No.     Time        Source                Destination           Protocol Info
     32 58.169597   192.168.1.67          128.30.2.18           HTTP     GET /events/eventcalendar/ical/csail.ics HTTP/1.1

Frame 32 (175 bytes on wire, 175 bytes captured)
    Arrival Time: Mar 22, 2008 15:08:01.808758000
    Time delta from previous packet: 58.169597000 seconds
    Time since reference or first frame: 58.169597000 seconds
    Frame Number: 32
    Packet Length: 175 bytes
    Capture Length: 175 bytes
    Protocols in frame: sll:ip:tcp:http
Linux cooked capture
    Packet type: Sent by us (4)
    Link-layer address type: 1
    Link-layer address length: 6
    Source: laptop.localdomain (00:40:45:26:b2:a2)
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.1.67 (192.168.1.67), Dst: 128.30.2.18 (128.30.2.18)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 159
    Identification: 0x587e (22654)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x9dbf [correct]
        Good: True
        Bad : False
    Source: 192.168.1.67 (192.168.1.67)
    Destination: 128.30.2.18 (128.30.2.18)
Transmission Control Protocol, Src Port: 16022 (16022), Dst Port: http (80), Seq: 0, Ack: 0, Len: 107
    Source port: 16022 (16022)
    Destination port: http (80)
    Sequence number: 0    (relative sequence number)
    Next sequence number: 107    (relative sequence number)
    Acknowledgement number: 0    (relative ack number)
    Header length: 32 bytes
    Flags: 0x0018 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 16652
    Checksum: 0x5437 [correct]
    Options: (12 bytes)
        NOP
        NOP
        Time stamp: tsval 2626857, tsecr 3548169294
Hypertext Transfer Protocol
    GET /events/eventcalendar/ical/csail.ics HTTP/1.1\r\n
        Request Method: GET
        Request URI: /events/eventcalendar/ical/csail.ics
        Request Version: HTTP/1.1
    Host: www.csail.mit.edu\r\n
    User-Agent: Evolution/1.6.0\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
     33 58.169750   192.168.1.67          128.30.2.18           TCP      16022 > http [FIN, ACK] Seq=107 Ack=0 Win=16652 Len=0 TSV=2626857 TSER=3548169294

Frame 33 (68 bytes on wire, 68 bytes captured)
    Arrival Time: Mar 22, 2008 15:08:01.808911000
    Time delta from previous packet: 0.000153000 seconds
    Time since reference or first frame: 58.169750000 seconds
    Frame Number: 33
    Packet Length: 68 bytes
    Capture Length: 68 bytes
    Protocols in frame: sll:ip:tcp
Linux cooked capture
    Packet type: Sent by us (4)
    Link-layer address type: 1
    Link-layer address length: 6
    Source: laptop.localdomain (00:40:45:26:b2:a2)
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.1.67 (192.168.1.67), Dst: 128.30.2.18 (128.30.2.18)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x587f (22655)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x9e29 [correct]
        Good: True
        Bad : False
    Source: 192.168.1.67 (192.168.1.67)
    Destination: 128.30.2.18 (128.30.2.18)
Transmission Control Protocol, Src Port: 16022 (16022), Dst Port: http (80), Seq: 107, Ack: 0, Len: 0
    Source port: 16022 (16022)
    Destination port: http (80)
    Sequence number: 107    (relative sequence number)
    Acknowledgement number: 0    (relative ack number)
    Header length: 32 bytes
    Flags: 0x0011 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
    Window size: 16652
    Checksum: 0x5214 [correct]
    Options: (12 bytes)
        NOP
        NOP
        Time stamp: tsval 2626857, tsecr 3548169294

No.     Time        Source                Destination           Protocol Info
     34 58.170122   192.168.1.67          128.30.2.18           TCP      7182 > http [SYN] Seq=0 Ack=0 Win=5840 Len=0 MSS=1460 TSV=2626857 TSER=0 WS=2

Frame 34 (76 bytes on wire, 76 bytes captured)
    Arrival Time: Mar 22, 2008 15:08:01.809283000
    Time delta from previous packet: 0.000372000 seconds
    Time since reference or first frame: 58.170122000 seconds
    Frame Number: 34
    Packet Length: 76 bytes
    Capture Length: 76 bytes
    Protocols in frame: sll:ip:tcp
Linux cooked capture
    Packet type: Sent by us (4)
    Link-layer address type: 1
    Link-layer address length: 6
    Source: laptop.localdomain (00:40:45:26:b2:a2)
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.1.67 (192.168.1.67), Dst: 128.30.2.18 (128.30.2.18)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0xda66 (55910)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1c3a [correct]
        Good: True
        Bad : False
    Source: 192.168.1.67 (192.168.1.67)
    Destination: 128.30.2.18 (128.30.2.18)
Transmission Control Protocol, Src Port: 7182 (7182), Dst Port: http (80), Seq: 0, Ack: 0, Len: 0
    Source port: 7182 (7182)
    Destination port: http (80)
    Sequence number: 0    (relative sequence number)
    Header length: 40 bytes
    Flags: 0x0002 (SYN)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...0 .... = Acknowledgment: Not set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
        .... ...0 = Fin: Not set
    Window size: 5840
    Checksum: 0x74e1 [correct]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        SACK permitted
        Time stamp: tsval 2626857, tsecr 0
        NOP
        Window scale: 2 (multiply by 4)

No.     Time        Source                Destination           Protocol Info
     35 58.381328   192.168.1.67          128.30.2.18           HTTP     [TCP Retransmission] GET /events/eventcalendar/ical/csail.ics HTTP/1.1

Frame 35 (175 bytes on wire, 175 bytes captured)
    Arrival Time: Mar 22, 2008 15:08:02.020489000
    Time delta from previous packet: 0.211578000 seconds
    Time since reference or first frame: 58.381328000 seconds
    Frame Number: 35
    Packet Length: 175 bytes
    Capture Length: 175 bytes
    Protocols in frame: sll:ip:tcp:http
Linux cooked capture
    Packet type: Sent by us (4)
    Link-layer address type: 1
    Link-layer address length: 6
    Source: laptop.localdomain (00:40:45:26:b2:a2)
    Protocol: IP (0x0800)
Internet Protocol, Src: 192.168.1.67 (192.168.1.67), Dst: 128.30.2.18 (128.30.2.18)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 159
    Identification: 0x5880 (22656)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x9dbd [correct]
        Good: True
        Bad : False
    Source: 192.168.1.67 (192.168.1.67)
    Destination: 128.30.2.18 (128.30.2.18)
Transmission Control Protocol, Src Port: 16022 (16022), Dst Port: http (80), Seq: 0, Ack: 0, Len: 107
    Source port: 16022 (16022)
    Destination port: http (80)
    Sequence number: 0    (relative sequence number)
    Next sequence number: 107    (relative sequence number)
    Acknowledgement number: 0    (relative ack number)
    Header length: 32 bytes
    Flags: 0x0019 (FIN, PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
    Window size: 16652
    Checksum: 0x5401 [correct]
    Options: (12 bytes)
        NOP
        NOP
        Time stamp: tsval 2626910, tsecr 3548169294
    SEQ/ACK analysis
        TCP Analysis Flags
            This frame is a (suspected) retransmission
            The RTO for this segment was: 0.211578000 seconds
            RTO based on delta from frame: 33
Hypertext Transfer Protocol
    GET /events/eventcalendar/ical/csail.ics HTTP/1.1\r\n
        Request Method: GET
        Request URI: /events/eventcalendar/ical/csail.ics
        Request Version: HTTP/1.1
    Host: www.csail.mit.edu\r\n
    User-Agent: Evolution/1.6.0\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
     36 58.416129   192.168.1.1                                 ARP      Who has 192.168.1.67?  Tell 192.168.1.1

Frame 36 (62 bytes on wire, 62 bytes captured)
    Arrival Time: Mar 22, 2008 15:08:02.055290000
    Time delta from previous packet: 0.034801000 seconds
    Time since reference or first frame: 58.416129000 seconds
    Frame Number: 36
    Packet Length: 62 bytes
    Capture Length: 62 bytes
    Protocols in frame: sll:arp
Linux cooked capture
    Packet type: Broadcast (1)
    Link-layer address type: 1
    Link-layer address length: 6
    Source: 192.168.1.1 (00:06:25:bc:25:09)
    Protocol: ARP (0x0806)
    Trailer: 000000000000000000000000000076A0F4FE
Address Resolution Protocol (request)
    Hardware type: Ethernet (0x0001)
    Protocol type: IP (0x0800)
    Hardware size: 6
    Protocol size: 4
    Opcode: request (0x0001)
    Sender MAC address: 192.168.1.1 (00:06:25:bc:25:09)
    Sender IP address: 192.168.1.1 (192.168.1.1)
    Target MAC address: 00:00:00_00:00:00 (00:00:00:00:00:00)
    Target IP address: 192.168.1.67 (192.168.1.67)

No.     Time        Source                Destination           Protocol Info
     37 58.416162   laptop.localdomain                          ARP      192.168.1.67 is at 00:40:45:26:b2:a2

Frame 37 (44 bytes on wire, 44 bytes captured)
    Arrival Time: Mar 22, 2008 15:08:02.055323000
    Time delta from previous packet: 0.034834000 seconds
    Time since reference or first frame: 58.416162000 seconds
    Frame Number: 37
    Packet Length: 44 bytes
    Capture Length: 44 bytes
    Protocols in frame: sll:arp
Linux cooked capture
    Packet type: Sent by us (4)
    Link-layer address type: 1
    Link-layer address length: 6
    Source: laptop.localdomain (00:40:45:26:b2:a2)
    Protocol: ARP (0x0806)
Address Resolution Protocol (reply)
    Hardware type: Ethernet (0x0001)
    Protocol type: IP (0x0800)
    Hardware size: 6
    Protocol size: 4
    Opcode: reply (0x0002)
    Sender MAC address: laptop.localdomain (00:40:45:26:b2:a2)
    Sender IP address: 192.168.1.67 (192.168.1.67)
    Target MAC address: 192.168.1.1 (00:06:25:bc:25:09)
    Target IP address: 192.168.1.1 (192.168.1.1)

No.     Time        Source                Destination           Protocol Info
     38 58.416491   128.30.2.18           192.168.1.67          TCP      http > 16022 [RST] Seq=0 Ack=3088247580 Win=0 Len=0

Frame 38 (62 bytes on wire, 62 bytes captured)
    Arrival Time: Mar 22, 2008 15:08:02.055652000
    Time delta from previous packet: 0.035163000 seconds
    Time since reference or first frame: 58.416491000 seconds
    Frame Number: 38
    Packet Length: 62 bytes
    Capture Length: 62 bytes
    Protocols in frame: sll:ip:tcp
Linux cooked capture
    Packet type: Unicast to us (0)
    Link-layer address type: 1
    Link-layer address length: 6
    Source: 192.168.1.1 (00:06:25:bc:25:09)
    Protocol: IP (0x0800)
    Trailer: 00003051FE52
Internet Protocol, Src: 128.30.2.18 (128.30.2.18), Dst: 192.168.1.67 (192.168.1.67)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 40
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 54
    Protocol: TCP (0x06)
    Header checksum: 0x00b5 [correct]
        Good: True
        Bad : False
    Source: 128.30.2.18 (128.30.2.18)
    Destination: 192.168.1.67 (192.168.1.67)
Transmission Control Protocol, Src Port: http (80), Dst Port: 16022 (16022), Seq: 0, Ack: 3088247580, Len: 0
    Source port: http (80)
    Destination port: 16022 (16022)
    Sequence number: 0    (relative sequence number)
    Header length: 20 bytes
    Flags: 0x0004 (RST)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...0 .... = Acknowledgment: Not set
        .... 0... = Push: Not set
        .... .1.. = Reset: Set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 0
    Checksum: 0xd69d [correct]
