: 32 bytes (8) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 378 [Calculated window size: 24192] [Window size scaling factor: 64] Checksum: 0x22cb [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps TCP Option - No-Operation (NOP) Kind: No-Operation (1) TCP Option - No-Operation (NOP) Kind: No-Operation (1) TCP Option - Timestamps: TSval 626113518, TSecr 2014708658 Kind: Time Stamp Option (8) Length: 10 Timestamp value: 626113518 Timestamp echo reply: 2014708658 [Timestamps] [Time since first frame in this TCP stream: 0.287484000 seconds] [Time since previous frame in this TCP stream: 0.038863000 seconds] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 75] [The RTT to ACK the segment was: 0.038863000 seconds] [iRTT: 0.038690000 seconds] [Bytes in flight: 1401] [Bytes sent since last PSH flag: 1401] TCP payload (1401 bytes) Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n Response Version: HTTP/1.1 Status Code: 200 [Status Code Description: OK] Response Phrase: OK Content-Type: application/vnd.google.safebrowsing-chunk\r\n X-Content-Type-Options: nosniff\r\n Date: Tue, 07 Aug 2012 22:48:25 GMT\r\n Server: Chunked Update Server\r\n Content-Length: 1093\r\n [Content length: 1093] X-XSS-Protection: 1; mode=block\r\n X-Frame-Options: SAMEORIGIN\r\n Cache-Control: public,max-age=172800\r\n Age: 85\r\n \r\n [Request in frame: 75] [Time since request: 0.038863000 seconds] [Request URI: /safebrowsing/rd/ChFnb29nLXBoaXNoLXNoYXZhchAAGJv3DSCk9w0qBZ57AwB_MgWbewMABw] [Full request URI: http://safebrowsing-cache.google.com/safebrowsing/rd/ChFnb29nLXBoaXNoLXNoYXZhchAAGJv3DSCk9w0qBZ57AwB_MgWbewMABw] File Data: 1093 bytes Media Type Media type: application/vnd.google.safebrowsing-chunk (1093 bytes)