Mara outside good - - - - - - - - - - - - - - - - - - - - Frame 1 - - - - - - - - - - - - - - - - - - - - Frame Source Address Dest. Address Size Rel. Time Delta Time Abs. Time Summary 1 [212.125.81.163] [213.242.176.130] 60 000:00:00.000 0.000.000 05/22/2002 02:09:14 PM TCP: D=80 S=32770 SYN SEQ=826885378 LEN=0 WIN=256 DLC: ----- DLC Header ----- DLC: DLC: Frame 1 arrived at 14:09:14.3042; frame size is 60 (003C hex) bytes. DLC: Destination = Station 00D058A3A5F0 DLC: Source = Station 0050DA4143D2 DLC: Ethertype = 0800 (IP) DLC: IP: ----- IP Header ----- IP: IP: Version = 4, header length = 20 bytes IP: Type of service = 00 IP: 000. .... = routine IP: ...0 .... = normal delay IP: .... 0... = normal throughput IP: .... .0.. = normal reliability IP: Total length = 44 bytes IP: Identification = 9440 IP: Flags = 4X IP: .1.. .... = don't fragment IP: ..0. .... = last fragment IP: Fragment offset = 0 bytes IP: Time to live = 62 seconds/hops IP: Protocol = 6 (TCP) IP: Header checksum = 6B56 (correct) IP: Source address = [212.125.81.163] IP: Destination address = [213.242.176.130] IP: No options IP: TCP: ----- TCP header ----- TCP: TCP: Source port = 32770 TCP: Destination port = 80 (WWW-HTTP) TCP: Initial sequence number = 826885378 TCP: Next expected Seq number= 826885379 TCP: Data offset = 24 bytes TCP: Flags = 02 TCP: ..0. .... = (No urgent pointer) TCP: ...0 .... = (No acknowledgment) TCP: .... 0... = (No push) TCP: .... .0.. = (No reset) TCP: .... ..1. = SYN TCP: .... ...0 = (No FIN) TCP: Window = 256 TCP: Checksum = F8A6 (correct) TCP: TCP: Options follow TCP: Maximum segment size = 256 TCP: ADDR HEX ASCII 0000: 00 d0 58 a3 a5 f0 00 50 da 41 43 d2 08 00 45 00 | .ÐX£...P.AC...E. 0010: 00 2c 24 e0 40 00 3e 06 6b 56 d4 7d 51 a3 d5 f2 | .,$.@.>.kV.}Q£.. 0020: b0 82 80 02 00 50 31 49 45 02 00 00 00 00 60 02 | °....P1IE.....`. 0030: 01 00 f8 a6 00 00 02 04 01 00 00 00 | ............ - - - - - - - - - - - - - - - - - - - - Frame 2 - - - - - - - - - - - - - - - - - - - - Frame Source Address Dest. Address Size Rel. Time Delta Time Abs. Time Summary 2 [213.242.176.130] [212.125.81.163] 60 000:00:00.183 0.183.162 05/22/2002 02:09:14 PM TCP: D=32770 S=80 SYN ACK=826885379 SEQ=773922057 LEN=0 WIN=5840 DLC: ----- DLC Header ----- DLC: DLC: Frame 2 arrived at 14:09:14.4874; frame size is 60 (003C hex) bytes. DLC: Destination = Station 0050DA4143D2 DLC: Source = Station 00D058A3A5F0 DLC: Ethertype = 0800 (IP) DLC: IP: ----- IP Header ----- IP: IP: Version = 4, header length = 20 bytes IP: Type of service = 00 IP: 000. .... = routine IP: ...0 .... = normal delay IP: .... 0... = normal throughput IP: .... .0.. = normal reliability IP: Total length = 44 bytes IP: Identification = 0 IP: Flags = 4X IP: .1.. .... = don't fragment IP: ..0. .... = last fragment IP: Fragment offset = 0 bytes IP: Time to live = 45 seconds/hops IP: Protocol = 6 (TCP) IP: Header checksum = A136 (correct) IP: Source address = [213.242.176.130] IP: Destination address = [212.125.81.163] IP: No options IP: TCP: ----- TCP header ----- TCP: TCP: Source port = 80 (WWW-HTTP) TCP: Destination port = 32770 TCP: Initial sequence number = 773922057 TCP: Next expected Seq number= 773922058 TCP: Acknowledgment number = 826885379 TCP: Data offset = 24 bytes TCP: Flags = 12 TCP: ..0. .... = (No urgent pointer) TCP: ...1 .... = Acknowledgment TCP: .... 0... = (No push) TCP: .... .0.. = (No reset) TCP: .... ..1. = SYN TCP: .... ...0 = (No FIN) TCP: Window = 5840 TCP: Checksum = 92E7 (correct) TCP: TCP: Options follow TCP: Maximum segment size = 1460 TCP: ADDR HEX ASCII 0000: 00 50 da 41 43 d2 00 d0 58 a3 a5 f0 08 00 45 00 | .P.AC..ÐX£....E. 0010: 00 2c 00 00 40 00 2d 06 a1 36 d5 f2 b0 82 d4 7d | .,..@.-..6..°..} 0020: 51 a3 00 50 80 02 2e 21 1d 09 31 49 45 03 60 12 | Q£.P...!..1IE.`. 0030: 16 d0 92 e7 00 00 02 04 05 b4 c1 10 | .Ð.ç......Á. - - - - - - - - - - - - - - - - - - - - Frame 3 - - - - - - - - - - - - - - - - - - - - Frame Source Address Dest. Address Size Rel. Time Delta Time Abs. Time Summary 3 [212.125.81.163] [213.242.176.130] 60 000:00:00.183 0.000.431 05/22/2002 02:09:14 PM TCP: D=80 S=32770 ACK=773922058 WIN=311 DLC: ----- DLC Header ----- DLC: DLC: Frame 3 arrived at 14:09:14.4878; frame size is 60 (003C hex) bytes. DLC: Destination = Station 00D058A3A5F0 DLC: Source = Station 0050DA4143D2 DLC: Ethertype = 0800 (IP) DLC: IP: ----- IP Header ----- IP: IP: Version = 4, header length = 20 bytes IP: Type of service = 00 IP: 000. .... = routine IP: ...0 .... = normal delay IP: .... 0... = normal throughput IP: .... .0.. = normal reliability IP: Total length = 40 bytes IP: Identification = 9441 IP: Flags = 4X IP: .1.. .... = don't fragment IP: ..0. .... = last fragment IP: Fragment offset = 0 bytes IP: Time to live = 62 seconds/hops IP: Protocol = 6 (TCP) IP: Header checksum = 6B59 (correct) IP: Source address = [212.125.81.163] IP: Destination address = [213.242.176.130] IP: No options IP: TCP: ----- TCP header ----- TCP: TCP: Source port = 32770 TCP: Destination port = 80 (WWW-HTTP) TCP: Sequence number = 826885379 TCP: Next expected Seq number= 826885379 TCP: Acknowledgment number = 773922058 TCP: Data offset = 20 bytes TCP: Flags = 10 TCP: ..0. .... = (No urgent pointer) TCP: ...1 .... = Acknowledgment TCP: .... 0... = (No push) TCP: .... .0.. = (No reset) TCP: .... ..0. = (No SYN) TCP: .... ...0 = (No FIN) TCP: Window = 311 TCP: Checksum = C03D (correct) TCP: No TCP options TCP: ADDR HEX ASCII 0000: 00 d0 58 a3 a5 f0 00 50 da 41 43 d2 08 00 45 00 | .ÐX£...P.AC...E. 0010: 00 28 24 e1 40 00 3e 06 6b 59 d4 7d 51 a3 d5 f2 | .($á@.>.kY.}Q£.. 0020: b0 82 80 02 00 50 31 49 45 03 2e 21 1d 0a 50 10 | °....P1IE..!..P. 0030: 01 37 c0 3d 00 00 00 00 00 00 00 00 | .7.=........ - - - - - - - - - - - - - - - - - - - - Frame 4 - - - - - - - - - - - - - - - - - - - - Frame Source Address Dest. Address Size Rel. Time Delta Time Abs. Time Summary 4 [212.125.81.163] [213.242.176.130] 182 000:00:00.187 0.004.274 05/22/2002 02:09:14 PM HTTP: C Port=32770 GET /home.php HTTP/1.0 DLC: ----- DLC Header ----- DLC: DLC: Frame 4 arrived at 14:09:14.4921; frame size is 182 (00B6 hex) bytes. DLC: Destination = Station 00D058A3A5F0 DLC: Source = Station 0050DA4143D2 DLC: Ethertype = 0800 (IP) DLC: IP: ----- IP Header ----- IP: IP: Version = 4, header length = 20 bytes IP: Type of service = 00 IP: 000. .... = routine IP: ...0 .... = normal delay IP: .... 0... = normal throughput IP: .... .0.. = normal reliability IP: Total length = 168 bytes IP: Identification = 9442 IP: Flags = 4X IP: .1.. .... = don't fragment IP: ..0. .... = last fragment IP: Fragment offset = 0 bytes IP: Time to live = 62 seconds/hops IP: Protocol = 6 (TCP) IP: Header checksum = 6AD8 (correct) IP: Source address = [212.125.81.163] IP: Destination address = [213.242.176.130] IP: No options IP: TCP: ----- TCP header ----- TCP: TCP: Source port = 32770 TCP: Destination port = 80 (WWW-HTTP) TCP: Sequence number = 826885379 TCP: Next expected Seq number= 826885507 TCP: Acknowledgment number = 773922058 TCP: Data offset = 20 bytes TCP: Flags = 18 TCP: ..0. .... = (No urgent pointer) TCP: ...1 .... = Acknowledgment TCP: .... 1... = Push TCP: .... .0.. = (No reset) TCP: .... ..0. = (No SYN) TCP: .... ...0 = (No FIN) TCP: Window = 311 TCP: Checksum = 059F (correct) TCP: No TCP options TCP: [128 Bytes of data] TCP: HTTP: ----- Hypertext Transfer Protocol ----- HTTP: HTTP: Line 1: GET /home.php HTTP/1.0 HTTP: Line 2: Accept: */* HTTP: Line 3: Accept-Language: en-gb HTTP: Line 4: Accept-Encoding: gzip, deflate HTTP: Line 5: User-Agent: Mozilla/4.0 (compatible HTTP: ADDR HEX ASCII 0000: 00 d0 58 a3 a5 f0 00 50 da 41 43 d2 08 00 45 00 | .ÐX£...P.AC...E. 0010: 00 a8 24 e2 40 00 3e 06 6a d8 d4 7d 51 a3 d5 f2 | ..$â@.>.j..}Q£.. 0020: b0 82 80 02 00 50 31 49 45 03 2e 21 1d 0a 50 18 | °....P1IE..!..P. 0030: 01 37 05 9f 00 00 47 45 54 20 2f 68 6f 6d 65 2e | .7....GET /home. 0040: 70 68 70 20 48 54 54 50 2f 31 2e 30 0d 0a 41 63 | php HTTP/1.0..Ac 0050: 63 65 70 74 3a 20 2a 2f 2a 0d 0a 41 63 63 65 70 | cept: */*..Accep 0060: 74 2d 4c 61 6e 67 75 61 67 65 3a 20 65 6e 2d 67 | t-Language: en-g 0070: 62 0d 0a 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 | b..Accept-Encodi 0080: 6e 67 3a 20 67 7a 69 70 2c 20 64 65 66 6c 61 74 | ng: gzip, deflat 0090: 65 0d 0a 55 73 65 72 2d 41 67 65 6e 74 3a 20 4d | e..User-Agent: M 00a0: 6f 7a 69 6c 6c 61 2f 34 2e 30 20 28 63 6f 6d 70 | ozilla/4.0 (comp 00b0: 61 74 69 62 6c 65 | atible