No.     Time                       Source                Destination           Protocol Info
   3746 2008-10-21 11:21:00.731140 129.70.186.31         192.168.100.130       TCP      41857 > http [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=13876110 TSER=0 WS=7

Frame 3746 (76 bytes on wire, 76 bytes captured)
    Arrival Time: Oct 21, 2008 11:21:00.731140000
    [Time delta from previous captured frame: 300.056113000 seconds]
    [Time delta from previous displayed frame: 300.056113000 seconds]
    [Time since reference or first frame: 47100.111704000 seconds]
    Frame Number: 3746
    Frame Length: 76 bytes
    Capture Length: 76 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Sent by us (4)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 129.70.186.31 (129.70.186.31), Dst: 192.168.100.130 (192.168.100.130)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x798f (31119)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 53
    Protocol: TCP (0x06)
    Header checksum: 0x6b9c [correct]
        [Good: True]
        [Bad : False]
    Source: 129.70.186.31 (129.70.186.31)
    Destination: 192.168.100.130 (192.168.100.130)
Transmission Control Protocol, Src Port: 41857 (41857), Dst Port: http (80), Seq: 0, Len: 0
    Source port: 41857 (41857)
    Destination port: http (80)
    Sequence number: 0    (relative sequence number)
    Header length: 40 bytes
    Flags: 0x02 (SYN)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...0 .... = Acknowledgment: Not set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
        .... ...0 = Fin: Not set
    Window size: 5840
    Checksum: 0x3ea8 [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        SACK permitted
        Timestamps: TSval 13876110, TSecr 0
        NOP
        Window scale: 7 (multiply by 128)

No.     Time                       Source                Destination           Protocol Info
   3747 2008-10-21 11:21:00.731211 192.168.100.130       129.70.186.31         TCP      http > 41857 [SYN, ACK] Seq=0 Ack=1 Win=5792 Len=0 MSS=1460 TSV=75973452 TSER=13876110 WS=6

Frame 3747 (76 bytes on wire, 76 bytes captured)
    Arrival Time: Oct 21, 2008 11:21:00.731211000
    [Time delta from previous captured frame: 0.000071000 seconds]
    [Time delta from previous displayed frame: 0.000071000 seconds]
    [Time since reference or first frame: 47100.111775000 seconds]
    Frame Number: 3747
    Frame Length: 76 bytes
    Capture Length: 76 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xda2b [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41857 (41857), Seq: 0, Ack: 1, Len: 0
    Source port: http (80)
    Destination port: 41857 (41857)
    Sequence number: 0    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 40 bytes
    Flags: 0x12 (SYN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
        .... ...0 = Fin: Not set
    Window size: 5792
    Checksum: 0xe0ef [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        SACK permitted
        Timestamps: TSval 75973452, TSecr 13876110
        NOP
        Window scale: 6 (multiply by 64)
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 3746]
        [The RTT to ACK the segment was: 0.000071000 seconds]

No.     Time                       Source                Destination           Protocol Info
   3748 2008-10-21 11:21:03.729574 129.70.186.31         192.168.100.130       TCP      41857 > http [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=13876860 TSER=0 WS=7

Frame 3748 (76 bytes on wire, 76 bytes captured)
    Arrival Time: Oct 21, 2008 11:21:03.729574000
    [Time delta from previous captured frame: 2.998363000 seconds]
    [Time delta from previous displayed frame: 2.998363000 seconds]
    [Time since reference or first frame: 47103.110138000 seconds]
    Frame Number: 3748
    Frame Length: 76 bytes
    Capture Length: 76 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Sent by us (4)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 129.70.186.31 (129.70.186.31), Dst: 192.168.100.130 (192.168.100.130)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x7990 (31120)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 53
    Protocol: TCP (0x06)
    Header checksum: 0x6b9b [correct]
        [Good: True]
        [Bad : False]
    Source: 129.70.186.31 (129.70.186.31)
    Destination: 192.168.100.130 (192.168.100.130)
Transmission Control Protocol, Src Port: 41857 (41857), Dst Port: http (80), Seq: 0, Len: 0
    Source port: 41857 (41857)
    Destination port: http (80)
    Sequence number: 0    (relative sequence number)
    Header length: 40 bytes
    Flags: 0x02 (SYN)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...0 .... = Acknowledgment: Not set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
        .... ...0 = Fin: Not set
    Window size: 5840
    Checksum: 0x3bba [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        SACK permitted
        Timestamps: TSval 13876860, TSecr 0
        NOP
        Window scale: 7 (multiply by 128)

No.     Time                       Source                Destination           Protocol Info
   3749 2008-10-21 11:21:03.729599 192.168.100.130       129.70.186.31         TCP      http > 41857 [SYN, ACK] Seq=0 Ack=1 Win=5792 Len=0 MSS=1460 TSV=75976451 TSER=13876110 WS=6

Frame 3749 (76 bytes on wire, 76 bytes captured)
    Arrival Time: Oct 21, 2008 11:21:03.729599000
    [Time delta from previous captured frame: 0.000025000 seconds]
    [Time delta from previous displayed frame: 0.000025000 seconds]
    [Time since reference or first frame: 47103.110163000 seconds]
    Frame Number: 3749
    Frame Length: 76 bytes
    Capture Length: 76 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xda2b [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41857 (41857), Seq: 0, Ack: 1, Len: 0
    Source port: http (80)
    Destination port: 41857 (41857)
    Sequence number: 0    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 40 bytes
    Flags: 0x12 (SYN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
        .... ...0 = Fin: Not set
    Window size: 5792
    Checksum: 0xd538 [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        SACK permitted
        Timestamps: TSval 75976451, TSecr 13876110
        NOP
        Window scale: 6 (multiply by 64)
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 3748]
        [The RTT to ACK the segment was: 0.000025000 seconds]

No.     Time                       Source                Destination           Protocol Info
   3750 2008-10-21 11:21:09.729834 129.70.186.31         192.168.100.130       TCP      [TCP Port numbers reused] 41857 > http [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=13878360 TSER=0 WS=7

Frame 3750 (76 bytes on wire, 76 bytes captured)
    Arrival Time: Oct 21, 2008 11:21:09.729834000
    [Time delta from previous captured frame: 6.000235000 seconds]
    [Time delta from previous displayed frame: 6.000235000 seconds]
    [Time since reference or first frame: 47109.110398000 seconds]
    Frame Number: 3750
    Frame Length: 76 bytes
    Capture Length: 76 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp]
    [Coloring Rule Name: Bad TCP]
    [Coloring Rule String: tcp.analysis.flags]
Linux cooked capture
    Packet type: Sent by us (4)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 129.70.186.31 (129.70.186.31), Dst: 192.168.100.130 (192.168.100.130)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x7991 (31121)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 53
    Protocol: TCP (0x06)
    Header checksum: 0x6b9a [correct]
        [Good: True]
        [Bad : False]
    Source: 129.70.186.31 (129.70.186.31)
    Destination: 192.168.100.130 (192.168.100.130)
Transmission Control Protocol, Src Port: 41857 (41857), Dst Port: http (80), Seq: 0, Len: 0
    Source port: 41857 (41857)
    Destination port: http (80)
    Sequence number: 0    (relative sequence number)
    Header length: 40 bytes
    Flags: 0x02 (SYN)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...0 .... = Acknowledgment: Not set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
        .... ...0 = Fin: Not set
    Window size: 5840
    Checksum: 0x3f73 [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        SACK permitted
        Timestamps: TSval 13878360, TSecr 0
        NOP
        Window scale: 7 (multiply by 128)
    [SEQ/ACK analysis]
        [TCP Analysis Flags]
            [A new tcp session is started with the same ports as an earlier session in this trace]

No.     Time                       Source                Destination           Protocol Info
   3751 2008-10-21 11:21:09.729860 192.168.100.130       129.70.186.31         TCP      http > 41857 [SYN, ACK] Seq=0 Ack=1 Win=5792 Len=0 MSS=1460 TSV=75982452 TSER=13878360 WS=6

Frame 3751 (76 bytes on wire, 76 bytes captured)
    Arrival Time: Oct 21, 2008 11:21:09.729860000
    [Time delta from previous captured frame: 0.000026000 seconds]
    [Time delta from previous displayed frame: 0.000026000 seconds]
    [Time since reference or first frame: 47109.110424000 seconds]
    Frame Number: 3751
    Frame Length: 76 bytes
    Capture Length: 76 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xda2b [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41857 (41857), Seq: 0, Ack: 1, Len: 0
    Source port: http (80)
    Destination port: 41857 (41857)
    Sequence number: 0    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 40 bytes
    Flags: 0x12 (SYN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
        .... ...0 = Fin: Not set
    Window size: 5792
    Checksum: 0x6f01 [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        SACK permitted
        Timestamps: TSval 75982452, TSecr 13878360
        NOP
        Window scale: 6 (multiply by 64)
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 3750]
        [The RTT to ACK the segment was: 0.000026000 seconds]

No.     Time                       Source                Destination           Protocol Info
   3752 2008-10-21 11:21:12.928763 192.168.100.130       129.70.186.31         TCP      http > 41857 [SYN, ACK] Seq=0 Ack=1 Win=5792 Len=0 MSS=1460 TSV=75985652 TSER=13878360 WS=6

Frame 3752 (76 bytes on wire, 76 bytes captured)
    Arrival Time: Oct 21, 2008 11:21:12.928763000
    [Time delta from previous captured frame: 3.198903000 seconds]
    [Time delta from previous displayed frame: 3.198903000 seconds]
    [Time since reference or first frame: 47112.309327000 seconds]
    Frame Number: 3752
    Frame Length: 76 bytes
    Capture Length: 76 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xda2b [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41857 (41857), Seq: 0, Ack: 1, Len: 0
    Source port: http (80)
    Destination port: 41857 (41857)
    Sequence number: 0    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 40 bytes
    Flags: 0x12 (SYN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
        .... ...0 = Fin: Not set
    Window size: 5792
    Checksum: 0x6281 [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        SACK permitted
        Timestamps: TSval 75985652, TSecr 13878360
        NOP
        Window scale: 6 (multiply by 64)

No.     Time                       Source                Destination           Protocol Info
   3753 2008-10-21 11:21:18.927424 192.168.100.130       129.70.186.31         TCP      http > 41857 [SYN, ACK] Seq=0 Ack=1 Win=5792 Len=0 MSS=1460 TSV=75991652 TSER=13878360 WS=6

Frame 3753 (76 bytes on wire, 76 bytes captured)
    Arrival Time: Oct 21, 2008 11:21:18.927424000
    [Time delta from previous captured frame: 5.998661000 seconds]
    [Time delta from previous displayed frame: 5.998661000 seconds]
    [Time since reference or first frame: 47118.307988000 seconds]
    Frame Number: 3753
    Frame Length: 76 bytes
    Capture Length: 76 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xda2b [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41857 (41857), Seq: 0, Ack: 1, Len: 0
    Source port: http (80)
    Destination port: 41857 (41857)
    Sequence number: 0    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 40 bytes
    Flags: 0x12 (SYN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
        .... ...0 = Fin: Not set
    Window size: 5792
    Checksum: 0x4b11 [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        SACK permitted
        Timestamps: TSval 75991652, TSecr 13878360
        NOP
        Window scale: 6 (multiply by 64)

No.     Time                       Source                Destination           Protocol Info
   3754 2008-10-21 11:21:21.729714 129.70.186.31         192.168.100.130       TCP      [TCP Port numbers reused] 41857 > http [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=13881360 TSER=0 WS=7

Frame 3754 (76 bytes on wire, 76 bytes captured)
    Arrival Time: Oct 21, 2008 11:21:21.729714000
    [Time delta from previous captured frame: 2.802290000 seconds]
    [Time delta from previous displayed frame: 2.802290000 seconds]
    [Time since reference or first frame: 47121.110278000 seconds]
    Frame Number: 3754
    Frame Length: 76 bytes
    Capture Length: 76 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp]
    [Coloring Rule Name: Bad TCP]
    [Coloring Rule String: tcp.analysis.flags]
Linux cooked capture
    Packet type: Sent by us (4)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 129.70.186.31 (129.70.186.31), Dst: 192.168.100.130 (192.168.100.130)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x7992 (31122)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 53
    Protocol: TCP (0x06)
    Header checksum: 0x6b99 [correct]
        [Good: True]
        [Bad : False]
    Source: 129.70.186.31 (129.70.186.31)
    Destination: 192.168.100.130 (192.168.100.130)
Transmission Control Protocol, Src Port: 41857 (41857), Dst Port: http (80), Seq: 0, Len: 0
    Source port: 41857 (41857)
    Destination port: http (80)
    Sequence number: 0    (relative sequence number)
    Header length: 40 bytes
    Flags: 0x02 (SYN)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...0 .... = Acknowledgment: Not set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
        .... ...0 = Fin: Not set
    Window size: 5840
    Checksum: 0x1803 [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        SACK permitted
        Timestamps: TSval 13881360, TSecr 0
        NOP
        Window scale: 7 (multiply by 128)
    [SEQ/ACK analysis]
        [TCP Analysis Flags]
            [A new tcp session is started with the same ports as an earlier session in this trace]

No.     Time                       Source                Destination           Protocol Info
   3755 2008-10-21 11:21:21.729738 192.168.100.130       129.70.186.31         TCP      [TCP ACKed lost segment] http > 41857 [ACK] Seq=1 Ack=274519020 Win=370688 Len=0 TSV=75994455 TSER=13878360

Frame 3755 (68 bytes on wire, 68 bytes captured)
    Arrival Time: Oct 21, 2008 11:21:21.729738000
    [Time delta from previous captured frame: 0.000024000 seconds]
    [Time delta from previous displayed frame: 0.000024000 seconds]
    [Time since reference or first frame: 47121.110302000 seconds]
    Frame Number: 3755
    Frame Length: 68 bytes
    Capture Length: 68 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp]
    [Coloring Rule Name: Bad TCP]
    [Coloring Rule String: tcp.analysis.flags]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xda33 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41857 (41857), Seq: 1, Ack: 274519020, Len: 0
    Source port: http (80)
    Destination port: 41857 (41857)
    Sequence number: 1    (relative sequence number)
    Acknowledgement number: 274519020    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 370688 (scaled)
    Checksum: 0x6ee9 [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 75994455, TSecr 13878360
    [SEQ/ACK analysis]
        [TCP Analysis Flags]
            [This frame ACKs a segment we have not seen (lost?)]

No.     Time                       Source                Destination           Protocol Info
   3756 2008-10-21 11:21:30.925750 192.168.100.130       129.70.186.31         TCP      http > 41857 [SYN, ACK] Seq=0 Ack=274519020 Win=5792 Len=0 MSS=1460 TSV=76003652 TSER=13878360 WS=6

Frame 3756 (76 bytes on wire, 76 bytes captured)
    Arrival Time: Oct 21, 2008 11:21:30.925750000
    [Time delta from previous captured frame: 9.196012000 seconds]
    [Time delta from previous displayed frame: 9.196012000 seconds]
    [Time since reference or first frame: 47130.306314000 seconds]
    Frame Number: 3756
    Frame Length: 76 bytes
    Capture Length: 76 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xda2b [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41857 (41857), Seq: 0, Ack: 274519020, Len: 0
    Source port: http (80)
    Destination port: 41857 (41857)
    Sequence number: 0    (relative sequence number)
    Acknowledgement number: 274519020    (relative ack number)
    Header length: 40 bytes
    Flags: 0x12 (SYN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
        .... ...0 = Fin: Not set
    Window size: 5792
    Checksum: 0x1c31 [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        SACK permitted
        Timestamps: TSval 76003652, TSecr 13878360
        NOP
        Window scale: 6 (multiply by 64)

No.     Time                       Source                Destination           Protocol Info
   3757 2008-10-21 11:21:45.729697 129.70.186.31         192.168.100.130       TCP      [TCP Port numbers reused] 41857 > http [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=13887360 TSER=0 WS=7

Frame 3757 (76 bytes on wire, 76 bytes captured)
    Arrival Time: Oct 21, 2008 11:21:45.729697000
    [Time delta from previous captured frame: 14.803947000 seconds]
    [Time delta from previous displayed frame: 14.803947000 seconds]
    [Time since reference or first frame: 47145.110261000 seconds]
    Frame Number: 3757
    Frame Length: 76 bytes
    Capture Length: 76 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp]
    [Coloring Rule Name: Bad TCP]
    [Coloring Rule String: tcp.analysis.flags]
Linux cooked capture
    Packet type: Sent by us (4)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 129.70.186.31 (129.70.186.31), Dst: 192.168.100.130 (192.168.100.130)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x7993 (31123)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 53
    Protocol: TCP (0x06)
    Header checksum: 0x6b98 [correct]
        [Good: True]
        [Bad : False]
    Source: 129.70.186.31 (129.70.186.31)
    Destination: 192.168.100.130 (192.168.100.130)
Transmission Control Protocol, Src Port: 41857 (41857), Dst Port: http (80), Seq: 0, Len: 0
    Source port: 41857 (41857)
    Destination port: http (80)
    Sequence number: 0    (relative sequence number)
    Header length: 40 bytes
    Flags: 0x02 (SYN)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...0 .... = Acknowledgment: Not set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
        .... ...0 = Fin: Not set
    Window size: 5840
    Checksum: 0x3967 [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        SACK permitted
        Timestamps: TSval 13887360, TSecr 0
        NOP
        Window scale: 7 (multiply by 128)
    [SEQ/ACK analysis]
        [TCP Analysis Flags]
            [A new tcp session is started with the same ports as an earlier session in this trace]

No.     Time                       Source                Destination           Protocol Info
   3758 2008-10-21 11:21:45.729720 192.168.100.130       129.70.186.31         TCP      http > 41857 [ACK] Seq=1 Ack=2549974304 Win=370688 Len=0 TSV=76018459 TSER=13878360

Frame 3758 (68 bytes on wire, 68 bytes captured)
    Arrival Time: Oct 21, 2008 11:21:45.729720000
    [Time delta from previous captured frame: 0.000023000 seconds]
    [Time delta from previous displayed frame: 0.000023000 seconds]
    [Time since reference or first frame: 47145.110284000 seconds]
    Frame Number: 3758
    Frame Length: 68 bytes
    Capture Length: 68 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xda33 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41857 (41857), Seq: 1, Ack: 2549974304, Len: 0
    Source port: http (80)
    Destination port: 41857 (41857)
    Sequence number: 1    (relative sequence number)
    Acknowledgement number: 2549974304    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 370688 (scaled)
    Checksum: 0x1125 [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76018459, TSecr 13878360

No.     Time                       Source                Destination           Protocol Info
   3759 2008-10-21 11:21:55.126308 192.168.100.130       129.70.186.31         TCP      http > 41857 [SYN, ACK] Seq=0 Ack=2549974304 Win=5792 Len=0 MSS=1460 TSV=76027857 TSER=13878360 WS=6

Frame 3759 (76 bytes on wire, 76 bytes captured)
    Arrival Time: Oct 21, 2008 11:21:55.126308000
    [Time delta from previous captured frame: 9.396588000 seconds]
    [Time delta from previous displayed frame: 9.396588000 seconds]
    [Time since reference or first frame: 47154.506872000 seconds]
    Frame Number: 3759
    Frame Length: 76 bytes
    Capture Length: 76 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xda2b [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41857 (41857), Seq: 0, Ack: 2549974304, Len: 0
    Source port: http (80)
    Destination port: 41857 (41857)
    Sequence number: 0    (relative sequence number)
    Acknowledgement number: 2549974304    (relative ack number)
    Header length: 40 bytes
    Flags: 0x12 (SYN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
        .... ...0 = Fin: Not set
    Window size: 5792
    Checksum: 0xbda3 [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        SACK permitted
        Timestamps: TSval 76027857, TSecr 13878360
        NOP
        Window scale: 6 (multiply by 64)

No.     Time                       Source                Destination           Protocol Info
   3760 2008-10-21 11:22:33.730070 129.70.186.31         192.168.100.130       TCP      [TCP Port numbers reused] 41857 > http [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=13899360 TSER=0 WS=7

Frame 3760 (76 bytes on wire, 76 bytes captured)
    Arrival Time: Oct 21, 2008 11:22:33.730070000
    [Time delta from previous captured frame: 38.603762000 seconds]
    [Time delta from previous displayed frame: 38.603762000 seconds]
    [Time since reference or first frame: 47193.110634000 seconds]
    Frame Number: 3760
    Frame Length: 76 bytes
    Capture Length: 76 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp]
    [Coloring Rule Name: Bad TCP]
    [Coloring Rule String: tcp.analysis.flags]
Linux cooked capture
    Packet type: Sent by us (4)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 129.70.186.31 (129.70.186.31), Dst: 192.168.100.130 (192.168.100.130)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x7994 (31124)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 53
    Protocol: TCP (0x06)
    Header checksum: 0x6b97 [correct]
        [Good: True]
        [Bad : False]
    Source: 129.70.186.31 (129.70.186.31)
    Destination: 192.168.100.130 (192.168.100.130)
Transmission Control Protocol, Src Port: 41857 (41857), Dst Port: http (80), Seq: 0, Len: 0
    Source port: 41857 (41857)
    Destination port: http (80)
    Sequence number: 0    (relative sequence number)
    Header length: 40 bytes
    Flags: 0x02 (SYN)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...0 .... = Acknowledgment: Not set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
        .... ...0 = Fin: Not set
    Window size: 5840
    Checksum: 0x8bf1 [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        SACK permitted
        Timestamps: TSval 13899360, TSecr 0
        NOP
        Window scale: 7 (multiply by 128)
    [SEQ/ACK analysis]
        [TCP Analysis Flags]
            [A new tcp session is started with the same ports as an earlier session in this trace]

No.     Time                       Source                Destination           Protocol Info
   3761 2008-10-21 11:22:33.730092 192.168.100.130       129.70.186.31         TCP      http > 41857 [ACK] Seq=1 Ack=2583626889 Win=370688 Len=0 TSV=76066468 TSER=13878360

Frame 3761 (68 bytes on wire, 68 bytes captured)
    Arrival Time: Oct 21, 2008 11:22:33.730092000
    [Time delta from previous captured frame: 0.000022000 seconds]
    [Time delta from previous displayed frame: 0.000022000 seconds]
    [Time since reference or first frame: 47193.110656000 seconds]
    Frame Number: 3761
    Frame Length: 68 bytes
    Capture Length: 68 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xda33 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41857 (41857), Seq: 1, Ack: 2583626889, Len: 0
    Source port: http (80)
    Destination port: 41857 (41857)
    Sequence number: 1    (relative sequence number)
    Acknowledgement number: 2583626889    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 370688 (scaled)
    Checksum: 0x559b [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76066468, TSecr 13878360

No.     Time                       Source                Destination           Protocol Info
   3762 2008-10-21 11:22:43.118608 192.168.100.130       129.70.186.31         TCP      http > 41857 [SYN, ACK] Seq=0 Ack=2583626889 Win=5792 Len=0 MSS=1460 TSV=76075858 TSER=13878360 WS=6

Frame 3762 (76 bytes on wire, 76 bytes captured)
    Arrival Time: Oct 21, 2008 11:22:43.118608000
    [Time delta from previous captured frame: 9.388516000 seconds]
    [Time delta from previous displayed frame: 9.388516000 seconds]
    [Time since reference or first frame: 47202.499172000 seconds]
    Frame Number: 3762
    Frame Length: 76 bytes
    Capture Length: 76 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xda2b [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41857 (41857), Seq: 0, Ack: 2583626889, Len: 0
    Source port: http (80)
    Destination port: 41857 (41857)
    Sequence number: 0    (relative sequence number)
    Acknowledgement number: 2583626889    (relative ack number)
    Header length: 40 bytes
    Flags: 0x12 (SYN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
        .... ...0 = Fin: Not set
    Window size: 5792
    Checksum: 0x0222 [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        SACK permitted
        Timestamps: TSval 76075858, TSecr 13878360
        NOP
        Window scale: 6 (multiply by 64)

No.     Time                       Source                Destination           Protocol Info
   3763 2008-10-21 11:24:10.730493 129.70.186.31         192.168.100.130       TCP      41861 > http [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=13923610 TSER=0 WS=7

Frame 3763 (76 bytes on wire, 76 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:10.730493000
    [Time delta from previous captured frame: 87.611885000 seconds]
    [Time delta from previous displayed frame: 87.611885000 seconds]
    [Time since reference or first frame: 47290.111057000 seconds]
    Frame Number: 3763
    Frame Length: 76 bytes
    Capture Length: 76 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Sent by us (4)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 129.70.186.31 (129.70.186.31), Dst: 192.168.100.130 (192.168.100.130)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x2b8d (11149)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 53
    Protocol: TCP (0x06)
    Header checksum: 0xb99e [correct]
        [Good: True]
        [Bad : False]
    Source: 129.70.186.31 (129.70.186.31)
    Destination: 192.168.100.130 (192.168.100.130)
Transmission Control Protocol, Src Port: 41861 (41861), Dst Port: http (80), Seq: 0, Len: 0
    Source port: 41861 (41861)
    Destination port: http (80)
    Sequence number: 0    (relative sequence number)
    Header length: 40 bytes
    Flags: 0x02 (SYN)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...0 .... = Acknowledgment: Not set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
        .... ...0 = Fin: Not set
    Window size: 5840
    Checksum: 0x94c6 [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        SACK permitted
        Timestamps: TSval 13923610, TSecr 0
        NOP
        Window scale: 7 (multiply by 128)

No.     Time                       Source                Destination           Protocol Info
   3764 2008-10-21 11:24:10.730519 192.168.100.130       129.70.186.31         TCP      http > 41861 [SYN, ACK] Seq=0 Ack=1 Win=5792 Len=0 MSS=1460 TSV=76163487 TSER=13923610 WS=6

Frame 3764 (76 bytes on wire, 76 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:10.730519000
    [Time delta from previous captured frame: 0.000026000 seconds]
    [Time delta from previous displayed frame: 0.000026000 seconds]
    [Time since reference or first frame: 47290.111083000 seconds]
    Frame Number: 3764
    Frame Length: 76 bytes
    Capture Length: 76 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xda2b [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 0, Ack: 1, Len: 0
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 0    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 40 bytes
    Flags: 0x12 (SYN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
        .... ...0 = Fin: Not set
    Window size: 5792
    Checksum: 0xcb74 [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        SACK permitted
        Timestamps: TSval 76163487, TSecr 13923610
        NOP
        Window scale: 6 (multiply by 64)
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 3763]
        [The RTT to ACK the segment was: 0.000026000 seconds]

No.     Time                       Source                Destination           Protocol Info
   3765 2008-10-21 11:24:10.753850 129.70.186.31         192.168.100.130       TCP      41861 > http [ACK] Seq=1 Ack=1 Win=5888 Len=0 TSV=13923616 TSER=76163487

Frame 3765 (68 bytes on wire, 68 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:10.753850000
    [Time delta from previous captured frame: 0.023331000 seconds]
    [Time delta from previous displayed frame: 0.023331000 seconds]
    [Time since reference or first frame: 47290.134414000 seconds]
    Frame Number: 3765
    Frame Length: 68 bytes
    Capture Length: 68 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Sent by us (4)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 129.70.186.31 (129.70.186.31), Dst: 192.168.100.130 (192.168.100.130)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x2b8e (11150)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 53
    Protocol: TCP (0x06)
    Header checksum: 0xb9a5 [correct]
        [Good: True]
        [Bad : False]
    Source: 129.70.186.31 (129.70.186.31)
    Destination: 192.168.100.130 (192.168.100.130)
Transmission Control Protocol, Src Port: 41861 (41861), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
    Source port: 41861 (41861)
    Destination port: http (80)
    Sequence number: 1    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5888 (scaled)
    Checksum: 0x10ac [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 13923616, TSecr 76163487
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 3764]
        [The RTT to ACK the segment was: 0.023331000 seconds]

No.     Time                       Source                Destination           Protocol Info
   3766 2008-10-21 11:24:10.754209 129.70.186.31         192.168.100.130       HTTP     GET /test.txt HTTP/1.0 [Packet size limited during capture]

Frame 3766 (190 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:10.754209000
    [Time delta from previous captured frame: 0.000359000 seconds]
    [Time delta from previous displayed frame: 0.000359000 seconds]
    [Time since reference or first frame: 47290.134773000 seconds]
    Frame Number: 3766
    Frame Length: 190 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Sent by us (4)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 129.70.186.31 (129.70.186.31), Dst: 192.168.100.130 (192.168.100.130)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 174
    Identification: 0x2b8f (11151)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 53
    Protocol: TCP (0x06)
    Header checksum: 0xb92a [correct]
        [Good: True]
        [Bad : False]
    Source: 129.70.186.31 (129.70.186.31)
    Destination: 192.168.100.130 (192.168.100.130)
Transmission Control Protocol, Src Port: 41861 (41861), Dst Port: http (80), Seq: 1, Ack: 1, Len: 122
    Source port: 41861 (41861)
    Destination port: http (80)
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 123    (relative sequence number)]
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5888 (scaled)
    Checksum: 0x3388 [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 13923616, TSecr 76163487
Hypertext Transfer Protocol
    GET /test.txt HTTP/1.0\r\n
        Request Method: GET
        Request URI: /test.txt
        Request Version: HTTP/1.0
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3767 2008-10-21 11:24:10.754246 192.168.100.130       129.70.186.31         TCP      http > 41861 [ACK] Seq=1 Ack=123 Win=5824 Len=0 TSV=76163510 TSER=13923616

Frame 3767 (68 bytes on wire, 68 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:10.754246000
    [Time delta from previous captured frame: 0.000037000 seconds]
    [Time delta from previous displayed frame: 0.000037000 seconds]
    [Time since reference or first frame: 47290.134810000 seconds]
    Frame Number: 3767
    Frame Length: 68 bytes
    Capture Length: 68 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xb7d7 (47063)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x225c [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 1, Ack: 123, Len: 0
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 1    (relative sequence number)
    Acknowledgement number: 123    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5824 (scaled)
    Checksum: 0x0fee [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76163510, TSecr 13923616
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 3766]
        [The RTT to ACK the segment was: 0.000037000 seconds]

No.     Time                       Source                Destination           Protocol Info
   3768 2008-10-21 11:24:10.754453 192.168.100.130       129.70.186.31         HTTP     HTTP/1.1 200 OK [Packet size limited during capture]

Frame 3768 (307 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:10.754453000
    [Time delta from previous captured frame: 0.000207000 seconds]
    [Time delta from previous displayed frame: 0.000207000 seconds]
    [Time since reference or first frame: 47290.135017000 seconds]
    Frame Number: 3768
    Frame Length: 307 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 291
    Identification: 0xb7d8 (47064)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x216c [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 1, Ack: 123, Len: 239
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 240    (relative sequence number)]
    Acknowledgement number: 123    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5824 (scaled)
    Checksum: 0x30e1 [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76163511, TSecr 13923616
Hypertext Transfer Protocol
    HTTP/1.1 200 OK\r\n
        Request Version: HTTP/1.1
        Response Code: 200
    Server: ngi
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3769 2008-10-21 11:24:10.754615 192.168.100.130       129.70.186.31         HTTP     Continuation or non-HTTP traffic

Frame 3769 (73 bytes on wire, 73 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:10.754615000
    [Time delta from previous captured frame: 0.000162000 seconds]
    [Time delta from previous displayed frame: 0.000162000 seconds]
    [Time since reference or first frame: 47290.135179000 seconds]
    Frame Number: 3769
    Frame Length: 73 bytes
    Capture Length: 73 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http:data]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 57
    Identification: 0xb7d9 (47065)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x2255 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 240, Ack: 123, Len: 5
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 240    (relative sequence number)
    [Next sequence number: 245    (relative sequence number)]
    Acknowledgement number: 123    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5824 (scaled)
    Checksum: 0x1d17 [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76163511, TSecr 13923616
Hypertext Transfer Protocol
    Data (5 bytes)

0000  74 65 73 74 0a                                    test.
        Data: 746573740A

No.     Time                       Source                Destination           Protocol Info
   3770 2008-10-21 11:24:10.778434 129.70.186.31         192.168.100.130       TCP      41861 > http [ACK] Seq=123 Ack=240 Win=6912 Len=0 TSV=13923622 TSER=76163511

Frame 3770 (68 bytes on wire, 68 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:10.778434000
    [Time delta from previous captured frame: 0.023819000 seconds]
    [Time delta from previous displayed frame: 0.023819000 seconds]
    [Time since reference or first frame: 47290.158998000 seconds]
    Frame Number: 3770
    Frame Length: 68 bytes
    Capture Length: 68 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Sent by us (4)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 129.70.186.31 (129.70.186.31), Dst: 192.168.100.130 (192.168.100.130)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x2b90 (11152)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 53
    Protocol: TCP (0x06)
    Header checksum: 0xb9a3 [correct]
        [Good: True]
        [Bad : False]
    Source: 129.70.186.31 (129.70.186.31)
    Destination: 192.168.100.130 (192.168.100.130)
Transmission Control Protocol, Src Port: 41861 (41861), Dst Port: http (80), Seq: 123, Ack: 240, Len: 0
    Source port: 41861 (41861)
    Destination port: http (80)
    Sequence number: 123    (relative sequence number)
    Acknowledgement number: 240    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 6912 (scaled)
    Checksum: 0x0f1d [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 13923622, TSecr 76163511

No.     Time                       Source                Destination           Protocol Info
   3771 2008-10-21 11:24:10.778453 129.70.186.31         192.168.100.130       TCP      41861 > http [ACK] Seq=123 Ack=245 Win=6912 Len=0 TSV=13923622 TSER=76163511

Frame 3771 (68 bytes on wire, 68 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:10.778453000
    [Time delta from previous captured frame: 0.000019000 seconds]
    [Time delta from previous displayed frame: 0.000019000 seconds]
    [Time since reference or first frame: 47290.159017000 seconds]
    Frame Number: 3771
    Frame Length: 68 bytes
    Capture Length: 68 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Sent by us (4)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 129.70.186.31 (129.70.186.31), Dst: 192.168.100.130 (192.168.100.130)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x2b91 (11153)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 53
    Protocol: TCP (0x06)
    Header checksum: 0xb9a2 [correct]
        [Good: True]
        [Bad : False]
    Source: 129.70.186.31 (129.70.186.31)
    Destination: 192.168.100.130 (192.168.100.130)
Transmission Control Protocol, Src Port: 41861 (41861), Dst Port: http (80), Seq: 123, Ack: 245, Len: 0
    Source port: 41861 (41861)
    Destination port: http (80)
    Sequence number: 123    (relative sequence number)
    Acknowledgement number: 245    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 6912 (scaled)
    Checksum: 0x0f18 [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 13923622, TSecr 76163511
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 3769]
        [The RTT to ACK the segment was: 0.023838000 seconds]

No.     Time                       Source                Destination           Protocol Info
   3772 2008-10-21 11:24:10.781795 129.70.186.31         192.168.100.130       HTTP     GET / HTTP/1.0 [Packet size limited during capture]

Frame 3772 (185 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:10.781795000
    [Time delta from previous captured frame: 0.003342000 seconds]
    [Time delta from previous displayed frame: 0.003342000 seconds]
    [Time since reference or first frame: 47290.162359000 seconds]
    Frame Number: 3772
    Frame Length: 185 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Sent by us (4)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 129.70.186.31 (129.70.186.31), Dst: 192.168.100.130 (192.168.100.130)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 169
    Identification: 0x2b92 (11154)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 53
    Protocol: TCP (0x06)
    Header checksum: 0xb92c [correct]
        [Good: True]
        [Bad : False]
    Source: 129.70.186.31 (129.70.186.31)
    Destination: 192.168.100.130 (192.168.100.130)
Transmission Control Protocol, Src Port: 41861 (41861), Dst Port: http (80), Seq: 123, Ack: 245, Len: 117
    Source port: 41861 (41861)
    Destination port: http (80)
    Sequence number: 123    (relative sequence number)
    [Next sequence number: 240    (relative sequence number)]
    Acknowledgement number: 245    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 6912 (scaled)
    Checksum: 0x78f6 [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 13923623, TSecr 76163511
Hypertext Transfer Protocol
    GET / HTTP/1.0\r\n
        Request Method: GET
        Request URI: /
        Request Version: HTTP/1.0
    User-Agent: 
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3773 2008-10-21 11:24:10.781878 192.168.100.130       129.70.186.31         HTTP     HTTP/1.1 301 Moved Permanent [Packet size limited during capture]

Frame 3773 (494 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:10.781878000
    [Time delta from previous captured frame: 0.000083000 seconds]
    [Time delta from previous displayed frame: 0.000083000 seconds]
    [Time since reference or first frame: 47290.162442000 seconds]
    Frame Number: 3773
    Frame Length: 494 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 478
    Identification: 0xb7da (47066)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x20af [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 245, Ack: 240, Len: 426
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 245    (relative sequence number)
    [Next sequence number: 671    (relative sequence number)]
    Acknowledgement number: 240    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5824 (scaled)
    Checksum: 0xcfe2 [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76163538, TSecr 13923623
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 3772]
        [The RTT to ACK the segment was: 0.000083000 seconds]
Hypertext Transfer Protocol
    HTTP/1.1 301 Moved Permanent
        Request Version: HTTP/1.1
        Response Code: 301
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3774 2008-10-21 11:24:10.806650 129.70.186.31         192.168.100.130       HTTP     GET /wiki/ HTTP/1.0 [Packet size limited during capture]

Frame 3774 (190 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:10.806650000
    [Time delta from previous captured frame: 0.024772000 seconds]
    [Time delta from previous displayed frame: 0.024772000 seconds]
    [Time since reference or first frame: 47290.187214000 seconds]
    Frame Number: 3774
    Frame Length: 190 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Sent by us (4)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 129.70.186.31 (129.70.186.31), Dst: 192.168.100.130 (192.168.100.130)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 174
    Identification: 0x2b93 (11155)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 53
    Protocol: TCP (0x06)
    Header checksum: 0xb926 [correct]
        [Good: True]
        [Bad : False]
    Source: 129.70.186.31 (129.70.186.31)
    Destination: 192.168.100.130 (192.168.100.130)
Transmission Control Protocol, Src Port: 41861 (41861), Dst Port: http (80), Seq: 240, Ack: 671, Len: 122
    Source port: 41861 (41861)
    Destination port: http (80)
    Sequence number: 240    (relative sequence number)
    [Next sequence number: 362    (relative sequence number)]
    Acknowledgement number: 671    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8064 (scaled)
    Checksum: 0x3109 [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 13923629, TSecr 76163538
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 3773]
        [The RTT to ACK the segment was: 0.024772000 seconds]
Hypertext Transfer Protocol
    GET /wiki/ HTTP/1.0\r\n
        Request Method: GET
        Request URI: /wiki/
        Request Version: HTTP/1.0
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3775 2008-10-21 11:24:10.836664 192.168.100.130       129.70.186.31         HTTP     HTTP/1.1 301 Moved Permanent [Packet size limited during capture]

Frame 3775 (660 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:10.836664000
    [Time delta from previous captured frame: 0.030014000 seconds]
    [Time delta from previous displayed frame: 0.030014000 seconds]
    [Time since reference or first frame: 47290.217228000 seconds]
    Frame Number: 3775
    Frame Length: 660 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 644
    Identification: 0xb7db (47067)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x2008 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 671, Ack: 362, Len: 592
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 671    (relative sequence number)
    [Next sequence number: 1263    (relative sequence number)]
    Acknowledgement number: 362    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5824 (scaled)
    Checksum: 0xcae2 [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76163593, TSecr 13923629
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 3774]
        [The RTT to ACK the segment was: 0.030014000 seconds]
Hypertext Transfer Protocol
    HTTP/1.1 301 Moved Permanent
        Request Version: HTTP/1.1
        Response Code: 301
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3776 2008-10-21 11:24:10.865793 129.70.186.31         192.168.100.130       HTTP     GET /wiki/index.php?title=Ma [Packet size limited during capture]

Frame 3776 (215 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:10.865793000
    [Time delta from previous captured frame: 0.029129000 seconds]
    [Time delta from previous displayed frame: 0.029129000 seconds]
    [Time since reference or first frame: 47290.246357000 seconds]
    Frame Number: 3776
    Frame Length: 215 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Sent by us (4)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 129.70.186.31 (129.70.186.31), Dst: 192.168.100.130 (192.168.100.130)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 199
    Identification: 0x2b94 (11156)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 53
    Protocol: TCP (0x06)
    Header checksum: 0xb90c [correct]
        [Good: True]
        [Bad : False]
    Source: 129.70.186.31 (129.70.186.31)
    Destination: 192.168.100.130 (192.168.100.130)
Transmission Control Protocol, Src Port: 41861 (41861), Dst Port: http (80), Seq: 362, Ack: 1263, Len: 147
    Source port: 41861 (41861)
    Destination port: http (80)
    Sequence number: 362    (relative sequence number)
    [Next sequence number: 509    (relative sequence number)]
    Acknowledgement number: 1263    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 9216 (scaled)
    Checksum: 0x4f20 [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 13923643, TSecr 76163593
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 3775]
        [The RTT to ACK the segment was: 0.029129000 seconds]
Hypertext Transfer Protocol
    GET /wiki/index.php?title=Ma
        Request Method: GET
        Request URI: /wiki/index.php?title=Ma
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3777 2008-10-21 11:24:10.905791 192.168.100.130       129.70.186.31         TCP      http > 41861 [ACK] Seq=1263 Ack=509 Win=6912 Len=0 TSV=76163662 TSER=13923643

Frame 3777 (68 bytes on wire, 68 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:10.905791000
    [Time delta from previous captured frame: 0.039998000 seconds]
    [Time delta from previous displayed frame: 0.039998000 seconds]
    [Time since reference or first frame: 47290.286355000 seconds]
    Frame Number: 3777
    Frame Length: 68 bytes
    Capture Length: 68 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xb7dc (47068)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x2257 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 1263, Ack: 509, Len: 0
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 1263    (relative sequence number)
    Acknowledgement number: 509    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 6912 (scaled)
    Checksum: 0x08ba [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76163662, TSecr 13923643
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 3776]
        [The RTT to ACK the segment was: 0.039998000 seconds]

No.     Time                       Source                Destination           Protocol Info
   3778 2008-10-21 11:24:10.961874 192.168.100.130       129.70.186.31         HTTP     HTTP/1.1 200 OK [Packet size limited during capture]

Frame 3778 (1516 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:10.961874000
    [Time delta from previous captured frame: 0.056083000 seconds]
    [Time delta from previous displayed frame: 0.056083000 seconds]
    [Time since reference or first frame: 47290.342438000 seconds]
    Frame Number: 3778
    Frame Length: 1516 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0xb7dd (47069)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1cae [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 1263, Ack: 509, Len: 1448
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 1263    (relative sequence number)
    [Next sequence number: 2711    (relative sequence number)]
    Acknowledgement number: 509    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 6912 (scaled)
    Checksum: 0x7593 [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76163718, TSecr 13923643
Hypertext Transfer Protocol
    HTTP/1.1 200 OK\r\n
        Request Version: HTTP/1.1
        Response Code: 200
    Server: ngi
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3779 2008-10-21 11:24:10.961943 192.168.100.130       129.70.186.31         HTTP     Continuation or non-HTTP traffic[Packet size limited during capture]

Frame 3779 (1516 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:10.961943000
    [Time delta from previous captured frame: 0.000069000 seconds]
    [Time delta from previous displayed frame: 0.000069000 seconds]
    [Time since reference or first frame: 47290.342507000 seconds]
    Frame Number: 3779
    Frame Length: 1516 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http:data]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0xb7de (47070)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1cad [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 2711, Ack: 509, Len: 1448
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 2711    (relative sequence number)
    [Next sequence number: 4159    (relative sequence number)]
    Acknowledgement number: 509    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 6912 (scaled)
    Checksum: 0xf50a [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76163718, TSecr 13923643
Hypertext Transfer Protocol
    Data (28 bytes)

0000  3d 22 68 74 74 70 3a 2f 2f 6d 61 63 74 65 78 2d   ="http://mactex-
0010  77 69 6b 69 32 2e 72 69 76 65 72 2d               wiki2.river-
        Data: 3D22687474703A2F2F6D61637465782D77696B69322E7269...
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3780 2008-10-21 11:24:10.961979 192.168.100.130       129.70.186.31         HTTP     Continuation or non-HTTP traffic[Packet size limited during capture]

Frame 3780 (1516 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:10.961979000
    [Time delta from previous captured frame: 0.000036000 seconds]
    [Time delta from previous displayed frame: 0.000036000 seconds]
    [Time since reference or first frame: 47290.342543000 seconds]
    Frame Number: 3780
    Frame Length: 1516 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http:data]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0xb7df (47071)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1cac [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 4159, Ack: 509, Len: 1448
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 4159    (relative sequence number)
    [Next sequence number: 5607    (relative sequence number)]
    Acknowledgement number: 509    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 6912 (scaled)
    Checksum: 0x5a57 [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76163718, TSecr 13923643
Hypertext Transfer Protocol
    Data (28 bytes)

0000  67 54 69 74 6c 65 20 3d 20 22 4d 61 69 6e 20 50   gTitle = "Main P
0010  61 67 65 22 3b 0a 76 61 72 20 77 67               age";.var wg
        Data: 675469746C65203D20224D61696E2050616765223B0A7661...
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3781 2008-10-21 11:24:10.986570 129.70.186.31         192.168.100.130       TCP      41861 > http [ACK] Seq=509 Ack=4159 Win=14976 Len=0 TSV=13923674 TSER=76163718

Frame 3781 (68 bytes on wire, 68 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:10.986570000
    [Time delta from previous captured frame: 0.024591000 seconds]
    [Time delta from previous displayed frame: 0.024591000 seconds]
    [Time since reference or first frame: 47290.367134000 seconds]
    Frame Number: 3781
    Frame Length: 68 bytes
    Capture Length: 68 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Sent by us (4)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 129.70.186.31 (129.70.186.31), Dst: 192.168.100.130 (192.168.100.130)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x2b95 (11157)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 53
    Protocol: TCP (0x06)
    Header checksum: 0xb99e [correct]
        [Good: True]
        [Bad : False]
    Source: 129.70.186.31 (129.70.186.31)
    Destination: 192.168.100.130 (192.168.100.130)
Transmission Control Protocol, Src Port: 41861 (41861), Dst Port: http (80), Seq: 509, Ack: 4159, Len: 0
    Source port: 41861 (41861)
    Destination port: http (80)
    Sequence number: 509    (relative sequence number)
    Acknowledgement number: 4159    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 14976 (scaled)
    Checksum: 0xfd09 [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 13923674, TSecr 76163718

No.     Time                       Source                Destination           Protocol Info
   3782 2008-10-21 11:24:10.986615 192.168.100.130       129.70.186.31         HTTP     Continuation or non-HTTP traffic[Packet size limited during capture]

Frame 3782 (1516 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:10.986615000
    [Time delta from previous captured frame: 0.000045000 seconds]
    [Time delta from previous displayed frame: 0.000045000 seconds]
    [Time since reference or first frame: 47290.367179000 seconds]
    Frame Number: 3782
    Frame Length: 1516 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http:data]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0xb7e0 (47072)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1cab [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 5607, Ack: 509, Len: 1448
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 5607    (relative sequence number)
    [Next sequence number: 7055    (relative sequence number)]
    Acknowledgement number: 509    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 6912 (scaled)
    Checksum: 0x36a0 [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76163743, TSecr 13923674
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 3781]
        [The RTT to ACK the segment was: 0.000045000 seconds]
Hypertext Transfer Protocol
    Data (28 bytes)

0000  6f 2d 6e 61 76 22 3e 4a 75 6d 70 20 74 6f 3a 20   o-nav">Jump to: 
0010  3c 61 20 68 72 65 66 3d 22 23 63 6f               <a href="#co
        Data: 6F2D6E6176223E4A756D7020746F3A203C6120687265663D...
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3783 2008-10-21 11:24:10.986624 192.168.100.130       129.70.186.31         HTTP     Continuation or non-HTTP traffic[Packet size limited during capture]

Frame 3783 (1516 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:10.986624000
    [Time delta from previous captured frame: 0.000009000 seconds]
    [Time delta from previous displayed frame: 0.000009000 seconds]
    [Time since reference or first frame: 47290.367188000 seconds]
    Frame Number: 3783
    Frame Length: 1516 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http:data]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0xb7e1 (47073)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1caa [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 7055, Ack: 509, Len: 1448
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 7055    (relative sequence number)
    [Next sequence number: 8503    (relative sequence number)]
    Acknowledgement number: 509    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 6912 (scaled)
    Checksum: 0xd2d0 [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76163743, TSecr 13923674
Hypertext Transfer Protocol
    Data (28 bytes)

0000  77 69 6b 69 2f 69 6e 64 65 78 2e 70 68 70 3f 74   wiki/index.php?t
0010  69 74 6c 65 3d 43 6f 6e 76 65 72 74               itle=Convert
        Data: 77696B692F696E6465782E7068703F7469746C653D436F6E...
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3784 2008-10-21 11:24:10.986631 192.168.100.130       129.70.186.31         HTTP     Continuation or non-HTTP traffic[Packet size limited during capture]

Frame 3784 (1516 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:10.986631000
    [Time delta from previous captured frame: 0.000007000 seconds]
    [Time delta from previous displayed frame: 0.000007000 seconds]
    [Time since reference or first frame: 47290.367195000 seconds]
    Frame Number: 3784
    Frame Length: 1516 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http:data]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0xb7e2 (47074)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1ca9 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 8503, Ack: 509, Len: 1448
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 8503    (relative sequence number)
    [Next sequence number: 9951    (relative sequence number)]
    Acknowledgement number: 509    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 6912 (scaled)
    Checksum: 0xc92d [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76163743, TSecr 13923674
Hypertext Transfer Protocol
    Data (28 bytes)

0000  20 6e 65 77 20 68 6f 6d 65 20 6f 66 20 3c 61 20    new home of <a 
0010  68 72 65 66 3d 22 2f 77 69 6b 69 2f               href="/wiki/
        Data: 206E657720686F6D65206F66203C6120687265663D222F77...
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3785 2008-10-21 11:24:11.011194 129.70.186.31         192.168.100.130       TCP      41861 > http [ACK] Seq=509 Ack=7055 Win=20864 Len=0 TSV=13923680 TSER=76163718

Frame 3785 (68 bytes on wire, 68 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.011194000
    [Time delta from previous captured frame: 0.024563000 seconds]
    [Time delta from previous displayed frame: 0.024563000 seconds]
    [Time since reference or first frame: 47290.391758000 seconds]
    Frame Number: 3785
    Frame Length: 68 bytes
    Capture Length: 68 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Sent by us (4)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 129.70.186.31 (129.70.186.31), Dst: 192.168.100.130 (192.168.100.130)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x2b96 (11158)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 53
    Protocol: TCP (0x06)
    Header checksum: 0xb99d [correct]
        [Good: True]
        [Bad : False]
    Source: 129.70.186.31 (129.70.186.31)
    Destination: 192.168.100.130 (192.168.100.130)
Transmission Control Protocol, Src Port: 41861 (41861), Dst Port: http (80), Seq: 509, Ack: 7055, Len: 0
    Source port: 41861 (41861)
    Destination port: http (80)
    Sequence number: 509    (relative sequence number)
    Acknowledgement number: 7055    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 20864 (scaled)
    Checksum: 0xf185 [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 13923680, TSecr 76163718

No.     Time                       Source                Destination           Protocol Info
   3786 2008-10-21 11:24:11.011223 192.168.100.130       129.70.186.31         HTTP     Continuation or non-HTTP traffic[Packet size limited during capture]

Frame 3786 (1516 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.011223000
    [Time delta from previous captured frame: 0.000029000 seconds]
    [Time delta from previous displayed frame: 0.000029000 seconds]
    [Time since reference or first frame: 47290.391787000 seconds]
    Frame Number: 3786
    Frame Length: 1516 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http:data]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0xb7e3 (47075)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1ca8 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 9951, Ack: 509, Len: 1448
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 9951    (relative sequence number)
    [Next sequence number: 11399    (relative sequence number)]
    Acknowledgement number: 509    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 6912 (scaled)
    Checksum: 0xb2fa [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76163767, TSecr 13923680
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 3785]
        [The RTT to ACK the segment was: 0.000029000 seconds]
Hypertext Transfer Protocol
    Data (28 bytes)

0000  20 49 20 68 6f 70 65 20 70 65 6f 70 6c 65 20 6d    I hope people m
0010  61 79 20 63 6f 6d 6d 65 6e 74 20 6f               ay comment o
        Data: 204920686F70652070656F706C65206D617920636F6D6D65...
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3787 2008-10-21 11:24:11.011231 192.168.100.130       129.70.186.31         HTTP     Continuation or non-HTTP traffic[Packet size limited during capture]

Frame 3787 (1516 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.011231000
    [Time delta from previous captured frame: 0.000008000 seconds]
    [Time delta from previous displayed frame: 0.000008000 seconds]
    [Time since reference or first frame: 47290.391795000 seconds]
    Frame Number: 3787
    Frame Length: 1516 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0xb7e4 (47076)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1ca7 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 11399, Ack: 509, Len: 1448
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 11399    (relative sequence number)
    [Next sequence number: 12847    (relative sequence number)]
    Acknowledgement number: 509    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 6912 (scaled)
    Checksum: 0x4d44 [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76163767, TSecr 13923680
Hypertext Transfer Protocol
    db:pcache:idhash:1-0!1!0!!en
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3788 2008-10-21 11:24:11.011284 192.168.100.130       129.70.186.31         HTTP     Continuation or non-HTTP traffic[Packet size limited during capture]

Frame 3788 (1516 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.011284000
    [Time delta from previous captured frame: 0.000053000 seconds]
    [Time delta from previous displayed frame: 0.000053000 seconds]
    [Time since reference or first frame: 47290.391848000 seconds]
    Frame Number: 3788
    Frame Length: 1516 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http:data]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0xb7e5 (47077)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1ca6 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 12847, Ack: 509, Len: 1448
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 12847    (relative sequence number)
    [Next sequence number: 14295    (relative sequence number)]
    Acknowledgement number: 509    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 6912 (scaled)
    Checksum: 0x7026 [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76163767, TSecr 13923680
Hypertext Transfer Protocol
    Data (28 bytes)

0000  63 72 65 61 74 65 20 61 63 63 6f 75 6e 74 3c 2f   create account</
0010  61 3e 3c 2f 6c 69 3e 0a 09 09 09 3c               a></li>....<
        Data: 637265617465206163636F756E743C2F613E3C2F6C693E0A...
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3789 2008-10-21 11:24:11.012302 129.70.186.31         192.168.100.130       TCP      41861 > http [ACK] Seq=509 Ack=9951 Win=26624 Len=0 TSV=13923680 TSER=76163743

Frame 3789 (68 bytes on wire, 68 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.012302000
    [Time delta from previous captured frame: 0.001018000 seconds]
    [Time delta from previous displayed frame: 0.001018000 seconds]
    [Time since reference or first frame: 47290.392866000 seconds]
    Frame Number: 3789
    Frame Length: 68 bytes
    Capture Length: 68 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Sent by us (4)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 129.70.186.31 (129.70.186.31), Dst: 192.168.100.130 (192.168.100.130)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x2b97 (11159)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 53
    Protocol: TCP (0x06)
    Header checksum: 0xb99c [correct]
        [Good: True]
        [Bad : False]
    Source: 129.70.186.31 (129.70.186.31)
    Destination: 192.168.100.130 (192.168.100.130)
Transmission Control Protocol, Src Port: 41861 (41861), Dst Port: http (80), Seq: 509, Ack: 9951, Len: 0
    Source port: 41861 (41861)
    Destination port: http (80)
    Sequence number: 509    (relative sequence number)
    Acknowledgement number: 9951    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 26624 (scaled)
    Checksum: 0xe5ef [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 13923680, TSecr 76163743

No.     Time                       Source                Destination           Protocol Info
   3790 2008-10-21 11:24:11.012329 192.168.100.130       129.70.186.31         HTTP     Continuation or non-HTTP traffic[Packet size limited during capture]

Frame 3790 (1516 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.012329000
    [Time delta from previous captured frame: 0.000027000 seconds]
    [Time delta from previous displayed frame: 0.000027000 seconds]
    [Time since reference or first frame: 47290.392893000 seconds]
    Frame Number: 3790
    Frame Length: 1516 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http:data]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0xb7e6 (47078)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1ca5 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 14295, Ack: 509, Len: 1448
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 14295    (relative sequence number)
    [Next sequence number: 15743    (relative sequence number)]
    Acknowledgement number: 509    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 6912 (scaled)
    Checksum: 0xbea5 [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76163768, TSecr 13923680
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 3789]
        [The RTT to ACK the segment was: 0.000027000 seconds]
Hypertext Transfer Protocol
    Data (28 bytes)

0000  65 20 70 6c 61 63 65 20 74 6f 20 66 69 6e 64 20   e place to find 
0010  6f 75 74 2e 22 3e 48 65 6c 70 3c 2f               out.">Help</
        Data: 6520706C61636520746F2066696E64206F75742E223E4865...
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3791 2008-10-21 11:24:11.012338 192.168.100.130       129.70.186.31         HTTP     Continuation or non-HTTP traffic[Packet size limited during capture]

Frame 3791 (1516 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.012338000
    [Time delta from previous captured frame: 0.000009000 seconds]
    [Time delta from previous displayed frame: 0.000009000 seconds]
    [Time since reference or first frame: 47290.392902000 seconds]
    Frame Number: 3791
    Frame Length: 1516 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http:data]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0xb7e7 (47079)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1ca4 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 15743, Ack: 509, Len: 1448
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 15743    (relative sequence number)
    [Next sequence number: 17191    (relative sequence number)]
    Acknowledgement number: 509    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 6912 (scaled)
    Checksum: 0x8ccc [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76163768, TSecr 13923680
Hypertext Transfer Protocol
    Data (28 bytes)

0000  76 20 69 64 3d 22 70 2d 73 65 61 72 63 68 22 20   v id="p-search" 
0010  63 6c 61 73 73 3d 22 70 6f 72 74 6c               class="portl
        Data: 762069643D22702D7365617263682220636C6173733D2270...
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3792 2008-10-21 11:24:11.012346 192.168.100.130       129.70.186.31         HTTP     Continuation or non-HTTP traffic[Packet size limited during capture]

Frame 3792 (1441 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.012346000
    [Time delta from previous captured frame: 0.000008000 seconds]
    [Time delta from previous displayed frame: 0.000008000 seconds]
    [Time since reference or first frame: 47290.392910000 seconds]
    Frame Number: 3792
    Frame Length: 1441 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http:data]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1425
    Identification: 0xb7e8 (47080)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1cee [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 17191, Ack: 509, Len: 1373
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 17191    (relative sequence number)
    [Next sequence number: 18564    (relative sequence number)]
    Acknowledgement number: 509    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 6912 (scaled)
    Checksum: 0x49e4 [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76163768, TSecr 13923680
Hypertext Transfer Protocol
    Data (28 bytes)

0000  70 3b 70 72 69 6e 74 61 62 6c 65 3d 79 65 73 22   p;printable=yes"
0010  20 74 69 74 6c 65 3d 22 50 72 69 6e                title="Prin
        Data: 703B7072696E7461626C653D79657322207469746C653D22...
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3793 2008-10-21 11:24:11.036007 129.70.186.31         192.168.100.130       TCP      41861 > http [ACK] Seq=509 Ack=12847 Win=32384 Len=0 TSV=13923686 TSER=76163767

Frame 3793 (68 bytes on wire, 68 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.036007000
    [Time delta from previous captured frame: 0.023661000 seconds]
    [Time delta from previous displayed frame: 0.023661000 seconds]
    [Time since reference or first frame: 47290.416571000 seconds]
    Frame Number: 3793
    Frame Length: 68 bytes
    Capture Length: 68 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Sent by us (4)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 129.70.186.31 (129.70.186.31), Dst: 192.168.100.130 (192.168.100.130)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x2b98 (11160)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 53
    Protocol: TCP (0x06)
    Header checksum: 0xb99b [correct]
        [Good: True]
        [Bad : False]
    Source: 129.70.186.31 (129.70.186.31)
    Destination: 192.168.100.130 (192.168.100.130)
Transmission Control Protocol, Src Port: 41861 (41861), Dst Port: http (80), Seq: 509, Ack: 12847, Len: 0
    Source port: 41861 (41861)
    Destination port: http (80)
    Sequence number: 509    (relative sequence number)
    Acknowledgement number: 12847    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 32384 (scaled)
    Checksum: 0xda54 [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 13923686, TSecr 76163767

No.     Time                       Source                Destination           Protocol Info
   3794 2008-10-21 11:24:11.038344 129.70.186.31         192.168.100.130       TCP      41861 > http [ACK] Seq=509 Ack=15743 Win=38144 Len=0 TSV=13923686 TSER=76163767

Frame 3794 (68 bytes on wire, 68 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.038344000
    [Time delta from previous captured frame: 0.002337000 seconds]
    [Time delta from previous displayed frame: 0.002337000 seconds]
    [Time since reference or first frame: 47290.418908000 seconds]
    Frame Number: 3794
    Frame Length: 68 bytes
    Capture Length: 68 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Sent by us (4)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 129.70.186.31 (129.70.186.31), Dst: 192.168.100.130 (192.168.100.130)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x2b99 (11161)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 53
    Protocol: TCP (0x06)
    Header checksum: 0xb99a [correct]
        [Good: True]
        [Bad : False]
    Source: 129.70.186.31 (129.70.186.31)
    Destination: 192.168.100.130 (192.168.100.130)
Transmission Control Protocol, Src Port: 41861 (41861), Dst Port: http (80), Seq: 509, Ack: 15743, Len: 0
    Source port: 41861 (41861)
    Destination port: http (80)
    Sequence number: 509    (relative sequence number)
    Acknowledgement number: 15743    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 38144 (scaled)
    Checksum: 0xced7 [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 13923686, TSecr 76163767

No.     Time                       Source                Destination           Protocol Info
   3795 2008-10-21 11:24:11.038813 129.70.186.31         192.168.100.130       TCP      41861 > http [ACK] Seq=509 Ack=18564 Win=44032 Len=0 TSV=13923687 TSER=76163768

Frame 3795 (68 bytes on wire, 68 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.038813000
    [Time delta from previous captured frame: 0.000469000 seconds]
    [Time delta from previous displayed frame: 0.000469000 seconds]
    [Time since reference or first frame: 47290.419377000 seconds]
    Frame Number: 3795
    Frame Length: 68 bytes
    Capture Length: 68 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Sent by us (4)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 129.70.186.31 (129.70.186.31), Dst: 192.168.100.130 (192.168.100.130)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x2b9a (11162)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 53
    Protocol: TCP (0x06)
    Header checksum: 0xb999 [correct]
        [Good: True]
        [Bad : False]
    Source: 129.70.186.31 (129.70.186.31)
    Destination: 192.168.100.130 (192.168.100.130)
Transmission Control Protocol, Src Port: 41861 (41861), Dst Port: http (80), Seq: 509, Ack: 18564, Len: 0
    Source port: 41861 (41861)
    Destination port: http (80)
    Sequence number: 509    (relative sequence number)
    Acknowledgement number: 18564    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 44032 (scaled)
    Checksum: 0xc3a2 [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 13923687, TSecr 76163768
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 3792]
        [The RTT to ACK the segment was: 0.026467000 seconds]

No.     Time                       Source                Destination           Protocol Info
   3796 2008-10-21 11:24:11.041832 129.70.186.31         192.168.100.130       HTTP     GET /robots.txt HTTP/1.0 [Packet size limited during capture]

Frame 3796 (195 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.041832000
    [Time delta from previous captured frame: 0.003019000 seconds]
    [Time delta from previous displayed frame: 0.003019000 seconds]
    [Time since reference or first frame: 47290.422396000 seconds]
    Frame Number: 3796
    Frame Length: 195 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Sent by us (4)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 129.70.186.31 (129.70.186.31), Dst: 192.168.100.130 (192.168.100.130)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 179
    Identification: 0x2b9b (11163)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 53
    Protocol: TCP (0x06)
    Header checksum: 0xb919 [correct]
        [Good: True]
        [Bad : False]
    Source: 129.70.186.31 (129.70.186.31)
    Destination: 192.168.100.130 (192.168.100.130)
Transmission Control Protocol, Src Port: 41861 (41861), Dst Port: http (80), Seq: 509, Ack: 18564, Len: 127
    Source port: 41861 (41861)
    Destination port: http (80)
    Sequence number: 509    (relative sequence number)
    [Next sequence number: 636    (relative sequence number)]
    Acknowledgement number: 18564    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 44032 (scaled)
    Checksum: 0xf286 [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 13923688, TSecr 76163768
Hypertext Transfer Protocol
    GET /robots.txt HTTP/1.0\r\n
        Request Method: GET
        Request URI: /robots.txt
        Request Version: HTTP/1.0
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3797 2008-10-21 11:24:11.041888 192.168.100.130       129.70.186.31         TCP      http > 41861 [ACK] Seq=18564 Ack=636 Win=6912 Len=0 TSV=76163798 TSER=13923688

Frame 3797 (68 bytes on wire, 68 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.041888000
    [Time delta from previous captured frame: 0.000056000 seconds]
    [Time delta from previous displayed frame: 0.000056000 seconds]
    [Time since reference or first frame: 47290.422452000 seconds]
    Frame Number: 3797
    Frame Length: 68 bytes
    Capture Length: 68 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xb7e9 (47081)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x224a [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 18564, Ack: 636, Len: 0
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 18564    (relative sequence number)
    Acknowledgement number: 636    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 6912 (scaled)
    Checksum: 0xc3f0 [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76163798, TSecr 13923688
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 3796]
        [The RTT to ACK the segment was: 0.000056000 seconds]

No.     Time                       Source                Destination           Protocol Info
   3798 2008-10-21 11:24:11.042054 192.168.100.130       129.70.186.31         HTTP     HTTP/1.1 200 OK [Packet size limited during capture]

Frame 3798 (307 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.042054000
    [Time delta from previous captured frame: 0.000166000 seconds]
    [Time delta from previous displayed frame: 0.000166000 seconds]
    [Time since reference or first frame: 47290.422618000 seconds]
    Frame Number: 3798
    Frame Length: 307 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 291
    Identification: 0xb7ea (47082)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x215a [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 18564, Ack: 636, Len: 239
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 18564    (relative sequence number)
    [Next sequence number: 18803    (relative sequence number)]
    Acknowledgement number: 636    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 6912 (scaled)
    Checksum: 0xc3fa [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76163798, TSecr 13923688
Hypertext Transfer Protocol
    HTTP/1.1 200 OK\r\n
        Request Version: HTTP/1.1
        Response Code: 200
    Server: ngi
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3799 2008-10-21 11:24:11.069882 129.70.186.31         192.168.100.130       HTTP     GET /favicon.ico HTTP/1.0 [Packet size limited during capture]

Frame 3799 (274 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.069882000
    [Time delta from previous captured frame: 0.027828000 seconds]
    [Time delta from previous displayed frame: 0.027828000 seconds]
    [Time since reference or first frame: 47290.450446000 seconds]
    Frame Number: 3799
    Frame Length: 274 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Sent by us (4)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 129.70.186.31 (129.70.186.31), Dst: 192.168.100.130 (192.168.100.130)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 258
    Identification: 0x2b9c (11164)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 53
    Protocol: TCP (0x06)
    Header checksum: 0xb8c9 [correct]
        [Good: True]
        [Bad : False]
    Source: 129.70.186.31 (129.70.186.31)
    Destination: 192.168.100.130 (192.168.100.130)
Transmission Control Protocol, Src Port: 41861 (41861), Dst Port: http (80), Seq: 636, Ack: 18803, Len: 206
    Source port: 41861 (41861)
    Destination port: http (80)
    Sequence number: 636    (relative sequence number)
    [Next sequence number: 842    (relative sequence number)]
    Acknowledgement number: 18803    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 46848 (scaled)
    Checksum: 0x39bc [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 13923695, TSecr 76163798
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 3798]
        [The RTT to ACK the segment was: 0.027828000 seconds]
Hypertext Transfer Protocol
    GET /favicon.ico HTTP/1.0\r\n
        Request Method: GET
        Request URI: /favicon.ico
        Request Version: HTTP/1.0
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3800 2008-10-21 11:24:11.069969 192.168.100.130       129.70.186.31         HTTP     HTTP/1.1 200 OK [Packet size limited during capture]

Frame 3800 (312 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.069969000
    [Time delta from previous captured frame: 0.000087000 seconds]
    [Time delta from previous displayed frame: 0.000087000 seconds]
    [Time since reference or first frame: 47290.450533000 seconds]
    Frame Number: 3800
    Frame Length: 312 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 296
    Identification: 0xb7eb (47083)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x2154 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 18803, Ack: 842, Len: 244
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 18803    (relative sequence number)
    [Next sequence number: 19047    (relative sequence number)]
    Acknowledgement number: 842    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 7936 (scaled)
    Checksum: 0xcbff [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76163826, TSecr 13923695
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 3799]
        [The RTT to ACK the segment was: 0.000087000 seconds]
Hypertext Transfer Protocol
    HTTP/1.1 200 OK\r\n
        Request Version: HTTP/1.1
        Response Code: 200
    Server: ngi
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3801 2008-10-21 11:24:11.070027 192.168.100.130       129.70.186.31         HTTP     Continuation or non-HTTP traffic[Packet size limited during capture]

Frame 3801 (1141 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.070027000
    [Time delta from previous captured frame: 0.000058000 seconds]
    [Time delta from previous displayed frame: 0.000058000 seconds]
    [Time since reference or first frame: 47290.450591000 seconds]
    Frame Number: 3801
    Frame Length: 1141 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http:data]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1125
    Identification: 0xb7ec (47084)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1e16 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 19047, Ack: 842, Len: 1073
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 19047    (relative sequence number)
    [Next sequence number: 20120    (relative sequence number)]
    Acknowledgement number: 842    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 7936 (scaled)
    Checksum: 0xaa5a [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76163826, TSecr 13923695
Hypertext Transfer Protocol
    Data (28 bytes)

0000  ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01   ......JFIF......
0010  00 01 00 00 ff fe 00 3c 43 52 45 41               .......<CREA
        Data: FFD8FFE000104A46494600010100000100010000FFFE003C...
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3802 2008-10-21 11:24:11.094659 129.70.186.31         192.168.100.130       TCP      41861 > http [ACK] Seq=842 Ack=20120 Win=52608 Len=0 TSV=13923701 TSER=76163826

Frame 3802 (68 bytes on wire, 68 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.094659000
    [Time delta from previous captured frame: 0.024632000 seconds]
    [Time delta from previous displayed frame: 0.024632000 seconds]
    [Time since reference or first frame: 47290.475223000 seconds]
    Frame Number: 3802
    Frame Length: 68 bytes
    Capture Length: 68 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Sent by us (4)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 129.70.186.31 (129.70.186.31), Dst: 192.168.100.130 (192.168.100.130)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x2b9d (11165)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 53
    Protocol: TCP (0x06)
    Header checksum: 0xb996 [correct]
        [Good: True]
        [Bad : False]
    Source: 129.70.186.31 (129.70.186.31)
    Destination: 192.168.100.130 (192.168.100.130)
Transmission Control Protocol, Src Port: 41861 (41861), Dst Port: http (80), Seq: 842, Ack: 20120, Len: 0
    Source port: 41861 (41861)
    Destination port: http (80)
    Sequence number: 842    (relative sequence number)
    Acknowledgement number: 20120    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 52608 (scaled)
    Checksum: 0xbbb6 [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 13923701, TSecr 76163826
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 3801]
        [The RTT to ACK the segment was: 0.024632000 seconds]

No.     Time                       Source                Destination           Protocol Info
   3803 2008-10-21 11:24:11.099060 129.70.186.31         192.168.100.130       HTTP     GET /wiki/skins/common/commo [Packet size limited during capture]

Frame 3803 (300 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.099060000
    [Time delta from previous captured frame: 0.004401000 seconds]
    [Time delta from previous displayed frame: 0.004401000 seconds]
    [Time since reference or first frame: 47290.479624000 seconds]
    Frame Number: 3803
    Frame Length: 300 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Sent by us (4)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 129.70.186.31 (129.70.186.31), Dst: 192.168.100.130 (192.168.100.130)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 284
    Identification: 0x2b9e (11166)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 53
    Protocol: TCP (0x06)
    Header checksum: 0xb8ad [correct]
        [Good: True]
        [Bad : False]
    Source: 129.70.186.31 (129.70.186.31)
    Destination: 192.168.100.130 (192.168.100.130)
Transmission Control Protocol, Src Port: 41861 (41861), Dst Port: http (80), Seq: 842, Ack: 20120, Len: 232
    Source port: 41861 (41861)
    Destination port: http (80)
    Sequence number: 842    (relative sequence number)
    [Next sequence number: 1074    (relative sequence number)]
    Acknowledgement number: 20120    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 52608 (scaled)
    Checksum: 0x2ed3 [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 13923702, TSecr 76163826
Hypertext Transfer Protocol
    GET /wiki/skins/common/commo
        Request Method: GET
        Request URI: /wiki/skins/common/commo
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3804 2008-10-21 11:24:11.099164 192.168.100.130       129.70.186.31         HTTP     HTTP/1.1 200 OK [Packet size limited during capture]

Frame 3804 (308 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.099164000
    [Time delta from previous captured frame: 0.000104000 seconds]
    [Time delta from previous displayed frame: 0.000104000 seconds]
    [Time since reference or first frame: 47290.479728000 seconds]
    Frame Number: 3804
    Frame Length: 308 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 292
    Identification: 0xb7ed (47085)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x2156 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 20120, Ack: 1074, Len: 240
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 20120    (relative sequence number)
    [Next sequence number: 20360    (relative sequence number)]
    Acknowledgement number: 1074    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 9024 (scaled)
    Checksum: 0xb3f9 [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76163855, TSecr 13923702
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 3803]
        [The RTT to ACK the segment was: 0.000104000 seconds]
Hypertext Transfer Protocol
    HTTP/1.1 200 OK\r\n
        Request Version: HTTP/1.1
        Response Code: 200
    Server: ngi
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3805 2008-10-21 11:24:11.099222 192.168.100.130       129.70.186.31         HTTP     Continuation or non-HTTP traffic[Packet size limited during capture]

Frame 3805 (1516 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.099222000
    [Time delta from previous captured frame: 0.000058000 seconds]
    [Time delta from previous displayed frame: 0.000058000 seconds]
    [Time since reference or first frame: 47290.479786000 seconds]
    Frame Number: 3805
    Frame Length: 1516 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http:data]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0xb7ee (47086)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1c9d [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 20360, Ack: 1074, Len: 1448
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 20360    (relative sequence number)
    [Next sequence number: 21808    (relative sequence number)]
    Acknowledgement number: 1074    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 9024 (scaled)
    Checksum: 0x2d3f [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76163855, TSecr 13923702
Hypertext Transfer Protocol
    Data (28 bytes)

0000  2f 2a 0a 2a 2a 20 4d 65 64 69 61 57 69 6b 69 20   /*.** MediaWiki 
0010  50 72 69 6e 74 20 73 74 79 6c 65 20               Print style 
        Data: 2F2A0A2A2A204D6564696157696B69205072696E74207374...
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3806 2008-10-21 11:24:11.099264 192.168.100.130       129.70.186.31         HTTP     Continuation or non-HTTP traffic[Packet size limited during capture]

Frame 3806 (1516 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.099264000
    [Time delta from previous captured frame: 0.000042000 seconds]
    [Time delta from previous displayed frame: 0.000042000 seconds]
    [Time since reference or first frame: 47290.479828000 seconds]
    Frame Number: 3806
    Frame Length: 1516 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http:data]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0xb7ef (47087)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1c9c [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 21808, Ack: 1074, Len: 1448
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 21808    (relative sequence number)
    [Next sequence number: 23256    (relative sequence number)]
    Acknowledgement number: 1074    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 9024 (scaled)
    Checksum: 0x9e2e [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76163855, TSecr 13923702
Hypertext Transfer Protocol
    Data (28 bytes)

0000  20 20 20 20 62 6f 72 64 65 72 2d 77 69 64 74 68       border-width
0010  3a 20 30 2e 35 65 6d 20 30 20 30 2e               : 0.5em 0 0.
        Data: 20202020626F726465722D77696474683A20302E35656D20...
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3807 2008-10-21 11:24:11.099319 192.168.100.130       129.70.186.31         HTTP     Continuation or non-HTTP traffic[Packet size limited during capture]

Frame 3807 (1516 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.099319000
    [Time delta from previous captured frame: 0.000055000 seconds]
    [Time delta from previous displayed frame: 0.000055000 seconds]
    [Time since reference or first frame: 47290.479883000 seconds]
    Frame Number: 3807
    Frame Length: 1516 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http:data]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0xb7f0 (47088)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1c9b [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 23256, Ack: 1074, Len: 1448
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 23256    (relative sequence number)
    [Next sequence number: 24704    (relative sequence number)]
    Acknowledgement number: 1074    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 9024 (scaled)
    Checksum: 0xaae0 [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76163855, TSecr 13923702
Hypertext Transfer Protocol
    Data (28 bytes)

0000  20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20       background: 
0010  6e 6f 6e 65 20 21 69 6d 70 6f 72 74               none !import
        Data: 202020206261636B67726F756E643A206E6F6E652021696D...
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3808 2008-10-21 11:24:11.099373 192.168.100.130       129.70.186.31         HTTP     Continuation or non-HTTP traffic[Packet size limited during capture]

Frame 3808 (1013 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.099373000
    [Time delta from previous captured frame: 0.000054000 seconds]
    [Time delta from previous displayed frame: 0.000054000 seconds]
    [Time since reference or first frame: 47290.479937000 seconds]
    Frame Number: 3808
    Frame Length: 1013 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http:data]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 997
    Identification: 0xb7f1 (47089)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1e91 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 24704, Ack: 1074, Len: 945
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 24704    (relative sequence number)
    [Next sequence number: 25649    (relative sequence number)]
    Acknowledgement number: 1074    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 9024 (scaled)
    Checksum: 0x9f3c [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76163856, TSecr 13923702
Hypertext Transfer Protocol
    n:  2px;\n
    Data (19 bytes)

0000  20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a           padding:
0010  20 32 70                                           2p
        Data: 202020202020202070616464696E673A203270
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3809 2008-10-21 11:24:11.124616 129.70.186.31         192.168.100.130       TCP      41861 > http [ACK] Seq=1074 Ack=21808 Win=58496 Len=0 TSV=13923708 TSER=76163855

Frame 3809 (68 bytes on wire, 68 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.124616000
    [Time delta from previous captured frame: 0.025243000 seconds]
    [Time delta from previous displayed frame: 0.025243000 seconds]
    [Time since reference or first frame: 47290.505180000 seconds]
    Frame Number: 3809
    Frame Length: 68 bytes
    Capture Length: 68 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Sent by us (4)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 129.70.186.31 (129.70.186.31), Dst: 192.168.100.130 (192.168.100.130)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x2b9f (11167)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 53
    Protocol: TCP (0x06)
    Header checksum: 0xb994 [correct]
        [Good: True]
        [Bad : False]
    Source: 129.70.186.31 (129.70.186.31)
    Destination: 192.168.100.130 (192.168.100.130)
Transmission Control Protocol, Src Port: 41861 (41861), Dst Port: http (80), Seq: 1074, Ack: 21808, Len: 0
    Source port: 41861 (41861)
    Destination port: http (80)
    Sequence number: 1074    (relative sequence number)
    Acknowledgement number: 21808    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 58496 (scaled)
    Checksum: 0xb3e4 [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 13923708, TSecr 76163855

No.     Time                       Source                Destination           Protocol Info
   3810 2008-10-21 11:24:11.124941 129.70.186.31         192.168.100.130       TCP      41861 > http [ACK] Seq=1074 Ack=24704 Win=62336 Len=0 TSV=13923708 TSER=76163855

Frame 3810 (68 bytes on wire, 68 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.124941000
    [Time delta from previous captured frame: 0.000325000 seconds]
    [Time delta from previous displayed frame: 0.000325000 seconds]
    [Time since reference or first frame: 47290.505505000 seconds]
    Frame Number: 3810
    Frame Length: 68 bytes
    Capture Length: 68 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Sent by us (4)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 129.70.186.31 (129.70.186.31), Dst: 192.168.100.130 (192.168.100.130)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x2ba0 (11168)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 53
    Protocol: TCP (0x06)
    Header checksum: 0xb993 [correct]
        [Good: True]
        [Bad : False]
    Source: 129.70.186.31 (129.70.186.31)
    Destination: 192.168.100.130 (192.168.100.130)
Transmission Control Protocol, Src Port: 41861 (41861), Dst Port: http (80), Seq: 1074, Ack: 24704, Len: 0
    Source port: 41861 (41861)
    Destination port: http (80)
    Sequence number: 1074    (relative sequence number)
    Acknowledgement number: 24704    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 62336 (scaled)
    Checksum: 0xa876 [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 13923708, TSecr 76163855

No.     Time                       Source                Destination           Protocol Info
   3811 2008-10-21 11:24:11.126741 129.70.186.31         192.168.100.130       HTTP     GET /wiki/skins/common/wikib [Packet size limited during capture]

Frame 3811 (296 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.126741000
    [Time delta from previous captured frame: 0.001800000 seconds]
    [Time delta from previous displayed frame: 0.001800000 seconds]
    [Time since reference or first frame: 47290.507305000 seconds]
    Frame Number: 3811
    Frame Length: 296 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Sent by us (4)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 129.70.186.31 (129.70.186.31), Dst: 192.168.100.130 (192.168.100.130)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 280
    Identification: 0x2ba1 (11169)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 53
    Protocol: TCP (0x06)
    Header checksum: 0xb8ae [correct]
        [Good: True]
        [Bad : False]
    Source: 129.70.186.31 (129.70.186.31)
    Destination: 192.168.100.130 (192.168.100.130)
Transmission Control Protocol, Src Port: 41861 (41861), Dst Port: http (80), Seq: 1074, Ack: 25649, Len: 228
    Source port: 41861 (41861)
    Destination port: http (80)
    Sequence number: 1074    (relative sequence number)
    [Next sequence number: 1302    (relative sequence number)]
    Acknowledgement number: 25649    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 64128 (scaled)
    Checksum: 0xcbc0 [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 13923709, TSecr 76163856
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 3808]
        [The RTT to ACK the segment was: 0.027368000 seconds]
Hypertext Transfer Protocol
    GET /wiki/skins/common/wikib
        Request Method: GET
        Request URI: /wiki/skins/common/wikib
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3812 2008-10-21 11:24:11.126832 192.168.100.130       129.70.186.31         HTTP     HTTP/1.1 200 OK [Packet size limited during capture]

Frame 3812 (325 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.126832000
    [Time delta from previous captured frame: 0.000091000 seconds]
    [Time delta from previous displayed frame: 0.000091000 seconds]
    [Time since reference or first frame: 47290.507396000 seconds]
    Frame Number: 3812
    Frame Length: 325 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 309
    Identification: 0xb7f2 (47090)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x2140 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 25649, Ack: 1302, Len: 257
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 25649    (relative sequence number)
    [Next sequence number: 25906    (relative sequence number)]
    Acknowledgement number: 1302    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 10112 (scaled)
    Checksum: 0x053e [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76163883, TSecr 13923709
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 3811]
        [The RTT to ACK the segment was: 0.000091000 seconds]
Hypertext Transfer Protocol
    HTTP/1.1 200 OK\r\n
        Request Version: HTTP/1.1
        Response Code: 200
    Server: ngi
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3813 2008-10-21 11:24:11.126888 192.168.100.130       129.70.186.31         HTTP     Continuation or non-HTTP traffic[Packet size limited during capture]

Frame 3813 (1516 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.126888000
    [Time delta from previous captured frame: 0.000056000 seconds]
    [Time delta from previous displayed frame: 0.000056000 seconds]
    [Time since reference or first frame: 47290.507452000 seconds]
    Frame Number: 3813
    Frame Length: 1516 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http:data]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0xb7f3 (47091)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1c98 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 25906, Ack: 1302, Len: 1448
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 25906    (relative sequence number)
    [Next sequence number: 27354    (relative sequence number)]
    Acknowledgement number: 1302    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 10112 (scaled)
    Checksum: 0xe755 [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76163883, TSecr 13923709
Hypertext Transfer Protocol
    Data (28 bytes)

0000  2f 2f 20 4d 65 64 69 61 57 69 6b 69 20 4a 61 76   // MediaWiki Jav
0010  61 53 63 72 69 70 74 20 73 75 70 70               aScript supp
        Data: 2F2F204D6564696157696B69204A61766153637269707420...
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3814 2008-10-21 11:24:11.126926 192.168.100.130       129.70.186.31         HTTP     Continuation or non-HTTP traffic[Packet size limited during capture]

Frame 3814 (1516 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.126926000
    [Time delta from previous captured frame: 0.000038000 seconds]
    [Time delta from previous displayed frame: 0.000038000 seconds]
    [Time since reference or first frame: 47290.507490000 seconds]
    Frame Number: 3814
    Frame Length: 1516 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http:data]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0xb7f4 (47092)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1c97 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 27354, Ack: 1302, Len: 1448
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 27354    (relative sequence number)
    [Next sequence number: 28802    (relative sequence number)]
    Acknowledgement number: 1302    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 10112 (scaled)
    Checksum: 0xd859 [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76163883, TSecr 13923709
Hypertext Transfer Protocol
    Data (28 bytes)

0000  6f 6b 4e 61 6d 65 2c 20 68 6f 6f 6b 46 75 6e 63   okName, hookFunc
0010  74 29 20 7b 0a 09 69 66 20 28 77 69               t) {..if (wi
        Data: 6F6B4E616D652C20686F6F6B46756E637429207B0A096966...
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3815 2008-10-21 11:24:11.126976 192.168.100.130       129.70.186.31         HTTP     Continuation or non-HTTP traffic[Packet size limited during capture]

Frame 3815 (1516 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.126976000
    [Time delta from previous captured frame: 0.000050000 seconds]
    [Time delta from previous displayed frame: 0.000050000 seconds]
    [Time since reference or first frame: 47290.507540000 seconds]
    Frame Number: 3815
    Frame Length: 1516 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http:data]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0xb7f5 (47093)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1c96 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 28802, Ack: 1302, Len: 1448
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 28802    (relative sequence number)
    [Next sequence number: 30250    (relative sequence number)]
    Acknowledgement number: 1302    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 10112 (scaled)
    Checksum: 0x2715 [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76163883, TSecr 13923709
Hypertext Transfer Protocol
    Data (28 bytes)

0000  42 79 54 61 67 4e 61 6d 65 28 27 69 6e 70 75 74   ByTagName('input
0010  27 29 3b 0a 09 76 61 72 20 72 61 64               ');..var rad
        Data: 42795461674E616D652827696E70757427293B0A09766172...
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3816 2008-10-21 11:24:11.127024 192.168.100.130       129.70.186.31         HTTP     Continuation or non-HTTP traffic[Packet size limited during capture]

Frame 3816 (1516 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.127024000
    [Time delta from previous captured frame: 0.000048000 seconds]
    [Time delta from previous displayed frame: 0.000048000 seconds]
    [Time since reference or first frame: 47290.507588000 seconds]
    Frame Number: 3816
    Frame Length: 1516 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http:data]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0xb7f6 (47094)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1c95 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 30250, Ack: 1302, Len: 1448
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 30250    (relative sequence number)
    [Next sequence number: 31698    (relative sequence number)]
    Acknowledgement number: 1302    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 10112 (scaled)
    Checksum: 0xa04b [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76163883, TSecr 13923709
Hypertext Transfer Protocol
    Data (28 bytes)

0000  66 20 28 64 6c 69 29 20 7b 0a 09 09 09 09 09 69   f (dli) {......i
0010  6e 70 75 74 73 5b 31 5d 2e 73 74 79               nputs[1].sty
        Data: 662028646C6929207B0A0909090909696E707574735B315D...
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3817 2008-10-21 11:24:11.127070 192.168.100.130       129.70.186.31         HTTP     Continuation or non-HTTP traffic[Packet size limited during capture]

Frame 3817 (1516 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.127070000
    [Time delta from previous captured frame: 0.000046000 seconds]
    [Time delta from previous displayed frame: 0.000046000 seconds]
    [Time since reference or first frame: 47290.507634000 seconds]
    Frame Number: 3817
    Frame Length: 1516 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http:data]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0xb7f7 (47095)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1c94 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 31698, Ack: 1302, Len: 1448
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 31698    (relative sequence number)
    [Next sequence number: 33146    (relative sequence number)]
    Acknowledgement number: 1302    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 10112 (scaled)
    Checksum: 0xb3f8 [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76163883, TSecr 13923709
Hypertext Transfer Protocol
    Data (28 bytes)

0000  73 5b 30 5d 2e 63 6c 61 73 73 4e 61 6d 65 20 3d   s[0].className =
0010  20 27 6d 61 69 6e 4c 65 67 65 6e 64                'mainLegend
        Data: 735B305D2E636C6173734E616D65203D20276D61696E4C65...
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3818 2008-10-21 11:24:11.127119 192.168.100.130       129.70.186.31         HTTP     Continuation or non-HTTP traffic[Packet size limited during capture]

Frame 3818 (1516 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.127119000
    [Time delta from previous captured frame: 0.000049000 seconds]
    [Time delta from previous displayed frame: 0.000049000 seconds]
    [Time since reference or first frame: 47290.507683000 seconds]
    Frame Number: 3818
    Frame Length: 1516 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http:data]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0xb7f8 (47096)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1c93 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 33146, Ack: 1302, Len: 1448
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 33146    (relative sequence number)
    [Next sequence number: 34594    (relative sequence number)]
    Acknowledgement number: 1302    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 10112 (scaled)
    Checksum: 0x8d97 [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76163883, TSecr 13923709
Hypertext Transfer Protocol
    Data (28 bytes)

0000  20 27 27 3b 0a 09 09 7d 0a 09 09 74 68 69 73 2e    '';...}...this.
0010  70 61 72 65 6e 74 4e 6f 64 65 2e 63               parentNode.c
        Data: 2027273B0A09097D0A0909746869732E706172656E744E6F...
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3819 2008-10-21 11:24:11.153719 129.70.186.31         192.168.100.130       TCP      41861 > http [ACK] Seq=1302 Ack=27354 Win=64128 Len=0 TSV=13923715 TSER=76163883

Frame 3819 (68 bytes on wire, 68 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.153719000
    [Time delta from previous captured frame: 0.026600000 seconds]
    [Time delta from previous displayed frame: 0.026600000 seconds]
    [Time since reference or first frame: 47290.534283000 seconds]
    Frame Number: 3819
    Frame Length: 68 bytes
    Capture Length: 68 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Sent by us (4)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 129.70.186.31 (129.70.186.31), Dst: 192.168.100.130 (192.168.100.130)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x2ba2 (11170)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 53
    Protocol: TCP (0x06)
    Header checksum: 0xb991 [correct]
        [Good: True]
        [Bad : False]
    Source: 129.70.186.31 (129.70.186.31)
    Destination: 192.168.100.130 (192.168.100.130)
Transmission Control Protocol, Src Port: 41861 (41861), Dst Port: http (80), Seq: 1302, Ack: 27354, Len: 0
    Source port: 41861 (41861)
    Destination port: http (80)
    Sequence number: 1302    (relative sequence number)
    Acknowledgement number: 27354    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 64128 (scaled)
    Checksum: 0x9d07 [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 13923715, TSecr 76163883

No.     Time                       Source                Destination           Protocol Info
   3820 2008-10-21 11:24:11.153744 192.168.100.130       129.70.186.31         HTTP     Continuation or non-HTTP traffic[Packet size limited during capture]

Frame 3820 (1516 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.153744000
    [Time delta from previous captured frame: 0.000025000 seconds]
    [Time delta from previous displayed frame: 0.000025000 seconds]
    [Time since reference or first frame: 47290.534308000 seconds]
    Frame Number: 3820
    Frame Length: 1516 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http:data]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0xb7f9 (47097)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1c92 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 34594, Ack: 1302, Len: 1448
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 34594    (relative sequence number)
    [Next sequence number: 36042    (relative sequence number)]
    Acknowledgement number: 1302    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 10112 (scaled)
    Checksum: 0x361f [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76163910, TSecr 13923715
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 3819]
        [The RTT to ACK the segment was: 0.000025000 seconds]
Hypertext Transfer Protocol
    Data (28 bytes)

0000  6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49   nt.getElementByI
0010  64 28 27 74 6f 63 74 69 74 6c 65 27               d('toctitle'
        Data: 6E742E676574456C656D656E74427949642827746F637469...
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3821 2008-10-21 11:24:11.153751 192.168.100.130       129.70.186.31         HTTP     Continuation or non-HTTP traffic[Packet size limited during capture]

Frame 3821 (1516 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.153751000
    [Time delta from previous captured frame: 0.000007000 seconds]
    [Time delta from previous displayed frame: 0.000007000 seconds]
    [Time since reference or first frame: 47290.534315000 seconds]
    Frame Number: 3821
    Frame Length: 1516 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http:data]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0xb7fa (47098)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1c91 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 36042, Ack: 1302, Len: 1448
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 36042    (relative sequence number)
    [Next sequence number: 37490    (relative sequence number)]
    Acknowledgement number: 1302    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 10112 (scaled)
    Checksum: 0x874a [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76163910, TSecr 13923715
Hypertext Transfer Protocol
    Data (28 bytes)

0000  6d 45 64 69 74 42 75 74 74 6f 6e 73 20 3d 20 5b   mEditButtons = [
0010  5d 3b 20 2f 2f 20 65 67 20 74 6f 20               ]; // eg to 
        Data: 6D45646974427574746F6E73203D205B5D3B202F2F206567...
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3822 2008-10-21 11:24:11.153760 192.168.100.130       129.70.186.31         HTTP     Continuation or non-HTTP traffic[Packet size limited during capture]

Frame 3822 (1516 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.153760000
    [Time delta from previous captured frame: 0.000009000 seconds]
    [Time delta from previous displayed frame: 0.000009000 seconds]
    [Time since reference or first frame: 47290.534324000 seconds]
    Frame Number: 3822
    Frame Length: 1516 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http:data]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0xb7fb (47099)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1c90 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 37490, Ack: 1302, Len: 1448
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 37490    (relative sequence number)
    [Next sequence number: 38938    (relative sequence number)]
    Acknowledgement number: 1302    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 10112 (scaled)
    Checksum: 0xd371 [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76163910, TSecr 13923715
Hypertext Transfer Protocol
    Data (28 bytes)

0000  72 6f 77 73 65 72 73 20 77 68 69 63 68 20 64 6f   rowsers which do
0010  6e 27 74 20 66 75 6c 6c 79 0a 09 2f               n't fully../
        Data: 726F777365727320776869636820646F6E27742066756C6C...
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3823 2008-10-21 11:24:11.153981 129.70.186.31         192.168.100.130       TCP      41861 > http [ACK] Seq=1302 Ack=30250 Win=64128 Len=0 TSV=13923715 TSER=76163883

Frame 3823 (68 bytes on wire, 68 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.153981000
    [Time delta from previous captured frame: 0.000221000 seconds]
    [Time delta from previous displayed frame: 0.000221000 seconds]
    [Time since reference or first frame: 47290.534545000 seconds]
    Frame Number: 3823
    Frame Length: 68 bytes
    Capture Length: 68 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Sent by us (4)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 129.70.186.31 (129.70.186.31), Dst: 192.168.100.130 (192.168.100.130)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x2ba3 (11171)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 53
    Protocol: TCP (0x06)
    Header checksum: 0xb990 [correct]
        [Good: True]
        [Bad : False]
    Source: 129.70.186.31 (129.70.186.31)
    Destination: 192.168.100.130 (192.168.100.130)
Transmission Control Protocol, Src Port: 41861 (41861), Dst Port: http (80), Seq: 1302, Ack: 30250, Len: 0
    Source port: 41861 (41861)
    Destination port: http (80)
    Sequence number: 1302    (relative sequence number)
    Acknowledgement number: 30250    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 64128 (scaled)
    Checksum: 0x91b7 [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 13923715, TSecr 76163883

No.     Time                       Source                Destination           Protocol Info
   3824 2008-10-21 11:24:11.154025 192.168.100.130       129.70.186.31         HTTP     Continuation or non-HTTP traffic[Packet size limited during capture]

Frame 3824 (1516 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.154025000
    [Time delta from previous captured frame: 0.000044000 seconds]
    [Time delta from previous displayed frame: 0.000044000 seconds]
    [Time since reference or first frame: 47290.534589000 seconds]
    Frame Number: 3824
    Frame Length: 1516 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http:data]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0xb7fc (47100)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1c8f [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 38938, Ack: 1302, Len: 1448
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 38938    (relative sequence number)
    [Next sequence number: 40386    (relative sequence number)]
    Acknowledgement number: 1302    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 10112 (scaled)
    Checksum: 0x3797 [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76163910, TSecr 13923715
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 3823]
        [The RTT to ACK the segment was: 0.000044000 seconds]
Hypertext Transfer Protocol
    Data (28 bytes)

0000  20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65    document.docume
0010  6e 74 45 6c 65 6d 65 6e 74 2e 73 63               ntElement.sc
        Data: 20646F63756D656E742E646F63756D656E74456C656D656E...
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3825 2008-10-21 11:24:11.154064 192.168.100.130       129.70.186.31         HTTP     Continuation or non-HTTP traffic[Packet size limited during capture]

Frame 3825 (1516 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.154064000
    [Time delta from previous captured frame: 0.000039000 seconds]
    [Time delta from previous displayed frame: 0.000039000 seconds]
    [Time since reference or first frame: 47290.534628000 seconds]
    Frame Number: 3825
    Frame Length: 1516 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http:data]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0xb7fd (47101)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1c8e [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 40386, Ack: 1302, Len: 1448
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 40386    (relative sequence number)
    [Next sequence number: 41834    (relative sequence number)]
    Acknowledgement number: 1302    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 10112 (scaled)
    Checksum: 0x61cb [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76163910, TSecr 13923715
Hypertext Transfer Protocol
    Data (28 bytes)

0000  74 61 72 74 20 3d 20 73 74 61 72 74 50 6f 73 20   tart = startPos 
0010  2b 20 74 61 67 4f 70 65 6e 2e 6c 65               + tagOpen.le
        Data: 74617274203D207374617274506F73202B207461674F7065...
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3826 2008-10-21 11:24:11.154133 129.70.186.31         192.168.100.130       TCP      41861 > http [ACK] Seq=1302 Ack=33146 Win=64128 Len=0 TSV=13923715 TSER=76163883

Frame 3826 (68 bytes on wire, 68 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.154133000
    [Time delta from previous captured frame: 0.000069000 seconds]
    [Time delta from previous displayed frame: 0.000069000 seconds]
    [Time since reference or first frame: 47290.534697000 seconds]
    Frame Number: 3826
    Frame Length: 68 bytes
    Capture Length: 68 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Sent by us (4)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 129.70.186.31 (129.70.186.31), Dst: 192.168.100.130 (192.168.100.130)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x2ba4 (11172)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 53
    Protocol: TCP (0x06)
    Header checksum: 0xb98f [correct]
        [Good: True]
        [Bad : False]
    Source: 129.70.186.31 (129.70.186.31)
    Destination: 192.168.100.130 (192.168.100.130)
Transmission Control Protocol, Src Port: 41861 (41861), Dst Port: http (80), Seq: 1302, Ack: 33146, Len: 0
    Source port: 41861 (41861)
    Destination port: http (80)
    Sequence number: 1302    (relative sequence number)
    Acknowledgement number: 33146    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 64128 (scaled)
    Checksum: 0x8667 [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 13923715, TSecr 76163883

No.     Time                       Source                Destination           Protocol Info
   3827 2008-10-21 11:24:11.154162 192.168.100.130       129.70.186.31         HTTP     Continuation or non-HTTP traffic[Packet size limited during capture]

Frame 3827 (1516 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.154162000
    [Time delta from previous captured frame: 0.000029000 seconds]
    [Time delta from previous displayed frame: 0.000029000 seconds]
    [Time since reference or first frame: 47290.534726000 seconds]
    Frame Number: 3827
    Frame Length: 1516 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http:data]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0xb7fe (47102)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1c8d [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 41834, Ack: 1302, Len: 1448
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 41834    (relative sequence number)
    [Next sequence number: 43282    (relative sequence number)]
    Acknowledgement number: 1302    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 10112 (scaled)
    Checksum: 0xe6e4 [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76163910, TSecr 13923715
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 3826]
        [The RTT to ACK the segment was: 0.000029000 seconds]
Hypertext Transfer Protocol
    Data (28 bytes)

0000  21 6e 6f 64 65 4c 69 73 74 20 29 20 7b 0a 09 09   !nodeList ) {...
0010  2f 2f 20 73 6b 69 6e 73 20 77 69 74               // skins wit
        Data: 216E6F64654C6973742029207B0A09092F2F20736B696E73...
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3828 2008-10-21 11:24:11.154215 192.168.100.130       129.70.186.31         HTTP     Continuation or non-HTTP traffic[Packet size limited during capture]

Frame 3828 (1516 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.154215000
    [Time delta from previous captured frame: 0.000053000 seconds]
    [Time delta from previous displayed frame: 0.000053000 seconds]
    [Time since reference or first frame: 47290.534779000 seconds]
    Frame Number: 3828
    Frame Length: 1516 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http:data]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0xb7ff (47103)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1c8c [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 43282, Ack: 1302, Len: 1448
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 43282    (relative sequence number)
    [Next sequence number: 44730    (relative sequence number)]
    Acknowledgement number: 1302    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 10112 (scaled)
    Checksum: 0xc01b [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76163910, TSecr 13923715
Hypertext Transfer Protocol
    Data (28 bytes)

0000  69 6e 65 64 20 77 69 74 68 20 64 6f 63 75 6d 65   ined with docume
0010  6e 74 2e 67 65 74 45 6c 65 6d 65 6e               nt.getElemen
        Data: 696E6564207769746820646F63756D656E742E676574456C...
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3829 2008-10-21 11:24:11.154223 192.168.100.130       129.70.186.31         HTTP     Continuation or non-HTTP traffic[Packet size limited during capture]

Frame 3829 (1516 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.154223000
    [Time delta from previous captured frame: 0.000008000 seconds]
    [Time delta from previous displayed frame: 0.000008000 seconds]
    [Time since reference or first frame: 47290.534787000 seconds]
    Frame Number: 3829
    Frame Length: 1516 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http:data]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0xb800 (47104)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1c8b [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 44730, Ack: 1302, Len: 1448
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 44730    (relative sequence number)
    [Next sequence number: 46178    (relative sequence number)]
    Acknowledgement number: 1302    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 10112 (scaled)
    Checksum: 0xf2c4 [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76163910, TSecr 13923715
Hypertext Transfer Protocol
    Data (28 bytes)

0000  2b 3d 20 22 20 5b 22 2b 61 63 63 65 73 73 6b 65   += " ["+accesske
0010  79 2b 22 5d 22 3b 0a 09 7d 0a 09 69               y+"]";..}..i
        Data: 2B3D2022205B222B6163636573736B65792B225D223B0A09...
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3830 2008-10-21 11:24:11.154231 192.168.100.130       129.70.186.31         HTTP     Continuation or non-HTTP traffic[Packet size limited during capture]

Frame 3830 (276 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.154231000
    [Time delta from previous captured frame: 0.000008000 seconds]
    [Time delta from previous displayed frame: 0.000008000 seconds]
    [Time since reference or first frame: 47290.534795000 seconds]
    Frame Number: 3830
    Frame Length: 276 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http:data]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 260
    Identification: 0xb801 (47105)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x2162 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 46178, Ack: 1302, Len: 208
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 46178    (relative sequence number)
    [Next sequence number: 46386    (relative sequence number)]
    Acknowledgement number: 1302    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 10112 (scaled)
    Checksum: 0x7cc4 [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76163910, TSecr 13923715
Hypertext Transfer Protocol
    Data (28 bytes)

0000  09 09 61 20 3d 20 6e 2e 63 68 69 6c 64 4e 6f 64   ..a = n.childNod
0010  65 73 5b 30 5d 3b 0a 09 09 09 09 7d               es[0];.....}
        Data: 090961203D206E2E6368696C644E6F6465735B305D3B0A09...
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3831 2008-10-21 11:24:11.178516 129.70.186.31         192.168.100.130       TCP      41861 > http [ACK] Seq=1302 Ack=36042 Win=64128 Len=0 TSV=13923722 TSER=76163883

Frame 3831 (68 bytes on wire, 68 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.178516000
    [Time delta from previous captured frame: 0.024285000 seconds]
    [Time delta from previous displayed frame: 0.024285000 seconds]
    [Time since reference or first frame: 47290.559080000 seconds]
    Frame Number: 3831
    Frame Length: 68 bytes
    Capture Length: 68 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Sent by us (4)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 129.70.186.31 (129.70.186.31), Dst: 192.168.100.130 (192.168.100.130)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x2ba5 (11173)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 53
    Protocol: TCP (0x06)
    Header checksum: 0xb98e [correct]
        [Good: True]
        [Bad : False]
    Source: 129.70.186.31 (129.70.186.31)
    Destination: 192.168.100.130 (192.168.100.130)
Transmission Control Protocol, Src Port: 41861 (41861), Dst Port: http (80), Seq: 1302, Ack: 36042, Len: 0
    Source port: 41861 (41861)
    Destination port: http (80)
    Sequence number: 1302    (relative sequence number)
    Acknowledgement number: 36042    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 64128 (scaled)
    Checksum: 0x7b10 [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 13923722, TSecr 76163883

No.     Time                       Source                Destination           Protocol Info
   3832 2008-10-21 11:24:11.178541 192.168.100.130       129.70.186.31         HTTP     Continuation or non-HTTP traffic[Packet size limited during capture]

Frame 3832 (1516 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.178541000
    [Time delta from previous captured frame: 0.000025000 seconds]
    [Time delta from previous displayed frame: 0.000025000 seconds]
    [Time since reference or first frame: 47290.559105000 seconds]
    Frame Number: 3832
    Frame Length: 1516 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http:data]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0xb802 (47106)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1c89 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 46386, Ack: 1302, Len: 1448
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 46386    (relative sequence number)
    [Next sequence number: 47834    (relative sequence number)]
    Acknowledgement number: 1302    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 10112 (scaled)
    Checksum: 0xfb00 [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76163935, TSecr 13923722
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 3831]
        [The RTT to ACK the segment was: 0.000025000 seconds]
Hypertext Transfer Protocol
    Data (28 bytes)

0000  7b 0a 09 09 09 09 09 61 2e 61 63 63 65 73 73 4b   {......a.accessK
0010  65 79 20 3d 20 74 61 5b 69 64 5d 5b               ey = ta[id][
        Data: 7B0A0909090909612E6163636573734B6579203D2074615B...
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3833 2008-10-21 11:24:11.178548 192.168.100.130       129.70.186.31         HTTP     Continuation or non-HTTP traffic[Packet size limited during capture]

Frame 3833 (1516 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.178548000
    [Time delta from previous captured frame: 0.000007000 seconds]
    [Time delta from previous displayed frame: 0.000007000 seconds]
    [Time since reference or first frame: 47290.559112000 seconds]
    Frame Number: 3833
    Frame Length: 1516 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http:data]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0xb803 (47107)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1c88 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 47834, Ack: 1302, Len: 1448
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 47834    (relative sequence number)
    [Next sequence number: 49282    (relative sequence number)]
    Acknowledgement number: 1302    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 10112 (scaled)
    Checksum: 0x85d3 [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76163935, TSecr 13923722
Hypertext Transfer Protocol
    Data (28 bytes)

0000  6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29   me.toLowerCase()
0010  20 21 3d 20 27 61 27 0a 09 09 09 09                != 'a'.....
        Data: 6D652E746F4C6F77657243617365282920213D202761270A...
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3834 2008-10-21 11:24:11.178555 192.168.100.130       129.70.186.31         HTTP     Continuation or non-HTTP traffic[Packet size limited during capture]

Frame 3834 (1516 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.178555000
    [Time delta from previous captured frame: 0.000007000 seconds]
    [Time delta from previous displayed frame: 0.000007000 seconds]
    [Time since reference or first frame: 47290.559119000 seconds]
    Frame Number: 3834
    Frame Length: 1516 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http:data]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0xb804 (47108)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1c87 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 49282, Ack: 1302, Len: 1448
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 49282    (relative sequence number)
    [Next sequence number: 50730    (relative sequence number)]
    Acknowledgement number: 1302    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 10112 (scaled)
    Checksum: 0x27a6 [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76163935, TSecr 13923722
Hypertext Transfer Protocol
    Data (28 bytes)

0000  65 6d 65 6e 74 5f 61 63 74 69 76 61 74 69 6f 6e   ement_activation
0010  28 69 64 61 2c 69 64 62 29 20 7b 0a               (ida,idb) {.
        Data: 656D656E745F61637469766174696F6E286964612C696462...
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3835 2008-10-21 11:24:11.179553 129.70.186.31         192.168.100.130       TCP      41861 > http [ACK] Seq=1302 Ack=38938 Win=64128 Len=0 TSV=13923722 TSER=76163910

Frame 3835 (68 bytes on wire, 68 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.179553000
    [Time delta from previous captured frame: 0.000998000 seconds]
    [Time delta from previous displayed frame: 0.000998000 seconds]
    [Time since reference or first frame: 47290.560117000 seconds]
    Frame Number: 3835
    Frame Length: 68 bytes
    Capture Length: 68 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Sent by us (4)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 129.70.186.31 (129.70.186.31), Dst: 192.168.100.130 (192.168.100.130)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x2ba6 (11174)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 53
    Protocol: TCP (0x06)
    Header checksum: 0xb98d [correct]
        [Good: True]
        [Bad : False]
    Source: 129.70.186.31 (129.70.186.31)
    Destination: 192.168.100.130 (192.168.100.130)
Transmission Control Protocol, Src Port: 41861 (41861), Dst Port: http (80), Seq: 1302, Ack: 38938, Len: 0
    Source port: 41861 (41861)
    Destination port: http (80)
    Sequence number: 1302    (relative sequence number)
    Acknowledgement number: 38938    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 64128 (scaled)
    Checksum: 0x6fa5 [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 13923722, TSecr 76163910

No.     Time                       Source                Destination           Protocol Info
   3836 2008-10-21 11:24:11.179578 192.168.100.130       129.70.186.31         HTTP     Continuation or non-HTTP traffic[Packet size limited during capture]

Frame 3836 (1516 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.179578000
    [Time delta from previous captured frame: 0.000025000 seconds]
    [Time delta from previous displayed frame: 0.000025000 seconds]
    [Time since reference or first frame: 47290.560142000 seconds]
    Frame Number: 3836
    Frame Length: 1516 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http:data]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0xb805 (47109)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1c86 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 50730, Ack: 1302, Len: 1448
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 50730    (relative sequence number)
    [Next sequence number: 52178    (relative sequence number)]
    Acknowledgement number: 1302    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 10112 (scaled)
    Checksum: 0xdf80 [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76163936, TSecr 13923722
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 3835]
        [The RTT to ACK the segment was: 0.000025000 seconds]
Hypertext Transfer Protocol
    Data (28 bytes)

0000  61 67 65 73 66 69 6c 74 65 72 5f 64 6f 28 29 20   agesfilter_do() 
0010  7b 0a 09 69 66 20 28 20 21 61 6c 6c               {..if ( !all
        Data: 6167657366696C7465725F646F2829207B0A096966202820...
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3837 2008-10-21 11:24:11.179586 192.168.100.130       129.70.186.31         HTTP     Continuation or non-HTTP traffic[Packet size limited during capture]

Frame 3837 (1516 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.179586000
    [Time delta from previous captured frame: 0.000008000 seconds]
    [Time delta from previous displayed frame: 0.000008000 seconds]
    [Time since reference or first frame: 47290.560150000 seconds]
    Frame Number: 3837
    Frame Length: 1516 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http:data]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0xb806 (47110)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1c85 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 52178, Ack: 1302, Len: 1448
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 52178    (relative sequence number)
    [Next sequence number: 53626    (relative sequence number)]
    Acknowledgement number: 1302    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 10112 (scaled)
    Checksum: 0x5fd3 [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76163936, TSecr 13923722
Hypertext Transfer Protocol
    Data (28 bytes)

0000  31 27 29 20 5d 3b 0a 09 09 76 61 72 20 72 6f 77   1') ];...var row
0010  32 20 3d 20 74 65 6d 70 6c 69 73 74               2 = templist
        Data: 312729205D3B0A090976617220726F7732203D2074656D70...
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3838 2008-10-21 11:24:11.179593 192.168.100.130       129.70.186.31         HTTP     Continuation or non-HTTP traffic[Packet size limited during capture]

Frame 3838 (1516 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.179593000
    [Time delta from previous captured frame: 0.000007000 seconds]
    [Time delta from previous displayed frame: 0.000007000 seconds]
    [Time since reference or first frame: 47290.560157000 seconds]
    Frame Number: 3838
    Frame Length: 1516 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http:data]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0xb807 (47111)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1c84 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 53626, Ack: 1302, Len: 1448
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 53626    (relative sequence number)
    [Next sequence number: 55074    (relative sequence number)]
    Acknowledgement number: 1302    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 10112 (scaled)
    Checksum: 0xcb25 [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76163936, TSecr 13923722
Hypertext Transfer Protocol
    Data (28 bytes)

0000  61 6d 65 73 5b 6b 5d 2e 74 65 73 74 28 6f 45 6c   ames[k].test(oEl
0010  65 6d 65 6e 74 2e 63 6c 61 73 73 4e               ement.classN
        Data: 616D65735B6B5D2E74657374286F456C656D656E742E636C...
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3839 2008-10-21 11:24:11.180885 129.70.186.31         192.168.100.130       TCP      41861 > http [ACK] Seq=1302 Ack=41834 Win=64128 Len=0 TSV=13923722 TSER=76163910

Frame 3839 (68 bytes on wire, 68 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.180885000
    [Time delta from previous captured frame: 0.001292000 seconds]
    [Time delta from previous displayed frame: 0.001292000 seconds]
    [Time since reference or first frame: 47290.561449000 seconds]
    Frame Number: 3839
    Frame Length: 68 bytes
    Capture Length: 68 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Sent by us (4)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 129.70.186.31 (129.70.186.31), Dst: 192.168.100.130 (192.168.100.130)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x2ba7 (11175)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 53
    Protocol: TCP (0x06)
    Header checksum: 0xb98c [correct]
        [Good: True]
        [Bad : False]
    Source: 129.70.186.31 (129.70.186.31)
    Destination: 192.168.100.130 (192.168.100.130)
Transmission Control Protocol, Src Port: 41861 (41861), Dst Port: http (80), Seq: 1302, Ack: 41834, Len: 0
    Source port: 41861 (41861)
    Destination port: http (80)
    Sequence number: 1302    (relative sequence number)
    Acknowledgement number: 41834    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 64128 (scaled)
    Checksum: 0x6455 [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 13923722, TSecr 76163910

No.     Time                       Source                Destination           Protocol Info
   3840 2008-10-21 11:24:11.180910 192.168.100.130       129.70.186.31         HTTP     Continuation or non-HTTP traffic[Packet size limited during capture]

Frame 3840 (1516 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.180910000
    [Time delta from previous captured frame: 0.000025000 seconds]
    [Time delta from previous displayed frame: 0.000025000 seconds]
    [Time since reference or first frame: 47290.561474000 seconds]
    Frame Number: 3840
    Frame Length: 1516 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http:data]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0xb808 (47112)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1c83 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 55074, Ack: 1302, Len: 1448
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 55074    (relative sequence number)
    [Next sequence number: 56522    (relative sequence number)]
    Acknowledgement number: 1302    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 10112 (scaled)
    Checksum: 0x0dbb [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76163937, TSecr 13923722
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 3839]
        [The RTT to ACK the segment was: 0.000025000 seconds]
Hypertext Transfer Protocol
    Data (28 bytes)

0000  65 2e 67 69 66 22 3b 0a 76 61 72 20 74 73 5f 65   e.gif";.var ts_e
0010  75 72 6f 70 65 61 6e 64 61 74 65 20               uropeandate 
        Data: 652E676966223B0A7661722074735F6575726F7065616E64...
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3841 2008-10-21 11:24:11.180968 192.168.100.130       129.70.186.31         HTTP     Continuation or non-HTTP traffic[Packet size limited during capture]

Frame 3841 (1516 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.180968000
    [Time delta from previous captured frame: 0.000058000 seconds]
    [Time delta from previous displayed frame: 0.000058000 seconds]
    [Time since reference or first frame: 47290.561532000 seconds]
    Frame Number: 3841
    Frame Length: 1516 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http:data]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0xb809 (47113)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1c82 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 56522, Ack: 1302, Len: 1448
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 56522    (relative sequence number)
    [Next sequence number: 57970    (relative sequence number)]
    Acknowledgement number: 1302    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 10112 (scaled)
    Checksum: 0x8982 [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76163937, TSecr 13923722
Hypertext Transfer Protocol
    Data (28 bytes)

0000  65 6e 74 29 20 72 65 74 75 72 6e 20 65 6c 2e 74   ent) return el.t
0010  65 78 74 43 6f 6e 74 65 6e 74 3b 20               extContent; 
        Data: 656E74292072657475726E20656C2E74657874436F6E7465...
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3842 2008-10-21 11:24:11.181015 192.168.100.130       129.70.186.31         HTTP     Continuation or non-HTTP traffic[Packet size limited during capture]

Frame 3842 (1516 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.181015000
    [Time delta from previous captured frame: 0.000047000 seconds]
    [Time delta from previous displayed frame: 0.000047000 seconds]
    [Time since reference or first frame: 47290.561579000 seconds]
    Frame Number: 3842
    Frame Length: 1516 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http:data]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0xb80a (47114)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1c81 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 57970, Ack: 1302, Len: 1448
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 57970    (relative sequence number)
    [Next sequence number: 59418    (relative sequence number)]
    Acknowledgement number: 1302    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 10112 (scaled)
    Checksum: 0x78f4 [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76163937, TSecr 13923722
Hypertext Transfer Protocol
    Data (28 bytes)

0000  2f 29 29 0a 09 09 73 6f 72 74 66 6e 20 3d 20 74   /))...sortfn = t
0010  73 5f 73 6f 72 74 5f 64 61 74 65 3b               s_sort_date;
        Data: 2F29290A0909736F7274666E203D2074735F736F72745F64...
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3843 2008-10-21 11:24:11.182744 129.70.186.31         192.168.100.130       TCP      41861 > http [ACK] Seq=1302 Ack=44730 Win=64128 Len=0 TSV=13923723 TSER=76163910

Frame 3843 (68 bytes on wire, 68 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.182744000
    [Time delta from previous captured frame: 0.001729000 seconds]
    [Time delta from previous displayed frame: 0.001729000 seconds]
    [Time since reference or first frame: 47290.563308000 seconds]
    Frame Number: 3843
    Frame Length: 68 bytes
    Capture Length: 68 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Sent by us (4)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 129.70.186.31 (129.70.186.31), Dst: 192.168.100.130 (192.168.100.130)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x2ba8 (11176)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 53
    Protocol: TCP (0x06)
    Header checksum: 0xb98b [correct]
        [Good: True]
        [Bad : False]
    Source: 129.70.186.31 (129.70.186.31)
    Destination: 192.168.100.130 (192.168.100.130)
Transmission Control Protocol, Src Port: 41861 (41861), Dst Port: http (80), Seq: 1302, Ack: 44730, Len: 0
    Source port: 41861 (41861)
    Destination port: http (80)
    Sequence number: 1302    (relative sequence number)
    Acknowledgement number: 44730    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 64128 (scaled)
    Checksum: 0x5904 [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 13923723, TSecr 76163910

No.     Time                       Source                Destination           Protocol Info
   3844 2008-10-21 11:24:11.182770 192.168.100.130       129.70.186.31         HTTP     Continuation or non-HTTP traffic[Packet size limited during capture]

Frame 3844 (1516 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.182770000
    [Time delta from previous captured frame: 0.000026000 seconds]
    [Time delta from previous displayed frame: 0.000026000 seconds]
    [Time since reference or first frame: 47290.563334000 seconds]
    Frame Number: 3844
    Frame Length: 1516 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http:data]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0xb80b (47115)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1c80 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 59418, Ack: 1302, Len: 1448
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 59418    (relative sequence number)
    [Next sequence number: 60866    (relative sequence number)]
    Acknowledgement number: 1302    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 10112 (scaled)
    Checksum: 0xa3ae [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76163939, TSecr 13923723
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 3843]
        [The RTT to ACK the segment was: 0.000026000 seconds]
Hypertext Transfer Protocol
    Data (28 bytes)

0000  20 30 3b 20 69 20 3c 20 73 70 61 6e 73 2e 6c 65    0; i < spans.le
0010  6e 67 74 68 3b 20 69 2b 2b 29 20 7b               ngth; i++) {
        Data: 20303B2069203C207370616E732E6C656E6774683B20692B...
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3845 2008-10-21 11:24:11.182778 192.168.100.130       129.70.186.31         HTTP     Continuation or non-HTTP traffic[Packet size limited during capture]

Frame 3845 (1516 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.182778000
    [Time delta from previous captured frame: 0.000008000 seconds]
    [Time delta from previous displayed frame: 0.000008000 seconds]
    [Time since reference or first frame: 47290.563342000 seconds]
    Frame Number: 3845
    Frame Length: 1516 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http:data]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0xb80c (47116)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1c7f [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 60866, Ack: 1302, Len: 1448
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 60866    (relative sequence number)
    [Next sequence number: 62314    (relative sequence number)]
    Acknowledgement number: 1302    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 10112 (scaled)
    Checksum: 0xecc2 [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76163939, TSecr 13923723
Hypertext Transfer Protocol
    Data (28 bytes)

0000  20 22 30 30 30 30 30 30 30 30 22 3b 0a 7d 0a 0a    "00000000";.}..
0010  66 75 6e 63 74 69 6f 6e 20 74 73 5f               function ts_
        Data: 20223030303030303030223B0A7D0A0A66756E6374696F6E...
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3846 2008-10-21 11:24:11.182785 192.168.100.130       129.70.186.31         HTTP     Continuation or non-HTTP traffic[Packet size limited during capture]

Frame 3846 (1516 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.182785000
    [Time delta from previous captured frame: 0.000007000 seconds]
    [Time delta from previous displayed frame: 0.000007000 seconds]
    [Time since reference or first frame: 47290.563349000 seconds]
    Frame Number: 3846
    Frame Length: 1516 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http:data]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0xb80d (47117)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1c7e [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 62314, Ack: 1302, Len: 1448
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 62314    (relative sequence number)
    [Next sequence number: 63762    (relative sequence number)]
    Acknowledgement number: 1302    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 10112 (scaled)
    Checksum: 0x23c8 [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76163939, TSecr 13923723
Hypertext Transfer Protocol
    Data (28 bytes)

0000  2e 73 70 6c 69 74 28 22 20 22 29 3b 0a 09 09 09   .split(" ");....
0010  76 61 72 20 6e 65 77 43 6c 61 73 73               var newClass
        Data: 2E73706C697428222022293B0A090909766172206E657743...
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3847 2008-10-21 11:24:11.183066 129.70.186.31         192.168.100.130       TCP      41861 > http [ACK] Seq=1302 Ack=46386 Win=64128 Len=0 TSV=13923723 TSER=76163910

Frame 3847 (68 bytes on wire, 68 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.183066000
    [Time delta from previous captured frame: 0.000281000 seconds]
    [Time delta from previous displayed frame: 0.000281000 seconds]
    [Time since reference or first frame: 47290.563630000 seconds]
    Frame Number: 3847
    Frame Length: 68 bytes
    Capture Length: 68 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Sent by us (4)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 129.70.186.31 (129.70.186.31), Dst: 192.168.100.130 (192.168.100.130)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x2ba9 (11177)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 53
    Protocol: TCP (0x06)
    Header checksum: 0xb98a [correct]
        [Good: True]
        [Bad : False]
    Source: 129.70.186.31 (129.70.186.31)
    Destination: 192.168.100.130 (192.168.100.130)
Transmission Control Protocol, Src Port: 41861 (41861), Dst Port: http (80), Seq: 1302, Ack: 46386, Len: 0
    Source port: 41861 (41861)
    Destination port: http (80)
    Sequence number: 1302    (relative sequence number)
    Acknowledgement number: 46386    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 64128 (scaled)
    Checksum: 0x528c [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 13923723, TSecr 76163910

No.     Time                       Source                Destination           Protocol Info
   3848 2008-10-21 11:24:11.183087 192.168.100.130       129.70.186.31         HTTP     Continuation or non-HTTP traffic[Packet size limited during capture]

Frame 3848 (1516 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.183087000
    [Time delta from previous captured frame: 0.000021000 seconds]
    [Time delta from previous displayed frame: 0.000021000 seconds]
    [Time since reference or first frame: 47290.563651000 seconds]
    Frame Number: 3848
    Frame Length: 1516 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http:data]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0xb80e (47118)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1c7d [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 63762, Ack: 1302, Len: 1448
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 63762    (relative sequence number)
    [Next sequence number: 65210    (relative sequence number)]
    Acknowledgement number: 1302    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 10112 (scaled)
    Checksum: 0x5284 [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76163939, TSecr 13923723
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 3847]
        [The RTT to ACK the segment was: 0.000021000 seconds]
Hypertext Transfer Protocol
    Data (28 bytes)

0000  6e 74 42 79 49 64 28 27 63 6f 6e 74 65 6e 74 27   ntById('content'
0010  29 0a 09 09 26 26 20 64 6f 63 75 6d               )...&& docum
        Data: 6E74427949642827636F6E74656E7427290A090926262064...
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3849 2008-10-21 11:24:11.183095 192.168.100.130       129.70.186.31         HTTP     Continuation or non-HTTP traffic[Packet size limited during capture]

Frame 3849 (1389 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.183095000
    [Time delta from previous captured frame: 0.000008000 seconds]
    [Time delta from previous displayed frame: 0.000008000 seconds]
    [Time since reference or first frame: 47290.563659000 seconds]
    Frame Number: 3849
    Frame Length: 1389 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http:data]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1373
    Identification: 0xb80f (47119)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1cfb [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 65210, Ack: 1302, Len: 1321
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 65210    (relative sequence number)
    [Next sequence number: 66531    (relative sequence number)]
    Acknowledgement number: 1302    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 10112 (scaled)
    Checksum: 0x344d [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76163939, TSecr 13923723
Hypertext Transfer Protocol
    Data (28 bytes)

0000  42 79 54 61 67 4e 61 6d 65 29 29 20 7b 0a 09 09   ByTagName)) {...
0010  72 65 74 75 72 6e 3b 0a 09 7d 0a 0a               return;..}..
        Data: 42795461674E616D652929207B0A090972657475726E3B0A...
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3850 2008-10-21 11:24:11.203257 129.70.186.31         192.168.100.130       TCP      41861 > http [ACK] Seq=1302 Ack=49282 Win=64128 Len=0 TSV=13923728 TSER=76163935

Frame 3850 (68 bytes on wire, 68 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.203257000
    [Time delta from previous captured frame: 0.020162000 seconds]
    [Time delta from previous displayed frame: 0.020162000 seconds]
    [Time since reference or first frame: 47290.583821000 seconds]
    Frame Number: 3850
    Frame Length: 68 bytes
    Capture Length: 68 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Sent by us (4)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 129.70.186.31 (129.70.186.31), Dst: 192.168.100.130 (192.168.100.130)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x2baa (11178)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 53
    Protocol: TCP (0x06)
    Header checksum: 0xb989 [correct]
        [Good: True]
        [Bad : False]
    Source: 129.70.186.31 (129.70.186.31)
    Destination: 192.168.100.130 (192.168.100.130)
Transmission Control Protocol, Src Port: 41861 (41861), Dst Port: http (80), Seq: 1302, Ack: 49282, Len: 0
    Source port: 41861 (41861)
    Destination port: http (80)
    Sequence number: 1302    (relative sequence number)
    Acknowledgement number: 49282    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 64128 (scaled)
    Checksum: 0x471e [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 13923728, TSecr 76163935

No.     Time                       Source                Destination           Protocol Info
   3851 2008-10-21 11:24:11.208505 129.70.186.31         192.168.100.130       TCP      41861 > http [ACK] Seq=1302 Ack=52178 Win=64128 Len=0 TSV=13923728 TSER=76163935

Frame 3851 (68 bytes on wire, 68 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.208505000
    [Time delta from previous captured frame: 0.005248000 seconds]
    [Time delta from previous displayed frame: 0.005248000 seconds]
    [Time since reference or first frame: 47290.589069000 seconds]
    Frame Number: 3851
    Frame Length: 68 bytes
    Capture Length: 68 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Sent by us (4)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 129.70.186.31 (129.70.186.31), Dst: 192.168.100.130 (192.168.100.130)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x2bab (11179)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 53
    Protocol: TCP (0x06)
    Header checksum: 0xb988 [correct]
        [Good: True]
        [Bad : False]
    Source: 129.70.186.31 (129.70.186.31)
    Destination: 192.168.100.130 (192.168.100.130)
Transmission Control Protocol, Src Port: 41861 (41861), Dst Port: http (80), Seq: 1302, Ack: 52178, Len: 0
    Source port: 41861 (41861)
    Destination port: http (80)
    Sequence number: 1302    (relative sequence number)
    Acknowledgement number: 52178    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 64128 (scaled)
    Checksum: 0x3bce [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 13923728, TSecr 76163935

No.     Time                       Source                Destination           Protocol Info
   3852 2008-10-21 11:24:11.209965 129.70.186.31         192.168.100.130       TCP      41861 > http [ACK] Seq=1302 Ack=55074 Win=64128 Len=0 TSV=13923728 TSER=76163936

Frame 3852 (68 bytes on wire, 68 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.209965000
    [Time delta from previous captured frame: 0.001460000 seconds]
    [Time delta from previous displayed frame: 0.001460000 seconds]
    [Time since reference or first frame: 47290.590529000 seconds]
    Frame Number: 3852
    Frame Length: 68 bytes
    Capture Length: 68 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Sent by us (4)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 129.70.186.31 (129.70.186.31), Dst: 192.168.100.130 (192.168.100.130)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x2bac (11180)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 53
    Protocol: TCP (0x06)
    Header checksum: 0xb987 [correct]
        [Good: True]
        [Bad : False]
    Source: 129.70.186.31 (129.70.186.31)
    Destination: 192.168.100.130 (192.168.100.130)
Transmission Control Protocol, Src Port: 41861 (41861), Dst Port: http (80), Seq: 1302, Ack: 55074, Len: 0
    Source port: 41861 (41861)
    Destination port: http (80)
    Sequence number: 1302    (relative sequence number)
    Acknowledgement number: 55074    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 64128 (scaled)
    Checksum: 0x307d [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 13923728, TSecr 76163936

No.     Time                       Source                Destination           Protocol Info
   3853 2008-10-21 11:24:11.210195 129.70.186.31         192.168.100.130       TCP      41861 > http [ACK] Seq=1302 Ack=57970 Win=64128 Len=0 TSV=13923729 TSER=76163937

Frame 3853 (68 bytes on wire, 68 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.210195000
    [Time delta from previous captured frame: 0.000230000 seconds]
    [Time delta from previous displayed frame: 0.000230000 seconds]
    [Time since reference or first frame: 47290.590759000 seconds]
    Frame Number: 3853
    Frame Length: 68 bytes
    Capture Length: 68 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Sent by us (4)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 129.70.186.31 (129.70.186.31), Dst: 192.168.100.130 (192.168.100.130)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x2bad (11181)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 53
    Protocol: TCP (0x06)
    Header checksum: 0xb986 [correct]
        [Good: True]
        [Bad : False]
    Source: 129.70.186.31 (129.70.186.31)
    Destination: 192.168.100.130 (192.168.100.130)
Transmission Control Protocol, Src Port: 41861 (41861), Dst Port: http (80), Seq: 1302, Ack: 57970, Len: 0
    Source port: 41861 (41861)
    Destination port: http (80)
    Sequence number: 1302    (relative sequence number)
    Acknowledgement number: 57970    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 64128 (scaled)
    Checksum: 0x252b [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 13923729, TSecr 76163937

No.     Time                       Source                Destination           Protocol Info
   3854 2008-10-21 11:24:11.210865 129.70.186.31         192.168.100.130       TCP      41861 > http [ACK] Seq=1302 Ack=60866 Win=64128 Len=0 TSV=13923729 TSER=76163937

Frame 3854 (68 bytes on wire, 68 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.210865000
    [Time delta from previous captured frame: 0.000670000 seconds]
    [Time delta from previous displayed frame: 0.000670000 seconds]
    [Time since reference or first frame: 47290.591429000 seconds]
    Frame Number: 3854
    Frame Length: 68 bytes
    Capture Length: 68 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Sent by us (4)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 129.70.186.31 (129.70.186.31), Dst: 192.168.100.130 (192.168.100.130)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x2bae (11182)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 53
    Protocol: TCP (0x06)
    Header checksum: 0xb985 [correct]
        [Good: True]
        [Bad : False]
    Source: 129.70.186.31 (129.70.186.31)
    Destination: 192.168.100.130 (192.168.100.130)
Transmission Control Protocol, Src Port: 41861 (41861), Dst Port: http (80), Seq: 1302, Ack: 60866, Len: 0
    Source port: 41861 (41861)
    Destination port: http (80)
    Sequence number: 1302    (relative sequence number)
    Acknowledgement number: 60866    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 64128 (scaled)
    Checksum: 0x19db [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 13923729, TSecr 76163937

No.     Time                       Source                Destination           Protocol Info
   3855 2008-10-21 11:24:11.211371 129.70.186.31         192.168.100.130       TCP      41861 > http [ACK] Seq=1302 Ack=63762 Win=64128 Len=0 TSV=13923729 TSER=76163939

Frame 3855 (68 bytes on wire, 68 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.211371000
    [Time delta from previous captured frame: 0.000506000 seconds]
    [Time delta from previous displayed frame: 0.000506000 seconds]
    [Time since reference or first frame: 47290.591935000 seconds]
    Frame Number: 3855
    Frame Length: 68 bytes
    Capture Length: 68 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Sent by us (4)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 129.70.186.31 (129.70.186.31), Dst: 192.168.100.130 (192.168.100.130)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x2baf (11183)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 53
    Protocol: TCP (0x06)
    Header checksum: 0xb984 [correct]
        [Good: True]
        [Bad : False]
    Source: 129.70.186.31 (129.70.186.31)
    Destination: 192.168.100.130 (192.168.100.130)
Transmission Control Protocol, Src Port: 41861 (41861), Dst Port: http (80), Seq: 1302, Ack: 63762, Len: 0
    Source port: 41861 (41861)
    Destination port: http (80)
    Sequence number: 1302    (relative sequence number)
    Acknowledgement number: 63762    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 64128 (scaled)
    Checksum: 0x0e89 [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 13923729, TSecr 76163939

No.     Time                       Source                Destination           Protocol Info
   3856 2008-10-21 11:24:11.211389 129.70.186.31         192.168.100.130       TCP      41861 > http [ACK] Seq=1302 Ack=66531 Win=64128 Len=0 TSV=13923730 TSER=76163939

Frame 3856 (68 bytes on wire, 68 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.211389000
    [Time delta from previous captured frame: 0.000018000 seconds]
    [Time delta from previous displayed frame: 0.000018000 seconds]
    [Time since reference or first frame: 47290.591953000 seconds]
    Frame Number: 3856
    Frame Length: 68 bytes
    Capture Length: 68 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Sent by us (4)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 129.70.186.31 (129.70.186.31), Dst: 192.168.100.130 (192.168.100.130)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x2bb0 (11184)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 53
    Protocol: TCP (0x06)
    Header checksum: 0xb983 [correct]
        [Good: True]
        [Bad : False]
    Source: 129.70.186.31 (129.70.186.31)
    Destination: 192.168.100.130 (192.168.100.130)
Transmission Control Protocol, Src Port: 41861 (41861), Dst Port: http (80), Seq: 1302, Ack: 66531, Len: 0
    Source port: 41861 (41861)
    Destination port: http (80)
    Sequence number: 1302    (relative sequence number)
    Acknowledgement number: 66531    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 64128 (scaled)
    Checksum: 0x03b7 [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 13923730, TSecr 76163939
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 3849]
        [The RTT to ACK the segment was: 0.028294000 seconds]

No.     Time                       Source                Destination           Protocol Info
   3857 2008-10-21 11:24:11.214915 129.70.186.31         192.168.100.130       HTTP     GET /wiki/skins/common/ajax. [Packet size limited during capture]

Frame 3857 (292 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.214915000
    [Time delta from previous captured frame: 0.003526000 seconds]
    [Time delta from previous displayed frame: 0.003526000 seconds]
    [Time since reference or first frame: 47290.595479000 seconds]
    Frame Number: 3857
    Frame Length: 292 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Sent by us (4)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 129.70.186.31 (129.70.186.31), Dst: 192.168.100.130 (192.168.100.130)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 276
    Identification: 0x2bb1 (11185)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 53
    Protocol: TCP (0x06)
    Header checksum: 0xb8a2 [correct]
        [Good: True]
        [Bad : False]
    Source: 129.70.186.31 (129.70.186.31)
    Destination: 192.168.100.130 (192.168.100.130)
Transmission Control Protocol, Src Port: 41861 (41861), Dst Port: http (80), Seq: 1302, Ack: 66531, Len: 224
    Source port: 41861 (41861)
    Destination port: http (80)
    Sequence number: 1302    (relative sequence number)
    [Next sequence number: 1526    (relative sequence number)]
    Acknowledgement number: 66531    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 64128 (scaled)
    Checksum: 0xf7bb [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 13923731, TSecr 76163939
Hypertext Transfer Protocol
    GET /wiki/skins/common/ajax.
        Request Method: GET
        Request URI: /wiki/skins/common/ajax.
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3858 2008-10-21 11:24:11.215043 192.168.100.130       129.70.186.31         HTTP     HTTP/1.1 200 OK [Packet size limited during capture]

Frame 3858 (324 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.215043000
    [Time delta from previous captured frame: 0.000128000 seconds]
    [Time delta from previous displayed frame: 0.000128000 seconds]
    [Time since reference or first frame: 47290.595607000 seconds]
    Frame Number: 3858
    Frame Length: 324 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 308
    Identification: 0xb810 (47120)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x2123 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 66531, Ack: 1526, Len: 256
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 66531    (relative sequence number)
    [Next sequence number: 66787    (relative sequence number)]
    Acknowledgement number: 1526    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 11200 (scaled)
    Checksum: 0x6c53 [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76163971, TSecr 13923731
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 3857]
        [The RTT to ACK the segment was: 0.000128000 seconds]
Hypertext Transfer Protocol
    HTTP/1.1 200 OK\r\n
        Request Version: HTTP/1.1
        Response Code: 200
    Server: ngi
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3859 2008-10-21 11:24:11.215093 192.168.100.130       129.70.186.31         HTTP     Continuation or non-HTTP traffic[Packet size limited during capture]

Frame 3859 (1516 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.215093000
    [Time delta from previous captured frame: 0.000050000 seconds]
    [Time delta from previous displayed frame: 0.000050000 seconds]
    [Time since reference or first frame: 47290.595657000 seconds]
    Frame Number: 3859
    Frame Length: 1516 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http:data]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0xb811 (47121)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1c7a [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 66787, Ack: 1526, Len: 1448
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 66787    (relative sequence number)
    [Next sequence number: 68235    (relative sequence number)]
    Acknowledgement number: 1526    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 11200 (scaled)
    Checksum: 0x4a35 [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76163971, TSecr 13923731
Hypertext Transfer Protocol
    Data (28 bytes)

0000  2f 2f 20 72 65 6d 6f 74 65 20 73 63 72 69 70 74   // remote script
0010  69 6e 67 20 6c 69 62 72 61 72 79 0a               ing library.
        Data: 2F2F2072656D6F746520736372697074696E67206C696272...
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3860 2008-10-21 11:24:11.215131 192.168.100.130       129.70.186.31         HTTP     Continuation or non-HTTP traffic[Packet size limited during capture]

Frame 3860 (1516 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.215131000
    [Time delta from previous captured frame: 0.000038000 seconds]
    [Time delta from previous displayed frame: 0.000038000 seconds]
    [Time since reference or first frame: 47290.595695000 seconds]
    Frame Number: 3860
    Frame Length: 1516 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http:data]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0xb812 (47122)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1c79 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 68235, Ack: 1526, Len: 1448
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 68235    (relative sequence number)
    [Next sequence number: 69683    (relative sequence number)]
    Acknowledgement number: 1526    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 11200 (scaled)
    Checksum: 0xb163 [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76163971, TSecr 13923731
Hypertext Transfer Protocol
    Data (28 bytes)

0000  69 73 70 61 74 63 68 65 72 2e 70 68 70 0a 2a 20   ispatcher.php.* 
0010  20 20 66 75 6e 63 5f 6e 61 6d 65 20                 func_name 
        Data: 6973706174636865722E7068700A2A20202066756E635F6E...
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3861 2008-10-21 11:24:11.215172 192.168.100.130       129.70.186.31         HTTP     Continuation or non-HTTP traffic[Packet size limited during capture]

Frame 3861 (1516 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.215172000
    [Time delta from previous captured frame: 0.000041000 seconds]
    [Time delta from previous displayed frame: 0.000041000 seconds]
    [Time since reference or first frame: 47290.595736000 seconds]
    Frame Number: 3861
    Frame Length: 1516 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http:data]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0xb813 (47123)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1c78 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 69683, Ack: 1526, Len: 1448
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 69683    (relative sequence number)
    [Next sequence number: 71131    (relative sequence number)]
    Acknowledgement number: 1526    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 11200 (scaled)
    Checksum: 0x304f [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76163971, TSecr 13923731
Hypertext Transfer Protocol
    Data (28 bytes)

0000  61 72 67 73 5b 69 5d 29 3b 0a 09 7d 0a 09 78 20   args[i]);..}..x 
0010  3d 20 73 61 6a 61 78 5f 69 6e 69 74               = sajax_init
        Data: 617267735B695D293B0A097D0A0978203D2073616A61785F...
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3862 2008-10-21 11:24:11.215207 192.168.100.130       129.70.186.31         HTTP     Continuation or non-HTTP traffic[Packet size limited during capture]

Frame 3862 (279 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.215207000
    [Time delta from previous captured frame: 0.000035000 seconds]
    [Time delta from previous displayed frame: 0.000035000 seconds]
    [Time since reference or first frame: 47290.595771000 seconds]
    Frame Number: 3862
    Frame Length: 279 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http:data]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 263
    Identification: 0xb814 (47124)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x214c [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 71131, Ack: 1526, Len: 211
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 71131    (relative sequence number)
    [Next sequence number: 71342    (relative sequence number)]
    Acknowledgement number: 1526    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 11200 (scaled)
    Checksum: 0xc0f4 [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76163971, TSecr 13923731
Hypertext Transfer Protocol
    Data (28 bytes)

0000  20 66 75 6e 63 74 69 6f 6e 20 6f 72 20 6f 62 6a    function or obj
0010  65 63 74 3a 20 22 20 2b 20 74 61 72               ect: " + tar
        Data: 2066756E6374696F6E206F72206F626A6563743A2022202B...
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3863 2008-10-21 11:24:11.240868 129.70.186.31         192.168.100.130       TCP      41861 > http [ACK] Seq=1526 Ack=68235 Win=64128 Len=0 TSV=13923737 TSER=76163971

Frame 3863 (68 bytes on wire, 68 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.240868000
    [Time delta from previous captured frame: 0.025661000 seconds]
    [Time delta from previous displayed frame: 0.025661000 seconds]
    [Time since reference or first frame: 47290.621432000 seconds]
    Frame Number: 3863
    Frame Length: 68 bytes
    Capture Length: 68 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Sent by us (4)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 129.70.186.31 (129.70.186.31), Dst: 192.168.100.130 (192.168.100.130)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x2bb2 (11186)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 53
    Protocol: TCP (0x06)
    Header checksum: 0xb981 [correct]
        [Good: True]
        [Bad : False]
    Source: 129.70.186.31 (129.70.186.31)
    Destination: 192.168.100.130 (192.168.100.130)
Transmission Control Protocol, Src Port: 41861 (41861), Dst Port: http (80), Seq: 1526, Ack: 68235, Len: 0
    Source port: 41861 (41861)
    Destination port: http (80)
    Sequence number: 1526    (relative sequence number)
    Acknowledgement number: 68235    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 64128 (scaled)
    Checksum: 0xfc07 [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 13923737, TSecr 76163971

No.     Time                       Source                Destination           Protocol Info
   3864 2008-10-21 11:24:11.241051 129.70.186.31         192.168.100.130       TCP      41861 > http [ACK] Seq=1526 Ack=71131 Win=64128 Len=0 TSV=13923737 TSER=76163971

Frame 3864 (68 bytes on wire, 68 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.241051000
    [Time delta from previous captured frame: 0.000183000 seconds]
    [Time delta from previous displayed frame: 0.000183000 seconds]
    [Time since reference or first frame: 47290.621615000 seconds]
    Frame Number: 3864
    Frame Length: 68 bytes
    Capture Length: 68 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Sent by us (4)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 129.70.186.31 (129.70.186.31), Dst: 192.168.100.130 (192.168.100.130)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x2bb3 (11187)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 53
    Protocol: TCP (0x06)
    Header checksum: 0xb980 [correct]
        [Good: True]
        [Bad : False]
    Source: 129.70.186.31 (129.70.186.31)
    Destination: 192.168.100.130 (192.168.100.130)
Transmission Control Protocol, Src Port: 41861 (41861), Dst Port: http (80), Seq: 1526, Ack: 71131, Len: 0
    Source port: 41861 (41861)
    Destination port: http (80)
    Sequence number: 1526    (relative sequence number)
    Acknowledgement number: 71131    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 64128 (scaled)
    Checksum: 0xf0b7 [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 13923737, TSecr 76163971

No.     Time                       Source                Destination           Protocol Info
   3865 2008-10-21 11:24:11.242818 129.70.186.31         192.168.100.130       HTTP     GET /wiki/index.php?title=-& [Packet size limited during capture]

Frame 3865 (320 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.242818000
    [Time delta from previous captured frame: 0.001767000 seconds]
    [Time delta from previous displayed frame: 0.001767000 seconds]
    [Time since reference or first frame: 47290.623382000 seconds]
    Frame Number: 3865
    Frame Length: 320 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Sent by us (4)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 129.70.186.31 (129.70.186.31), Dst: 192.168.100.130 (192.168.100.130)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 304
    Identification: 0x2bb4 (11188)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 53
    Protocol: TCP (0x06)
    Header checksum: 0xb883 [correct]
        [Good: True]
        [Bad : False]
    Source: 129.70.186.31 (129.70.186.31)
    Destination: 192.168.100.130 (192.168.100.130)
Transmission Control Protocol, Src Port: 41861 (41861), Dst Port: http (80), Seq: 1526, Ack: 71342, Len: 252
    Source port: 41861 (41861)
    Destination port: http (80)
    Sequence number: 1526    (relative sequence number)
    [Next sequence number: 1778    (relative sequence number)]
    Acknowledgement number: 71342    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 64128 (scaled)
    Checksum: 0x3c38 [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 13923738, TSecr 76163971
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 3862]
        [The RTT to ACK the segment was: 0.027611000 seconds]
Hypertext Transfer Protocol
    GET /wiki/index.php?title=-&
        Request Method: GET
        Request URI: /wiki/index.php?title=-&
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3866 2008-10-21 11:24:11.281562 192.168.100.130       129.70.186.31         HTTP     HTTP/1.1 200 OK [Packet size limited during capture]

Frame 3866 (708 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.281562000
    [Time delta from previous captured frame: 0.038744000 seconds]
    [Time delta from previous displayed frame: 0.038744000 seconds]
    [Time since reference or first frame: 47290.662126000 seconds]
    Frame Number: 3866
    Frame Length: 708 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 692
    Identification: 0xb815 (47125)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1f9e [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 71342, Ack: 1778, Len: 640
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 71342    (relative sequence number)
    [Next sequence number: 71982    (relative sequence number)]
    Acknowledgement number: 1778    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 12224 (scaled)
    Checksum: 0x173b [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76164038, TSecr 13923738
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 3865]
        [The RTT to ACK the segment was: 0.038744000 seconds]
Hypertext Transfer Protocol
    HTTP/1.1 200 OK\r\n
        Request Version: HTTP/1.1
        Response Code: 200
    Server: ngi
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3867 2008-10-21 11:24:11.305801 129.70.186.31         192.168.100.130       HTTP     GET /wiki/skins/common/image [Packet size limited during capture]

Frame 3867 (317 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.305801000
    [Time delta from previous captured frame: 0.024239000 seconds]
    [Time delta from previous displayed frame: 0.024239000 seconds]
    [Time since reference or first frame: 47290.686365000 seconds]
    Frame Number: 3867
    Frame Length: 317 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Sent by us (4)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 129.70.186.31 (129.70.186.31), Dst: 192.168.100.130 (192.168.100.130)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 301
    Identification: 0x2bb5 (11189)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 53
    Protocol: TCP (0x06)
    Header checksum: 0xb885 [correct]
        [Good: True]
        [Bad : False]
    Source: 129.70.186.31 (129.70.186.31)
    Destination: 192.168.100.130 (192.168.100.130)
Transmission Control Protocol, Src Port: 41861 (41861), Dst Port: http (80), Seq: 1778, Ack: 71982, Len: 249
    Source port: 41861 (41861)
    Destination port: http (80)
    Sequence number: 1778    (relative sequence number)
    [Next sequence number: 2027    (relative sequence number)]
    Acknowledgement number: 71982    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 64128 (scaled)
    Checksum: 0xd4e1 [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 13923754, TSecr 76164038
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 3866]
        [The RTT to ACK the segment was: 0.024239000 seconds]
Hypertext Transfer Protocol
    GET /wiki/skins/common/image
        Request Method: GET
        Request URI: /wiki/skins/common/image
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3868 2008-10-21 11:24:11.306040 192.168.100.130       129.70.186.31         HTTP     HTTP/1.1 200 OK [Packet size limited during capture]

Frame 3868 (309 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.306040000
    [Time delta from previous captured frame: 0.000239000 seconds]
    [Time delta from previous displayed frame: 0.000239000 seconds]
    [Time since reference or first frame: 47290.686604000 seconds]
    Frame Number: 3868
    Frame Length: 309 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 293
    Identification: 0xb816 (47126)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x212c [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 71982, Ack: 2027, Len: 241
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 71982    (relative sequence number)
    [Next sequence number: 72223    (relative sequence number)]
    Acknowledgement number: 2027    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 13312 (scaled)
    Checksum: 0xbe56 [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76164062, TSecr 13923754
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 3867]
        [The RTT to ACK the segment was: 0.000239000 seconds]
Hypertext Transfer Protocol
    HTTP/1.1 200 OK\r\n
        Request Version: HTTP/1.1
        Response Code: 200
    Server: ngi
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3869 2008-10-21 11:24:11.306115 192.168.100.130       129.70.186.31         HTTP     Continuation or non-HTTP traffic[Packet size limited during capture]

Frame 3869 (1516 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.306115000
    [Time delta from previous captured frame: 0.000075000 seconds]
    [Time delta from previous displayed frame: 0.000075000 seconds]
    [Time since reference or first frame: 47290.686679000 seconds]
    Frame Number: 3869
    Frame Length: 1516 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http:data]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1500
    Identification: 0xb817 (47127)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1c74 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 72223, Ack: 2027, Len: 1448
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 72223    (relative sequence number)
    [Next sequence number: 73671    (relative sequence number)]
    Acknowledgement number: 2027    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 13312 (scaled)
    Checksum: 0xe7d5 [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76164062, TSecr 13923754
Hypertext Transfer Protocol
    Data (28 bytes)

0000  89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52   .PNG........IHDR
0010  00 00 00 58 00 00 00 1f 08 03 00 00               ...X........
        Data: 89504E470D0A1A0A0000000D49484452000000580000001F...
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3870 2008-10-21 11:24:11.306157 192.168.100.130       129.70.186.31         HTTP     Continuation or non-HTTP traffic[Packet size limited during capture]

Frame 3870 (553 bytes on wire, 96 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.306157000
    [Time delta from previous captured frame: 0.000042000 seconds]
    [Time delta from previous displayed frame: 0.000042000 seconds]
    [Time since reference or first frame: 47290.686721000 seconds]
    Frame Number: 3870
    Frame Length: 553 bytes
    Capture Length: 96 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp:http:data]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 537
    Identification: 0xb818 (47128)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x2036 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 73671, Ack: 2027, Len: 485
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 73671    (relative sequence number)
    [Next sequence number: 74156    (relative sequence number)]
    Acknowledgement number: 2027    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 13312 (scaled)
    Checksum: 0x579c [unchecked, not all data available]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76164062, TSecr 13923754
Hypertext Transfer Protocol
    Data (28 bytes)

0000  81 f7 db 6f 1e b3 0e 26 ac 7b 1d 42 0d 02 d9 bc   ...o...&.{.B....
0010  2a 62 08 e8 12 4d 49 31 3b c3 8c 00               *b...MI1;...
        Data: 81F7DB6F1EB30E26AC7B1D420D02D9BC2A6208E8124D4931...
[Packet size limited during capture: HTTP truncated]

No.     Time                       Source                Destination           Protocol Info
   3871 2008-10-21 11:24:11.330455 129.70.186.31         192.168.100.130       TCP      41861 > http [ACK] Seq=2027 Ack=74156 Win=64128 Len=0 TSV=13923760 TSER=76164062

Frame 3871 (68 bytes on wire, 68 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.330455000
    [Time delta from previous captured frame: 0.024298000 seconds]
    [Time delta from previous displayed frame: 0.024298000 seconds]
    [Time since reference or first frame: 47290.711019000 seconds]
    Frame Number: 3871
    Frame Length: 68 bytes
    Capture Length: 68 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Sent by us (4)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 129.70.186.31 (129.70.186.31), Dst: 192.168.100.130 (192.168.100.130)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x2bb6 (11190)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 53
    Protocol: TCP (0x06)
    Header checksum: 0xb97d [correct]
        [Good: True]
        [Bad : False]
    Source: 129.70.186.31 (129.70.186.31)
    Destination: 192.168.100.130 (192.168.100.130)
Transmission Control Protocol, Src Port: 41861 (41861), Dst Port: http (80), Seq: 2027, Ack: 74156, Len: 0
    Source port: 41861 (41861)
    Destination port: http (80)
    Sequence number: 2027    (relative sequence number)
    Acknowledgement number: 74156    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 64128 (scaled)
    Checksum: 0xe27f [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 13923760, TSecr 76164062
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 3870]
        [The RTT to ACK the segment was: 0.024298000 seconds]

No.     Time                       Source                Destination           Protocol Info
   3872 2008-10-21 11:24:11.331319 129.70.186.31         192.168.100.130       TCP      41861 > http [FIN, ACK] Seq=2027 Ack=74156 Win=64128 Len=0 TSV=13923760 TSER=76164062

Frame 3872 (68 bytes on wire, 68 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.331319000
    [Time delta from previous captured frame: 0.000864000 seconds]
    [Time delta from previous displayed frame: 0.000864000 seconds]
    [Time since reference or first frame: 47290.711883000 seconds]
    Frame Number: 3872
    Frame Length: 68 bytes
    Capture Length: 68 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Sent by us (4)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 129.70.186.31 (129.70.186.31), Dst: 192.168.100.130 (192.168.100.130)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x2bb7 (11191)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 53
    Protocol: TCP (0x06)
    Header checksum: 0xb97c [correct]
        [Good: True]
        [Bad : False]
    Source: 129.70.186.31 (129.70.186.31)
    Destination: 192.168.100.130 (192.168.100.130)
Transmission Control Protocol, Src Port: 41861 (41861), Dst Port: http (80), Seq: 2027, Ack: 74156, Len: 0
    Source port: 41861 (41861)
    Destination port: http (80)
    Sequence number: 2027    (relative sequence number)
    Acknowledgement number: 74156    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
    Window size: 64128 (scaled)
    Checksum: 0xe27e [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 13923760, TSecr 76164062

No.     Time                       Source                Destination           Protocol Info
   3873 2008-10-21 11:24:11.331388 192.168.100.130       129.70.186.31         TCP      http > 41861 [FIN, ACK] Seq=74156 Ack=2028 Win=13312 Len=0 TSV=76164088 TSER=13923760

Frame 3873 (68 bytes on wire, 68 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.331388000
    [Time delta from previous captured frame: 0.000069000 seconds]
    [Time delta from previous displayed frame: 0.000069000 seconds]
    [Time since reference or first frame: 47290.711952000 seconds]
    Frame Number: 3873
    Frame Length: 68 bytes
    Capture Length: 68 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.100.130 (192.168.100.130), Dst: 129.70.186.31 (129.70.186.31)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xb819 (47129)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x221a [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.100.130 (192.168.100.130)
    Destination: 129.70.186.31 (129.70.186.31)
Transmission Control Protocol, Src Port: http (80), Dst Port: 41861 (41861), Seq: 74156, Ack: 2028, Len: 0
    Source port: http (80)
    Destination port: 41861 (41861)
    Sequence number: 74156    (relative sequence number)
    Acknowledgement number: 2028    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
    Window size: 13312 (scaled)
    Checksum: 0xe388 [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 76164088, TSecr 13923760
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 3872]
        [The RTT to ACK the segment was: 0.000069000 seconds]

No.     Time                       Source                Destination           Protocol Info
   3874 2008-10-21 11:24:11.354315 129.70.186.31         192.168.100.130       TCP      41861 > http [ACK] Seq=2028 Ack=74157 Win=64000 Len=0 TSV=13923766 TSER=76164088

Frame 3874 (68 bytes on wire, 68 bytes captured)
    Arrival Time: Oct 21, 2008 11:24:11.354315000
    [Time delta from previous captured frame: 0.022927000 seconds]
    [Time delta from previous displayed frame: 0.022927000 seconds]
    [Time since reference or first frame: 47290.734879000 seconds]
    Frame Number: 3874
    Frame Length: 68 bytes
    Capture Length: 68 bytes
    [Frame is marked: False]
    [Protocols in frame: sll:ip:tcp]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Linux cooked capture
    Packet type: Sent by us (4)
    Link-layer address type: 65535
    Link-layer address length: 0
    Source: <MISSING>
    Protocol: IP (0x0800)
Internet Protocol, Src: 129.70.186.31 (129.70.186.31), Dst: 192.168.100.130 (192.168.100.130)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x2bb8 (11192)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 53
    Protocol: TCP (0x06)
    Header checksum: 0xb97b [correct]
        [Good: True]
        [Bad : False]
    Source: 129.70.186.31 (129.70.186.31)
    Destination: 192.168.100.130 (192.168.100.130)
Transmission Control Protocol, Src Port: 41861 (41861), Dst Port: http (80), Seq: 2028, Ack: 74157, Len: 0
    Source port: 41861 (41861)
    Destination port: http (80)
    Sequence number: 2028    (relative sequence number)
    Acknowledgement number: 74157    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 64000 (scaled)
    Checksum: 0xe25e [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 13923766, TSecr 76164088
    [SEQ/ACK analysis]
        [This is an ACK to the segment in frame: 3873]
        [The RTT to ACK the segment was: 0.022927000 seconds]
